doas

modules/programs/home/zsh/default.nix

@@ -15,9 +15,9 @@
       ser = "ssh root@joygnu.org";
       ip = "sh ~/nix/modules/programs/home/zsh/scripts/ip.sh";
       rb = "sh ~/nix/modules/programs/home/zsh/scripts/rebuild.sh";
-      fr = "sudo systemctl reboot --firmware";
+      fr = "doas systemctl reboot --firmware";
       up = "nix flake update ~/nix";
-      del = "sudo nix-collect-garbage -d";
+      del = "doas nix-collect-garbage -d";
       dn = "dotnet new console";
       dr = "dotnet run";
     };

modules/programs/home/zsh/scripts/rebuild.sh

@@ -11,11 +11,11 @@ alejandra .
 hostname=$(hostname)
 
 if echo "$hostname" | grep -q 'desktop'; then
-    sudo nixos-rebuild switch --flake ~/nix/#desktop 
+    doas nixos-rebuild switch --flake ~/nix/#desktop 
 elif echo "$hostname" | grep -q 'laptop'; then
-    sudo nixos-rebuild switch --flake ~/nix/#laptop 
+    doas nixos-rebuild switch --flake ~/nix/#laptop 
 elif echo "$hostname" | grep -q 'server'; then
-    sudo nixos-rebuild switch --flake ~/nix/#server
+    doas nixos-rebuild switch --flake ~/nix/#server
 elif echo "$hostname" | grep -q 'localhost'; then
     nix-on-droid switch --flake ~/nix
 fi

modules/system/default.nix

@@ -5,6 +5,7 @@
     ./xdg
     ./networking
     ./lact
+    ./doas
     ./misc
   ];
 }

modules/system/doas/default.nix

@@ -0,0 +1,11 @@
+{
+  security.doas.enable = true;
+  security.sudo.enable = false;
+  security.doas.extraRules = [
+    {
+      users = ["joy"];
+      keepEnv = true;
+      persist = true;
+    }
+  ];
+}

modules/system/user/default.nix

@@ -2,6 +2,5 @@
   users.users.joy = {
     isNormalUser = true;
     description = "joy";
-    extraGroups = ["wheel" "sudo"];
   };
 }