M hosts/denna/configuration.nix → hosts/denna/configuration.nix

@@ -43,6 +43,17 @@ intel-compute-runtime
     ];
   };
 
+  security = {
+    doas.enable = true;
+    sudo.enable = true;
+    doas.extraConfig = ''
+      permit nopass :wheel
+    '';
+    doas.extraRules = [{
+      users = [ "icy" ];
+    }];
+  };
+
   users.users.icy = {
     isNormalUser = true;
     description = "icy";