From 6b06d8c1dd238be555a782a2b1b3645344d0ec0a Mon Sep 17 00:00:00 2001
From: Oliver Davies <oliver@oliverdavies.uk>
Date: Wed, 13 Aug 2025 22:44:11 +0100
Subject: [PATCH] Extra sudo module, use sudo-rs

---
 modules2/owner.nix | 5 +----
 modules2/sudo.nix  | 9 +++++++++
 2 files changed, 10 insertions(+), 4 deletions(-)
 create mode 100644 modules2/sudo.nix

diff --git a/modules2/owner.nix b/modules2/owner.nix
index c293caab..c024a7eb 100644
--- a/modules2/owner.nix
+++ b/modules2/owner.nix
@@ -13,10 +13,7 @@
         users.users.${config.flake.meta.owner.username} = {
           isNormalUser = true;
           initialPassword = lib.mkForce "";
-          extraGroups = [
-            "input"
-            "wheel"
-          ];
+          extraGroups = [ "input" ];
         };
 
         nix.settings.trusted-users = [ config.flake.meta.owner.username ];
diff --git a/modules2/sudo.nix b/modules2/sudo.nix
new file mode 100644
index 00000000..7f70c7c6
--- /dev/null
+++ b/modules2/sudo.nix
@@ -0,0 +1,9 @@
+{ config, ... }:
+
+{
+  flake.modules.nixos.pc = {
+    security.sudo-rs.enable = true;
+
+    users.users.${config.flake.meta.owner.username}.extraGroups = [ "wheel" ];
+  };
+}