feat: restrict nix commands to sudoers

2022-12-23 15:28:14 +01:00 · 2022-12-23 15:28:14 +01:00 · 1f2a2a706d
parent 80990950a0
commit 1f2a2a706d
1 changed files with 3 additions and 0 deletions
--- a/hosts/neodymium/configuration.nix
+++ b/hosts/neodymium/configuration.nix
@ -26,6 +26,9 @@ in {
  # clean /tmp at each boot
  boot.cleanTmpDir = true;

+  # restrict nix command to sudoers
+  nix.allowedUsers = [ "@wheel" ];
+
  # hardware
  hardware = {
    enableRedistributableFirmware = true;