1{ config, lib, pkgs, ... }:
2
3let
4 cfg = config.programs.udevil;
5
6in {
7 options.programs.udevil.enable = lib.mkEnableOption "udevil, to mount filesystems without password";
8
9 config = lib.mkIf cfg.enable {
10 security.wrappers.udevil =
11 { setuid = true;
12 owner = "root";
13 group = "root";
14 source = "${lib.getBin pkgs.udevil}/bin/udevil";
15 };
16 };
17}