plumjam/nixos - Change UXUYGC42PMBNC2PE2NU5HVLQYUDHNCN7KKRN5CI5JTZC5GGAODVQC

dendritic: Migrate sudo configs.

Created by PlumJam on January 10, 2026

UXUYGC42PMBNC2PE2NU5HVLQYUDHNCN7KKRN5CI5JTZC5GGAODVQC

Dependencies

In channels

main

Change contents

File deletion: darwin
BF:BFD[4.2] → [5.336:353]
BF:BFD[5.353] → [5.335:335]

File deletion: sudo.nix

BF:BFD[5.335] → [6.759:791]

BF:BFD[6.791] → [6.632:632]

B:BD[6.632] → [6.633:758]

{lib, ... }: let
  inherit (lib) enabled;
in {
  security.pam.services.sudo_local = enabled {
    touchIdAuth = true;
  };
}

File move: sudo.mod.nix → sudo.nix
BF:BFD[4.2] → [3.39803:39839]
BF:BF[3.39839] → [3.39047:39047]
[4.2]
[3.39047]

Replacement in modules/sudo.nix at line 2 [3.39047]

B:BD[3.39050] → [3.39050:39568]

  config.flake.modules.nixosModules.sudo =
    { config, lib, ... }:
    let
      inherit (lib) mkIf;
    in
    {
      security.sudo-rs = {
        enable = true;
        execWheelOnly = true;
        extraConfig = # sudo
          ''
            Defaults pwfeedback
            Defaults !lecture
            Defaults env_keep+="DISPLAY EDITOR PATH"
            ${lib.optionalString config.isServer # sudo
              ''
                Defaults timestamp_timeout = 0
              ''
            }
          '';

[3.39050]

[3.39568]

  config.flake.modules.nixos.sudo-desktop = {
    security.sudo-rs = {
      enable = true;
      execWheelOnly = true;
      wheelNeedsPassword = false;
      extraConfig = # sudo
        ''
          Defaults pwfeedback
          Defaults !lecture
          Defaults env_keep+="DISPLAY EDITOR PATH"
        '';
    };
  };

Replacement in modules/sudo.nix at line 16 [3.39047]

B:BD[3.39569] → [3.39569:39646]

        wheelNeedsPassword = mkIf (config.type != "desktop") false;
      };

[3.39569]

[3.39646]

  config.flake.modules.nixos.sudo-server = {
    security.sudo-rs = {
      enable = true;
      execWheelOnly = true;
      wheelNeedsPassword = false;
      extraConfig = # sudo
        ''
          Defaults pwfeedback
          Defaults !lecture
          Defaults env_keep+="DISPLAY EDITOR PATH"
          Defaults timestamp_timeout = 0
        '';

Insertion in modules/sudo.nix at line 29 [3.39047]
[3.39653]
[3.39653]
```
  };
```
Replacement in modules/sudo.nix at line 31 [3.39047]
B:BD[3.39654] → [3.39654:39700]
```
  config.flake.modules.darwinModules.sudo = {
```
[3.39654]
[3.39700]
```
  config.flake.modules.darwin.sudo = {
```
File deletion: sudo.nix
BF:BFD[7.77] → [6.264:296]
BF:BFD[6.296] → [6.153:153]
∅:D[8.86] → [6.197:202]
B:BD[6.197] → [6.197:202]
∅:D[2.46] → [6.230:256]
B:BD[6.230] → [6.230:256]
∅:D[8.392] → [6.256:261]
B:BD[6.256] → [6.256:261]
B:BD[6.261] → [8.393:394]
∅:D[8.394] → [6.261:263]
B:BD[6.261] → [6.261:263]
B:BD[6.256] → [8.87:147]
∅:D[2.118] → [8.227:392]
B:BD[8.227] → [8.227:392]
B:BD[8.147] → [2.47:118]
B:BD[6.202] → [2.15:46]
B:BD[6.153] → [8.15:86]
```
in {
    execWheelOnly = true;
  };
}
    extraConfig   = /* sudo */ ''
      Defaults pwfeedback
      ${optionalString config.isServer /* sudo */ ''
        Defaults timestamp_timeout = 0
      ''}
    '';
    wheelNeedsPassword = mkIf config.isDesktop false;
      Defaults !lecture
      Defaults env_keep+="DISPLAY EDITOR PATH"
  security.sudo-rs = enabled {
{ lib, config, ... }: let
  inherit (lib) enabled mkIf optionalString;
```

dendritic: Migrate sudo configs.

Dependencies

In channels

Change contents

File deletion: darwin

File deletion: sudo.nix

File move: sudo.mod.nix → sudo.nix

Replacement in modules/sudo.nix at line 2 [3.39047]

Replacement in modules/sudo.nix at line 16 [3.39047]

Insertion in modules/sudo.nix at line 29 [3.39047]

Replacement in modules/sudo.nix at line 31 [3.39047]

File deletion: sudo.nix