🔒 [pi4] Do not require password for sudo️

2025-08-12 16:35:19 +00:00
parent db3e754114
commit 859a0e22c2
1 changed files with 15 additions and 0 deletions
--- a/hosts/pi4/security/default.nix
+++ b/hosts/pi4/security/default.nix
@ -1,7 +1,22 @@
+{ systemConfig, ... }:
+
 {
  imports = [
    ./firewall.nix
  ];

+  security.sudo.extraRules = [
+    {
+      users = [ systemConfig.username ];
+      runAs = "ALL:ALL";
+      commands = [
+        {
+          command = "ALL";
+          options = [ "NOPASSWD" ];
+        }
+      ];
+    }
+  ];
+
  services.pcscd.enable = true;
 }