From f1fef7c7a200d8c3e9d8b3b171f4b0429d183433 Mon Sep 17 00:00:00 2001
From: Martin Fischer <martin@push-f.com>
Date: Wed, 11 Jun 2025 08:43:42 +0200
Subject: tweak(server): enable passwordless sudo and remote rebuilds

---
 nixos/profiles/server/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/nixos/profiles/server/default.nix b/nixos/profiles/server/default.nix
index ac24e20..07dcd4b 100644
--- a/nixos/profiles/server/default.nix
+++ b/nixos/profiles/server/default.nix
@@ -13,4 +13,9 @@
       };
     };
   };
+
+  security.sudo.wheelNeedsPassword = false;
+
+  # For remote rebuilds with --target-host.
+  nix.settings.trusted-users = ["@wheel"];
 }
-- 
cgit v1.2.3