dotfiles/modules/system/doas.nix

# Replace sudo with doas

{ config, ... }: {

  config = {
    security = {

      # Remove sudo
      sudo.enable = false;

      # Add doas
      doas = {
        enable = true;

        # No password required
        wheelNeedsPassword = false;

        # Pass environment variables from user to root
        # Also requires removing password here
        extraRules = [{
          groups = [ "wheel" ];
          noPass = true;
          keepEnv = true;
        }];
      };
    };
  };
}