diff --git a/public/public.nix b/public/public.nix index c184840..2e0eaf7 100644 --- a/public/public.nix +++ b/public/public.nix @@ -13,6 +13,7 @@ in ./environment.nix ./localisation.nix #./network-ipv6.nix + ./sudo.nix ./service-haveged.nix ./service-monitoring.nix ./service-ssh.nix diff --git a/public/sudo.nix b/public/sudo.nix new file mode 100644 index 0000000..6b67ec7 --- /dev/null +++ b/public/sudo.nix @@ -0,0 +1,17 @@ +{ config, lib, pkgs, ... }: + +let + inherit (lib) mkIf mkMerge mkThenElse; + cfg = config.r6d.config-generator; + computers = config.r6d.computers; + profiles = config.r6d.profiles; +in + +mkIf true { + + # Authorisation de certaines applications par sudo sans mot de passe + + security.sudo.extraConfig = '' + %users ALL = NOPASSWD: ${pkgs.mtr}/bin/mtr + ''; +}