From 1996d32bef8a2d4454e680fb2d559d436e35b275 Mon Sep 17 00:00:00 2001
From: Tim Keller <tjk@tjkeller.xyz>
Date: Thu, 18 Jun 2026 21:40:11 -0500
Subject: polkit options fixed up and nopass by default

---
 users/timmy/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'users')

diff --git a/users/timmy/default.nix b/users/timmy/default.nix
index cb8eb7b..c38cbb7 100644
--- a/users/timmy/default.nix
+++ b/users/timmy/default.nix
@@ -55,7 +55,7 @@ in {
 			];
 		};
 
-		# Enable sudo and doas
+		# Enable sudo, doas, polkit nopass
 		security.sudo = {
 			enable = true;
 			wheelNeedsPassword = false;
@@ -65,6 +65,9 @@ in {
 			wheelNeedsPassword = false;
 			extraRules = [{ keepEnv = true; }];
 		};
+		security.polkit = {
+			_wheelNoPass = true;
+		};
 
 		# Configure automatic login with getty
 		services.getty = lib.mkIf cfg.autologin.enable {
-- 
cgit v1.2.3