use ssh for sandbox

This commit is contained in:
Christoph Cullmann 2025-05-09 22:50:23 +02:00
parent d45c91f6af
commit a9a8902858
No known key found for this signature in database

View file

@ -547,13 +547,6 @@ in
# use doas instead of sudo # use doas instead of sudo
security.sudo.enable = false; security.sudo.enable = false;
security.doas.enable = true; security.doas.enable = true;
security.doas.extraRules = [
# wheel users are allowed to become all users
{ groups = [ "wheel" ]; noPass = false; keepEnv = true; persist = true; }
# wheel users can use sandbox stuff without password
{ groups = [ "wheel" ]; runAs = "sandbox-kde"; noPass = true; }
];
# try local AI stuff # try local AI stuff
services.ollama = { services.ollama = {