ooknet/modules/nixos/base/security/sudo.nix

15 lines
430 B
Nix

{
security = {
sudo = {
# allow wheel user to execute sudo without a password
wheelNeedsPassword = false;
# only allow users in the wheel access to sudo
execWheelOnly = true;
extraConfig = ''
Defaults pwfeedback # password feedback
Defaults lecture = never # disable warning message
Defaults timestamp_timeout=10 # set sudo timeout to 10 minutes
'';
};
};
}