From 32f0b4e7c60318b782387f8cbb164d9326fc6182 Mon Sep 17 00:00:00 2001 From: reidlab Date: Tue, 4 Jun 2024 18:05:44 -0700 Subject: [PATCH] doas! --- hosts/nixos-server-reid/default.nix | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/hosts/nixos-server-reid/default.nix b/hosts/nixos-server-reid/default.nix index 6c90b9c..33996e9 100755 --- a/hosts/nixos-server-reid/default.nix +++ b/hosts/nixos-server-reid/default.nix @@ -44,7 +44,13 @@ in { mosh.enable = true; }; - security.useDoas = false; + security.useDoas = true; + }; + + security.doas = { + extraRules = [ + { users = [ "reidlab" ]; noPass = true; persist = false; keepEnv = true; } + ]; }; # enable network manager - probably not the best on a single server but Oh Well