From 5db52a4f841e9f0dbc0ecb5c0ae1360f0371ae2a Mon Sep 17 00:00:00 2001 From: Jan-Bulthuis Date: Fri, 30 May 2025 16:22:09 +0200 Subject: [PATCH] Removed need for password for local wheel group on VMs --- profiles/nixos/vm.nix | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/profiles/nixos/vm.nix b/profiles/nixos/vm.nix index 07bc2e4..c68573b 100644 --- a/profiles/nixos/vm.nix +++ b/profiles/nixos/vm.nix @@ -35,12 +35,7 @@ in # Local user modules.secrets.secrets."passwords/local-hashed".neededForUsers = true; services.getty.autologinUser = "local"; - security.sudo.extraRules = [ - { - users = [ "local" ]; - options = [ "NOPASSWD" ]; - } - ]; + security.sudo.wheelNeedsPassword = false; users.mutableUsers = false; users.users.local = { hashedPasswordFile = config.sops.secrets."passwords/local-hashed".path;