From f4787355a4a7e172c4ba77d160d7a21a5b8032e6 Mon Sep 17 00:00:00 2001
From: Vincent Ambo <tazjin@tvl.su>
Date: Sun, 8 Oct 2023 19:30:40 +0300
Subject: chore(ops/modules): enable passwordless sudo in users module

Change-Id: I8522a106bbadacf1b5720b4cd1102052aa360ff0
Reviewed-on: https://cl.tvl.fyi/c/depot/+/9575
Tested-by: BuildkiteCI
Reviewed-by: flokli <flokli@flokli.de>
---
 ops/modules/tvl-users.nix | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'ops/modules')

diff --git a/ops/modules/tvl-users.nix b/ops/modules/tvl-users.nix
index 31a1a0d2cb83..d8269746a8f1 100644
--- a/ops/modules/tvl-users.nix
+++ b/ops/modules/tvl-users.nix
@@ -77,4 +77,9 @@
     rxvt-unicode-unwrapped.terminfo
     kitty.terminfo
   ];
+
+  security.sudo.extraRules = [{
+    groups = [ "wheel" ];
+    commands = [{ command = "ALL"; options = [ "NOPASSWD" ]; }];
+  }];
 }
-- 
cgit 1.4.1