replace sudo -> sudo-rs

groups/all/default.nix

@@ -7,9 +7,10 @@
     ./modules/flatpak.nix
   ];
 
-  # NOTE: mkDefault is 1000 and mkForce is 50
-  # NOTE: so this is like a second mkDefault
-  security.sudo.wheelNeedsPassword = true;
+  security.sudo-rs = {
+    enable = true;
+    wheelNeedsPassword = lib.mkOverride 200 true;
+  };
 
   networking = {
     networkmanager.enable = true;

groups/cryos/default.nix

@@ -86,10 +86,7 @@
     };
   };
 
-  security = {
-    rtkit.enable = true; # I *think* this is for pipewire
-    sudo.wheelNeedsPassword = lib.mkDefault true;
-  };
+  security.rtkit.enable = true; # I *think* this is for pipewire
 
   # ---- ENVIRONMENT VARIABLES ----
   environment = {

groups/server/default.nix

@@ -19,10 +19,6 @@
       defaults.email = "eclarkboman@gmail.com";
     };
 
-    sudo = {
-      enable = true;
-      wheelNeedsPassword = true;
-    };
     # allow SSH keys for passwordless auth
     pam = {
       sshAgentAuth.enable = true;

hosts/myputer/default.nix

@@ -46,7 +46,7 @@
     };
   };
 
-  security.sudo.wheelNeedsPassword = lib.mkForce false;
+  security.sudo-rs.wheelNeedsPassword = lib.mkForce false;
 
   # ---- SYSTEM PACKAGES -----
   environment.systemPackages = with pkgs; [