From ee23d89e8afd6ed1921219025f69d908fa98d424 Mon Sep 17 00:00:00 2001
From: Dave Gallant <davegallant@proton.me>
Date: Thu, 8 May 2025 16:54:32 -0400
Subject: [PATCH] Replace sudo with sudo-rs

---
 hosts/hephaestus.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosts/hephaestus.nix b/hosts/hephaestus.nix
index bfc5462..1cd9605 100644
--- a/hosts/hephaestus.nix
+++ b/hosts/hephaestus.nix
@@ -29,6 +29,12 @@ in
     fonts.sizes.desktop = 24;
   };
 
+  security.sudo-rs = {
+    enable = true;
+    execWheelOnly = true;
+    wheelNeedsPassword = true;
+  };
+
   boot = {
     kernelModules = [
       "kvm-amd"