From 175535ad2ede5a6941c507dbb10bcac3ab90dbe5 Mon Sep 17 00:00:00 2001
From: Alex van de Sandt <me@alexvds.com>
Date: Wed, 1 Jul 2026 21:07:11 -0500
Subject: [PATCH] Enable passwordless sudo

---
 modules/hosts/roost/roost.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/modules/hosts/roost/roost.nix b/modules/hosts/roost/roost.nix
index 0ab3aa6..a3cbaad 100644
--- a/modules/hosts/roost/roost.nix
+++ b/modules/hosts/roost/roost.nix
@@ -28,6 +28,21 @@
       users.users.root.openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINjHG2fiK7Ip1YlPdH/eyT1qIrtOJlHUeMZ13GZvWyGI"
       ];
+
+      security.sudo = {
+        enable = true;
+        extraRules = [
+          {
+            commands = [
+              {
+                command = "ALL";
+                options = [ "NOPASSWD" ];
+              }
+            ];
+            groups = [ "wheel" ];
+          }
+        ];
+      };
     };
 
     provides.to-users.homeManager =
-- 
2.51.2