Add all of iogamaster modules
This commit is contained in:
34
modules/nixos/system/security/doas/default.nix
Normal file
34
modules/nixos/system/security/doas/default.nix
Normal file
@@ -0,0 +1,34 @@
|
||||
{
|
||||
options,
|
||||
config,
|
||||
lib,
|
||||
...
|
||||
}:
|
||||
with lib;
|
||||
with lib.frajul; let
|
||||
cfg = config.system.security.doas;
|
||||
in {
|
||||
options.system.security.doas = {
|
||||
enable = mkBoolOpt false "Whether or not to replace sudo with doas.";
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
# Disable sudo
|
||||
security.sudo.enable = false;
|
||||
|
||||
# Enable and configure `doas`.
|
||||
security.doas = {
|
||||
enable = true;
|
||||
extraRules = [
|
||||
{
|
||||
users = [config.user.name];
|
||||
noPass = true;
|
||||
keepEnv = true;
|
||||
}
|
||||
];
|
||||
};
|
||||
|
||||
# Add an alias to the shell for backward-compat and convenience.
|
||||
environment.shellAliases = {sudo = "doas";};
|
||||
};
|
||||
}
|
Reference in New Issue
Block a user