users: grant ldx full NOPASSWD sudo for deploy-rs
deploy-rs runs activate-rs, nix-env, switch-to-configuration, and
confirmation commands through separate non-interactive SSH sessions.
Per-command NOPASSWD rules cannot cover all paths it uses. Full
NOPASSWD is the intended deploy-rs setup.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
1 parent cdf9658 commit ddc2e9cd8da39f43239dda37a2374aceda2848d0
@Dixiao-L Dixiao-L authored 26 days ago
Showing 1 changed file
View
modules/users.nix