nixos

commit de872f1e17e2b2bb5a4eb349fc6a1656b857a48e
parent 6e6bd2e8e2a8acf697b535e5c83884c674a93a86
Author: Toni Brown <me@tb148.net>
Date:   Mon, 27 Apr 2026 00:21:02 +0800

use sudo-rs instead of run0-sudo-shim

Diffstat:
M
flake.nix
 | 
2
--
M
local/security/default.nix
 | 
3
+--
D
local/security/polkit.js
 | 
8
--------

3 files changed, 1 insertion(+), 12 deletions(-)
diff --git a/flake.nix b/flake.nix
@@ -43,7 +43,6 @@
 		betterfox,
 		catppuccin,
 		home-manager,
-		run0-sudo-shim,
 		...
 	} @ inputs: {
 		nixosConfigurations = {
@@ -57,7 +56,6 @@
 						lix-module.nixosModules.default
 						catppuccin.nixosModules.catppuccin
 						home-manager.nixosModules.home-manager
-						run0-sudo-shim.nixosModules.default
 						{
 							home-manager.useGlobalPkgs = true;
 							home-manager.useUserPackages = true;
diff --git a/local/security/default.nix b/local/security/default.nix
@@ -1,5 +1,4 @@
 {inputs, ...}: {
-	environment.systemPackages = [inputs.run0-sudo-shim.packages.x86_64-linux.default];
 	security.sudo.enable = false;
-	security.polkit.extraConfig = builtins.readFile ./polkit.js;
+	security.sudo-rs.enable = true;
 }
diff --git a/local/security/polkit.js b/local/security/polkit.js
@@ -1,8 +0,0 @@
-polkit.addRule(function (action, subject) {
-	if (
-		action.id == "org.freedesktop.systemd1.manage-units" &&
-		subject.user == "btrbk"
-	) {
-		return "yes";
-	}
-});