Move to sudo-rs

modules/system/settings/security/privilege/default.nix

@@ -1,17 +1,7 @@
-{ pkgs, ... }:
+{ ... }:
 {
-  security = {
+  security.sudo-rs = {
-    sudo.enable = false;
+    enable = true;
-    doas = {
+    execWheelOnly = true;
-      enable = true;
-      extraRules = [
-        { # Specify a timeout period and keep environment variables
-          groups = [ "wheel" ];
-          keepEnv = true;
-          persist = true;
-        }
-      ];
-    };
   };
-  environment.systemPackages = with pkgs; [ doas-sudo-shim ];
 }