flakes/hosts/winter/security.nix

19 lines
344 B
Nix

{ config, pkgs, ... }: {
networking.firewall.enable = false;
services.openssh.enable = true;
security = {
polkit.enable = true;
sudo.enable = false;
doas = {
enable = true;
extraRules = [
{
groups = ["wheel"];
keepEnv = true;
persist = true;
}
];
};
};
}