From 5eaf104efef7630039c1ed4acdc067eabe9b61ac Mon Sep 17 00:00:00 2001
From: Erik Arvstedt <erik.arvstedt@gmail.com>
Date: Sun, 9 Jul 2023 15:35:14 +0200
Subject: [PATCH] secure-node: add `sudo` shell alias for `doas`

A convenience helper which allows running most `sudo` cmds while
`doas` is enabled.

This is safe because all args supported by both `sudo` and
`doas` that lead to command execution (like `-u <user>`)
have identical semantics.
---
 modules/presets/secure-node.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/presets/secure-node.nix b/modules/presets/secure-node.nix
index 506d058..90ffd43 100644
--- a/modules/presets/secure-node.nix
+++ b/modules/presets/secure-node.nix
@@ -25,6 +25,7 @@ in {
     # Use doas instead of sudo
     security.doas.enable = true;
     security.sudo.enable = false;
+    environment.shellAliases.sudo = "doas";
 
     environment.systemPackages = with pkgs; [
       jq