From 1a088c385a74badd9f60dd90db43bf50540d4526 Mon Sep 17 00:00:00 2001
From: Jasper Ras <jras@hostnet.nl>
Date: Tue, 11 Feb 2025 11:17:14 +0100
Subject: Dont allow passwordless sudo on work host :)

---
 configuration/core/users.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'configuration/core')

diff --git a/configuration/core/users.nix b/configuration/core/users.nix
index ec12a9f..b1a30ed 100644
--- a/configuration/core/users.nix
+++ b/configuration/core/users.nix
@@ -2,8 +2,8 @@
 {
   programs.zsh.enable = true;
 
-  security.sudo.execWheelOnly = true;
-  security.sudo.wheelNeedsPassword = false;
+  security.sudo.execWheelOnly = lib.mkDefault true;
+  security.sudo.wheelNeedsPassword = lib.mkDefault false;
 
   users.users.jras = {
     createHome = true;
-- 
cgit v1.2.3