primrose/.files
1
0
Fork 0
mirror of https://codeberg.org/leana8959/.files.git synced 2025-12-06 06:39:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

sudo-conf: make doas inherit PATH for just

Browse source
This commit is contained in:
Primrose 2025-11-02 11:55:17 +08:00
parent 16a1666570
commit a1024668db
Signed by: primrose
GPG key ID: 4E887A4CA9714ADA
1 changed files with 11 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

12
nix/nixosModules/common/sudo-conf.nix
View file

@ -1,8 +1,18 @@
{pkgs, ...}: { {pkgs, ...}: {
security.doas.enable = true;
security.sudo.enable = false; security.sudo.enable = false;
environment.systemPackages = [ environment.systemPackages = [
pkgs.doas-sudo-shim pkgs.doas-sudo-shim
]; ];
security.doas = {
enable = true;
extraRules = [
{
# invoke just with doas directly as a nixos-rebuild helper
users = [":wheel"];
setEnv = ["PATH"];
cmd = "just";
}
];
};
} }