plumjam/nixos - Change LBPXRPSAOL2KOQ4SLUBRD3HCQ5XSJD5YDP2VSJ3GOSTUCPEY3XBAC

sudo: Clean up and configure properly per-class.

Created by PlumJam on February 7, 2026

LBPXRPSAOL2KOQ4SLUBRD3HCQ5XSJD5YDP2VSJ3GOSTUCPEY3XBAC

Dependencies

In channels

main

Change contents

Replacement in modules/sudo.nix at line 1 [3.39047]

B:BD[3.39047] → [3.39048:39050]

B:BD[3.39050] → [2.1136:1175]

{
  flake.modules.nixos.sudo-desktop = {

[3.39047]

[4.166]

let
  sudoExtraConfig = # sudo
    ''
      Defaults pwfeedback
      Defaults !lecture
      Defaults env_keep+="DISPLAY EDITOR PATH"
    '';
  sudoBaseLinux = {

Insertion in modules/sudo.nix at line 13 [3.39047]

[4.240]

    };
  };
  sudoBaseDarwin = {
    security.sudo.extraConfig = sudoExtraConfig;
    security.pam.services.sudo_local = {
      enable = true;
      touchIdAuth = true;
    };
  };
  sudoExtraDesktop = {
    security.sudo-rs = {

Replacement in modules/sudo.nix at line 28 [3.39047]

B:BD[4.274] → [4.274:433]

      extraConfig = # sudo
        ''
          Defaults pwfeedback
          Defaults !lecture
          Defaults env_keep+="DISPLAY EDITOR PATH"
        '';

[4.274]

[4.433]

      extraConfig = sudoExtraConfig;

Replacement in modules/sudo.nix at line 32 [3.39047]
B:BD[3.39569] → [2.1176:1214]
```
  flake.modules.nixos.sudo-server = {
```
[3.39569]
[4.491]
```
  sudoExtraServer = {
```

Replacement in modules/sudo.nix at line 34 [3.39047]

B:BD[4.516] → [4.516:599]

      enable = true;
      execWheelOnly = true;
      wheelNeedsPassword = false;

[4.516]

[4.599]

      wheelNeedsPassword = true;

Replacement in modules/sudo.nix at line 37 [3.39047]

B:BD[4.637] → [4.637:746]

          Defaults pwfeedback
          Defaults !lecture
          Defaults env_keep+="DISPLAY EDITOR PATH"

[4.637]

[4.746]

          ${sudoExtraConfig}

Replacement in modules/sudo.nix at line 43 [3.39047]

B:BD[3.39654] → [2.1215:1247]

∅:D[4.845] → [3.39700:39800]

∅:D[2.1247] → [3.39700:39800]

B:BD[3.39700] → [3.39700:39800]

  flake.modules.darwin.sudo = {
    security.pam.services.sudo_local = {
      enable = true;
      touchIdAuth = true;
    };
  };

[3.39654]

[3.39800]

in
{
  flake.modules.nixos.sudo = sudoBaseLinux;
  flake.modules.darwin.sudo = sudoBaseDarwin;
  flake.modules.nixos.sudo-extra-desktop = sudoExtraDesktop;
  flake.modules.nixos.sudo-extra-server = sudoExtraServer;