31 lines
751 B
Nix
31 lines
751 B
Nix
{ pkgs, config, userSettings, ... }:
|
|
{
|
|
# Uses rust-based sudo
|
|
security.sudo-rs = {
|
|
enable = true;
|
|
execWheelOnly = false;
|
|
wheelNeedsPassword = false; # allows sudo without password for those in the wheel group
|
|
};
|
|
|
|
users.users.root = {
|
|
isSystemUser = true;
|
|
extraGroups = [
|
|
"wheel" # needed for sudo without password
|
|
"docker" # needed for docker without sudo
|
|
];
|
|
openssh.authorizedKeys.keyFiles = [ /root/.ssh/authorized_keys ];
|
|
};
|
|
|
|
home-manager = {
|
|
useGlobalPkgs = true;
|
|
users.root = {
|
|
home.stateVersion = config.system.stateVersion;
|
|
imports = [ ./home-manager/git.nix ];
|
|
programs.vscode = {
|
|
enable = true;
|
|
package = pkgs.vscode.fhs;
|
|
};
|
|
};
|
|
};
|
|
}
|