zaphyra's git: nixfiles

zaphyra and void's nixfiles

commit 74a074c98cd15a326fb188515f15eee453919658
parent 2041df171c86e76480f4144ec2f804ecdcdd0a3e
Author: Katja (zaphyra) <git@ctu.cx>
Date: Wed, 4 Jun 2025 12:13:46 +0200

sudo just disable lecture
2 files changed, 5 insertions(+), 6 deletions(-)
diff --git a/config/nixos/modules/filesystem/impermanence.nix b/config/nixos/modules/filesystem/impermanence.nix
@@ -132,13 +132,12 @@ in
           directories = [
             "/etc/zfs"
             "/var/log"
-            "/var/db/sudo/lectured" # "We trust you have received the usual lecture from the local System Administrator."
             "/var/lib/nixos"
             "/var/lib/systemd/coredump"
           ] ++ cfg.system.dirs;
           files = [
             "/etc/machine-id"
-          ] ++ cfg.system.files;
+          ] ++cfg.system.files;
         };
 
         #katja: hack to persist `/var/lib/private/<service>` (see https://github.com/nix-community/impermanence/issues/213)
diff --git a/config/nixos/modules/presets/base.nix b/config/nixos/modules/presets/base.nix
@@ -23,13 +23,11 @@ in
   config = lib.mkIf cfg.enable {
     environment.defaultPackages = lib.mkForce [ ];
 
-    users.mutableUsers = lib.mkForce false;
-
     programs.command-not-found.enable = false;
 
-    # Remove perl from activation
-    # system.etc.overlay.enable = lib.mkDefault true;
+    # make things more declerative
     services.userborn.enable = lib.mkDefault true;
+    users.mutableUsers = lib.mkForce false;
 
     networking = {
       hostId = builtins.substring 0 8 (builtins.hashString "sha256" hostConfig.hostName);

@@ -82,6 +80,8 @@ in
       fstrim.enable = lib.mkDefault true;
     };
 
+    security.sudo.extraConfig = "Defaults lecture=\"never\""; # "We trust you have received the usual lecture from the local System Administrator."
+
     # thanks piegames (https://git.darmstadt.ccc.de/piegames/home-config/-/blob/master/modules/generic.nix#L84)
     system.activationScripts = {
       diff = {