From 5cbe8317c307c8799c63c980d5e24c1a36897a2b Mon Sep 17 00:00:00 2001
From: schererleander <leander@schererleander.de>
Date: Sat, 4 Oct 2025 04:08:36 +0200
Subject: feat: remove unsecure sudo option, cap grub to save limited boot part
 space

---
 hosts/sachiel/configuration.nix | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

(limited to 'hosts')

diff --git a/hosts/sachiel/configuration.nix b/hosts/sachiel/configuration.nix
index 9ceda91..12ed70d 100644
--- a/hosts/sachiel/configuration.nix
+++ b/hosts/sachiel/configuration.nix
@@ -12,6 +12,7 @@
   ];
 
   boot.tmp.cleanOnBoot = true;
+	boot.loader.grub.configurationLimit = 2;
   zramSwap.enable = true;
 
   networking = {
@@ -19,11 +20,6 @@
     domain = "schererleander.de";
   };
 
-  security.sudo = {
-    enable = true;
-    wheelNeedsPassword = false;
-  };
-
   users.users.root.hashedPassword = "!";
   users.mutableUsers = false;
   users.users.${username} = {
@@ -48,7 +44,7 @@
 
   system.autoUpgrade = {
     enable = true;
-    flake = "path:/home/${username}/nix#${host}";
+    flake = "github:schererleander/nix#${host}";
     allowReboot = true;
 
     rebootWindow = {
-- 
cgit v1.3.1