From 1dcba0bb4a943149c8decc4ade88f0ee9a6d6be9 Mon Sep 17 00:00:00 2001
From: Alex van de Sandt <me@alexvds.com>
Date: Wed, 12 Aug 2026 22:23:41 -0500
Subject: [PATCH] Enable passwordless sudo for igneous

---
 modules/polkit.nix | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/modules/polkit.nix b/modules/polkit.nix
index 05c1b20..55b877a 100644
--- a/modules/polkit.nix
+++ b/modules/polkit.nix
@@ -1,6 +1,21 @@
 {
   den.aspects.polkit = {
     nixos = {
+      security.sudo = {
+        enable = true;
+        extraRules = [
+          {
+            commands = [
+              {
+                command = "ALL";
+                options = [ "NOPASSWD" ];
+              }
+            ];
+            groups = [ "wheel" ];
+          }
+        ];
+      };
+
       security.polkit = {
         enable = true;
         adminIdentities = [ "unix-group:wheel" ];
-- 
2.51.2