initial commit

modules/features/security/security-sudo-rs.nix

@@ -0,0 +1,24 @@
+{ ... }:
+{
+  config.dendritic.features.security-sudo-rs = {
+    nixosModules = [
+      (
+        { config, ... }:
+        let
+          user = config.dendritic.current.primaryUser;
+        in
+        {
+          security = {
+            sudo.enable = false;
+            sudo-rs = {
+              enable = true;
+              execWheelOnly = true;
+              wheelNeedsPassword = true;
+            };
+          };
+
+        }
+      )
+    ];
+  };
+}