Enable passwordless wheel sudo and add /run/openbao and /run/secrets

2026-01-12 09:55:01 -06:00 · 2026-01-12 09:55:01 -06:00 · 128209e4aa
commit 128209e4aa
parent 512bd5896c
2 changed files with 6 additions and 0 deletions
--- a/hosts/juni/flake.nix
+++ b/hosts/juni/flake.nix
@ -278,6 +278,8 @@
                    ];
                  };

+                  security.sudo.wheelNeedsPassword = false;
+
                  # System configuration
                  system.stateVersion = stateVersion;
                  networking.hostName = configuration_name;
--- a/hosts/juni/impermanence.nix
+++ b/hosts/juni/impermanence.nix
@ -24,6 +24,10 @@
      "/var/lib/upower"

      "/var/lib/flatpak"
+
+      # bao secrets
+      "/run/openbao"
+      "/run/secrets"
    ];
    files = [
      "/machine-key.json"