diff options
| author | schererleander <leander@schererleander.de> | 2025-10-04 04:08:36 +0200 |
|---|---|---|
| committer | schererleander <leander@schererleander.de> | 2025-10-04 04:08:36 +0200 |
| commit | 5cbe8317c307c8799c63c980d5e24c1a36897a2b (patch) | |
| tree | 51dea08dfc797cd47ace484ea533124ad3694e88 /hosts | |
| parent | 27da42dd36aaad7e17a73dc18c92d91d995c9ee8 (diff) | |
feat: remove unsecure sudo option, cap grub to save limited boot part space
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/sachiel/configuration.nix | 8 |
1 files changed, 2 insertions, 6 deletions
diff --git a/hosts/sachiel/configuration.nix b/hosts/sachiel/configuration.nix index 9ceda91..12ed70d 100644 --- a/hosts/sachiel/configuration.nix +++ b/hosts/sachiel/configuration.nix @@ -12,6 +12,7 @@ ]; boot.tmp.cleanOnBoot = true; + boot.loader.grub.configurationLimit = 2; zramSwap.enable = true; networking = { @@ -19,11 +20,6 @@ domain = "schererleander.de"; }; - security.sudo = { - enable = true; - wheelNeedsPassword = false; - }; - users.users.root.hashedPassword = "!"; users.mutableUsers = false; users.users.${username} = { @@ -48,7 +44,7 @@ system.autoUpgrade = { enable = true; - flake = "path:/home/${username}/nix#${host}"; + flake = "github:schererleander/nix#${host}"; allowReboot = true; rebootWindow = { |