From d0ce38351736380bf66ff282e50f9451fe9a11d4 Mon Sep 17 00:00:00 2001
From: Erwin Boskma <erwin@datarift.nl>
Date: Mon, 20 Nov 2023 17:03:05 +0100
Subject: [PATCH] mimir, loki: Enable sudo-rs

---
 machines/loki/configuration.nix  | 14 +++++++++-----
 machines/mimir/configuration.nix |  5 +++++
 2 files changed, 14 insertions(+), 5 deletions(-)

diff --git a/machines/loki/configuration.nix b/machines/loki/configuration.nix
index 3204d43..97426ca 100644
--- a/machines/loki/configuration.nix
+++ b/machines/loki/configuration.nix
@@ -190,10 +190,12 @@
     };
   };
 
-  security.pam.u2f = {
-    enable = true;
-    # interactive = true;
-    cue = true;
+
+  security = {
+    sudo-rs = {
+      enable = true;
+    };
+    sudo.enable = false;
   };
 
   systemd.network = {
@@ -320,11 +322,13 @@
 
     openssh.enable = true;
 
+    colord.enable = true;
+
     udisks2 = {
       enable = true;
     };
 
-    envfs.enable = true;
+    envfs.enable = false;
     cpupower-gui.enable = true;
     teamviewer.enable = true;
     tailscale.enable = true;
diff --git a/machines/mimir/configuration.nix b/machines/mimir/configuration.nix
index 64d82a8..ca9ede2 100644
--- a/machines/mimir/configuration.nix
+++ b/machines/mimir/configuration.nix
@@ -178,6 +178,11 @@
     cpuFreqGovernor = "ondemand";
   };
 
+  security = {
+    sudo.enable = false;
+    sudo-rs.enable = true;
+  };
+
   systemd.network = {
     enable = true;