passwordless deploys

2025-12-23 15:32:20 +00:00
parent 53299b534b
commit 4a1ac8d31a
1 changed files with 15 additions and 0 deletions
--- a/profiles/nixos.nix
+++ b/profiles/nixos.nix
@@ -6,6 +6,21 @@
 	...
 }: {
 	security.sudo.enable = true;
+	security.sudo.extraRules = [
+		{
+			users = [user];
+			commands = [
+				{
+					command = "/run/current-system/sw/bin/nix-env";
+					options = ["NOPASSWD"];
+				}
+				{
+					command = "/nix/store/*/bin/switch-to-configuration";
+					options = ["NOPASSWD"];
+				}
+			];
+		}
+	];

 	system.stateVersion = constants.stateVersions.nixos;
 	time.timeZone = "UTC";