Add sudo module

.gitignore

@@ -35,6 +35,7 @@
 !modules/rust/
 !modules/steam/
 !modules/steck/
+!modules/sudo/
 !modules/waybar/
 
 !lib/

hosts/enka/default.nix

@@ -45,5 +45,6 @@
   "rust"
   "steam"
   "steck"
+  "sudo"
   "waybar"
 ])

modules/sudo/default.nix

@@ -0,0 +1,10 @@
+{ ulib, ... }: with ulib;
+
+systemConfiguration {
+  security.sudo = enabled {
+    extraConfig   = ''
+      Defaults timestamp_timeout=-1
+    '';
+    execWheelOnly = true;
+  };
+}