flake

commit c484c0d0ad9c97ef462ded5fa2ea26fa06fe67d4
parent a9914e9a16fcc8d78109fbccec807c2ae6045ab9
Author: Francesco Saccone <francesco@francescosaccone.com>
Date:   Tue, 18 Mar 2025 20:11:00 +0100

fix: force disable sudo

Signed-off-by: Francesco Saccone <francesco@francescosaccone.com>

Diffstat:
M
hosts/common/default.nix
 | 
7
++++++-

1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/hosts/common/default.nix b/hosts/common/default.nix
@@ -8,7 +8,12 @@
   system.stateVersion = "23.11";
 
   services.fwupd.enable = true;
-  security.protectKernelImage = true;
+
+  security = {
+    protectKernelImage = true;
+    sudo.enable = lib.mkForce false;
+  };
+
   boot.tmp.cleanOnBoot = true;
 
   users = {