nixos-configs/modules/system/security.nix

{ pkgs, ... }:
{
  security.sudo = {
    enable = true;
    extraRules = [
      {
        groups = [ "wheel" ];
        commands = [
          {
            command = "${pkgs.systemd}/bin/reboot";
            options = [ "NOPASSWD" ];
          }
          {
            command = "${pkgs.systemd}/bin/poweroff";
            options = [ "NOPASSWD" ];
          }
          {
            commands = [
                "${pkgs.systemd}/bin/systemctl start git-auto-rebuild"
                "${pkgs.systemd}/bin/systemctl stop git-auto-rebuild"
            ];
            options = [ "NOPASSWD" ];
          }
        ];
      }
      {
        users = [ "caperren" ];
        commands = [
          {
            command = "${pkgs.nvtopPackages.full}/bin/nvtop";
            options = [ "NOPASSWD" "SETENV" ];
          }
        ];

      }
    ];
  };
}