From 9aca028f959a5cd152ceeb898ffd6e0af3c67f7f Mon Sep 17 00:00:00 2001
From: Valentin Gagarin <valentin.gagarin@tweag.io>
Date: Thu, 14 Nov 2024 11:42:49 +0100
Subject: [PATCH] don't require password auth for sudo

---
 server/configuration.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/server/configuration.nix b/server/configuration.nix
index d779f5a7..f8a06a50 100644
--- a/server/configuration.nix
+++ b/server/configuration.nix
@@ -197,6 +197,7 @@
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
 
+  security.sudo.wheelNeedsPassword = false;
   # Define a user account. Don't forget to set a password with ‘passwd’.
   users.users.procolix = {
     isNormalUser = true;
@@ -251,6 +252,7 @@
 
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
+  services.openssh.settings.PasswordAuthentication = false;
 
   # Enable xe-guest-utilities
   services.xe-guest-utilities.enable = true;