fix group and command
This commit is contained in:
@@ -34,7 +34,8 @@
|
||||
"nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
|
||||
];
|
||||
trusted-users = [ "root" ];
|
||||
|
||||
build-users-group = "nixbld";
|
||||
|
||||
# Enable local binary cache
|
||||
keep-outputs = true;
|
||||
keep-derivations = true;
|
||||
|
||||
@@ -16,12 +16,15 @@
|
||||
"wheel"
|
||||
"networkmanager"
|
||||
"audio"
|
||||
"nixbld"
|
||||
];
|
||||
openssh.authorizedKeys.keys = [
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
binPath = "${pkgs.nix}/bin";
|
||||
|
||||
# DO NOT promote the specified user to input password for `nix-store` and `nix-copy-closure`
|
||||
security.sudo = {
|
||||
# wheelNeedsPassword = false;
|
||||
@@ -31,7 +34,7 @@
|
||||
commands =
|
||||
[
|
||||
{
|
||||
command = "/run/current-system/sw/bin/nix-store";
|
||||
command = "${binPath}/nix-store";
|
||||
options = [ "NOPASSWD" ];
|
||||
}
|
||||
{
|
||||
@@ -39,15 +42,11 @@
|
||||
options = [ "NOPASSWD" "SETENV" ];
|
||||
}
|
||||
{
|
||||
command = "${pkgs.systemd}/bin/systemctl suspend";
|
||||
command = "${binPath}/reboot";
|
||||
options = [ "NOPASSWD" ];
|
||||
}
|
||||
{
|
||||
command = "${pkgs.systemd}/bin/reboot";
|
||||
options = [ "NOPASSWD" ];
|
||||
}
|
||||
{
|
||||
command = "${pkgs.systemd}/bin/poweroff";
|
||||
command = "${binPath}/bin/poweroff";
|
||||
options = [ "NOPASSWD" ];
|
||||
}
|
||||
];
|
||||
|
||||
Reference in New Issue
Block a user