From cfb4b8d160e5632d803344db61637f77526fa055 Mon Sep 17 00:00:00 2001
From: Tim Schubert <dadada@dadada.li>
Date: Sat, 26 Jul 2025 18:16:17 +0200
Subject: [PATCH] fix(stolas): wheel needs password to sudo

---
 nixos/modules/admin.nix           | 2 +-
 nixos/modules/profiles/laptop.nix | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/nixos/modules/admin.nix b/nixos/modules/admin.nix
index eb37116..05acc43 100644
--- a/nixos/modules/admin.nix
+++ b/nixos/modules/admin.nix
@@ -93,7 +93,7 @@ in
 
     services.sshd.enable = true;
     services.openssh.settings.PasswordAuthentication = false;
-    security.sudo.wheelNeedsPassword = false;
+    security.sudo.wheelNeedsPassword = lib.mkDefault false;
     services.openssh.openFirewall = true;
 
     users.users = mapAttrs (user: keys: {
diff --git a/nixos/modules/profiles/laptop.nix b/nixos/modules/profiles/laptop.nix
index 4d02bb0..7089f4e 100644
--- a/nixos/modules/profiles/laptop.nix
+++ b/nixos/modules/profiles/laptop.nix
@@ -48,4 +48,5 @@ with lib;
     pulse.enable = true;
   };
   services.pulseaudio.enable = false;
+  security.sudo.wheelNeedsPassword = true;
 }