home/base, nixos/alpha: add doas

2 files changed, 13 insertions, 0 deletions

diff --git a/home/profiles/base/default.nix b/home/profiles/base/default.nix
index 45e8209..8b0b932 100644
--- a/home/profiles/base/default.nix
+++ b/home/profiles/base/default.nix
@@ -150,6 +150,17 @@ in
               sha256 = "03r6hpb5fy4yaakqm3lbf4xcvd408r44jgpv4lnzl9asp4sb9qc0";
             };
           }
+
+          {
+            name = "doas-zsh-plugin";
+            src = pkgs.fetchFromGitHub {
+              owner = "anatolykopyl";
+              repo = "doas-zsh-plugin";
+              rev = "17d0b55ca2acd12f7acc9e38c4ecaf413725be18";
+              sha256 = "sha256-10rcF9cho9GuZCFQVIdFjvHCAlTLHNaLY4twxjT2jcE=";
+            };
+            file = "doas.plugin.zsh";
+          }
         ];
 
         shellAliases = config.programs.zshell.aliases;
diff --git a/nixos/alpha/configuration.nix b/nixos/alpha/configuration.nix
index a418841..dddd774 100644
--- a/nixos/alpha/configuration.nix
+++ b/nixos/alpha/configuration.nix
@@ -6,6 +6,8 @@
   security = {
     protectKernelImage = true;
     rtkit.enable = true;
+    doas.enable = true;
+    doas.wheelNeedsPassword = false;
     sudo.wheelNeedsPassword = false;
   };