fix: move sudo settings from hpc module to actual nodes

2025-09-28 12:30:56 +02:00
parent 8c5ca68530
commit f6db232ca7
4 changed files with 16 additions and 12 deletions
--- a/ekman/login/default.nix
+++ b/ekman/login/default.nix
@@ -283,9 +283,11 @@ in
    #   };
    # };

-    # security.sudo.extraConfig = ''
-    #   gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
-    # '';
+    security.sudo.extraConfig = ''
+      %sif ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
+      %admin ALL=(admin) NOPASSWD: ALL
+      # gitlab-runner ALL=(ALL) NOPASSWD: /run/current-system/sw/bin/singularity
+    '';

    security.pam = {
      services.sshd.googleAuthenticator.enable = true;