From b08ed988815495096e0cfc7e6c67b7fe32556dc7 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Wed, 18 Feb 2026 09:25:32 -0800
Subject: [PATCH] Enable passwordless sudo for wheel group on ringtail

Required for Ansible unattended provisioning via become: true.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 nixos/ringtail/configuration.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/ringtail/configuration.nix b/nixos/ringtail/configuration.nix
index 81988c8..53ea077 100644
--- a/nixos/ringtail/configuration.nix
+++ b/nixos/ringtail/configuration.nix
@@ -46,6 +46,7 @@
     ];
   };
   security.polkit.enable = true;
+  security.sudo.wheelNeedsPassword = false;
 
   # Enable greetd as display manager for sway
   services.greetd = {