update security settings

1 files changed, 7 insertions, 15 deletions

diff --git a/profiles/nixos/security.nix b/profiles/nixos/security.nix
index 7ad0069..4e7303a 100644
--- a/profiles/nixos/security.nix
+++ b/profiles/nixos/security.nix
@@ -7,26 +7,18 @@
     apparmor.enable = lib.mkDefault true;
     audit.enable = lib.mkDefault true;
     auditd.enable = lib.mkDefault true;
-    rtkit.enable = true;
-    sudo = {
-      execWheelOnly = true;
-      extraRules = [
-        {
-          users = ["root"];
-          groups = ["root"];
-          commands = ["ALL"];
-        }
-        {
-          users = ["seth"];
-          commands = ["ALL"];
-        }
-      ];
-    };
     polkit.enable = true;
+    rtkit.enable = true;
+    sudo.execWheelOnly = true;
   };
 
   users = {
     defaultUserShell = pkgs.bash;
     mutableUsers = false;
   };
+
+  nix.settings = {
+    allowed-users = ["root" "@wheel"];
+    trusted-users = ["root"];
+  };
 }