diff --git a/flake.lock b/flake.lock index a9282fb..0006cd6 100644 --- a/flake.lock +++ b/flake.lock @@ -600,11 +600,11 @@ ] }, "locked": { - "lastModified": 1750973805, - "narHash": "sha256-BZXgag7I0rnL/HMHAsBz3tQrfKAibpY2vovexl2lS+Y=", + "lastModified": 1751309344, + "narHash": "sha256-zmb01yyOXttyhJD3kRtW6Pkt1lsPbJvN3P92/GnI0tk=", "owner": "nix-community", "repo": "home-manager", - "rev": "080e8b48b0318b38143d5865de9334f46d51fce3", + "rev": "78fc50f1cf8e57a974ff4bfe654563fce43d6289", "type": "github" }, "original": { @@ -889,11 +889,11 @@ "utils": "utils" }, "locked": { - "lastModified": 1751109918, - "narHash": "sha256-9crPOHCZihIn5xkO47D6Fd0IGs3QzvLipmKqngzL4Ng=", + "lastModified": 1751294469, + "narHash": "sha256-414TahKtdKizb6L8oLucIqymbs2FiKC2a1ZoOa8q6dg=", "owner": "wamserma", "repo": "flake-programs-sqlite", - "rev": "2abb62927def8386ea91531acff955216da666ec", + "rev": "9b21655138fb1d013c2f80c929b6985eb2bb75f0", "type": "github" }, "original": { @@ -948,11 +948,11 @@ "treefmt-nix": "treefmt-nix" }, "locked": { - "lastModified": 1750351668, - "narHash": "sha256-51iGkcrnwCqbaPeGqaWGKujf1EGMOq/Pxdl0+KryyN4=", + "lastModified": 1751321360, + "narHash": "sha256-1o8aWEn1IBKieQ0116Pa0LzEI4IQ6gaib98EoZyPBZg=", "owner": "lordgrimmauld", "repo": "run0-sudo-shim", - "rev": "4c0d22f43c037648c0934c77516698b7a7eb2f21", + "rev": "4a9720bcf3b0acff495a53a5cb2afa929ab65835", "type": "github" }, "original": { @@ -986,11 +986,11 @@ ] }, "locked": { - "lastModified": 1746671794, - "narHash": "sha256-V+mpk2frYIEm85iYf+KPDmCGG3zBRAEhbv0E3lHdG2U=", + "lastModified": 1751251399, + "narHash": "sha256-y+viCuy/eKKpkX1K2gDvXIJI/yzvy6zA3HObapz9XZ0=", "owner": "oxalica", "repo": "rust-overlay", - "rev": "ceec434b8741c66bb8df5db70d7e629a9d9c598f", + "rev": "b22d5ee8c60ed1291521f2dde48784edd6bf695b", "type": "github" }, "original": { @@ -1023,11 +1023,11 @@ "tinted-zed": "tinted-zed" }, "locked": { - "lastModified": 1751105505, - "narHash": "sha256-SfM48R06e9omzDRNoU7vTRghxLmQPZ+fxoBoOkszL0k=", + "lastModified": 1751296480, + "narHash": "sha256-PMuzVs9khM7cYrjUCXQeV2OP6WVtbsmdZwa4Cc21y0o=", "owner": "danth", "repo": "stylix", - "rev": "713f8dae3127a0faeb1d343ed8da67677121ee29", + "rev": "4ead8043f70cc3b951e704a1f6e40c8a10230e61", "type": "github" }, "original": { @@ -1200,11 +1200,11 @@ ] }, "locked": { - "lastModified": 1746216483, - "narHash": "sha256-4h3s1L/kKqt3gMDcVfN8/4v2jqHrgLIe4qok4ApH5x4=", + "lastModified": 1750931469, + "narHash": "sha256-0IEdQB1nS+uViQw4k3VGUXntjkDp7aAlqcxdewb/hAc=", "owner": "numtide", "repo": "treefmt-nix", - "rev": "29ec5026372e0dec56f890e50dbe4f45930320fd", + "rev": "ac8e6f32e11e9c7f153823abc3ab007f2a65d3e1", "type": "github" }, "original": { diff --git a/flake.nix b/flake.nix index 95b007f..8b3fb8a 100755 --- a/flake.nix +++ b/flake.nix @@ -70,6 +70,7 @@ ./wrappers {networking.hostName = hostname;} inputs.agenix.nixosModules.default + inputs.run0-sudo-shim.nixosModules.default ] ++ dirFiles ".nix" ./clients/${hostname} ++ dirFiles ".nix" ./modules/common diff --git a/modules/common/run0.nix b/modules/common/run0.nix index f4de56c..e663388 100644 --- a/modules/common/run0.nix +++ b/modules/common/run0.nix @@ -1,3 +1,7 @@ { - # security.sudo.enable = false; + security = { + polkit.persistentAuthentication = true; + pam.services.systemd-run0 = {}; + run0-sudo-shim.enable = true; + }; }