From 53f5e201981a974e40596c0dbbce2ed07e83927a Mon Sep 17 00:00:00 2001
From: Freya Murphy <freya@freyacat.org>
Date: Wed, 31 Dec 2025 01:49:48 -0500
Subject: switch to sudo-rs

---
 system/default.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'system/default.nix')

diff --git a/system/default.nix b/system/default.nix
index 0ee0414..9e8ab90 100644
--- a/system/default.nix
+++ b/system/default.nix
@@ -89,6 +89,7 @@
     wget
   ];
 
+  environment.defaultPackages = lib.mkForce [];
   environment.systemPackages = config.extraPackages;
 
   # system shell
@@ -131,4 +132,11 @@
 
   # certs
   security.pki.certificateFiles = inputs.self.lib.certs;
+
+  # sudo
+  security.sudo.enable = false;
+  security.sudo-rs = {
+    enable = true;
+    execWheelOnly = true;
+  };
 }
-- 
cgit v1.2.3-freya