heather/common: passwordless sudo for mikl + fix deprecated options

- common/default.nix: add mikl to wheel + security.sudo.wheelNeedsPassword=false.
  Without this, root is unreachable on a fresh NixOS-yc image (no root password,
  no rescue channel) — nixos-rebuild switch is impossible. Mirrors the
  NOPASSWD:ALL that old YC boxes got via cloud-config user-data.
- home/server.nix: programs.git.extraConfig -> .settings, programs.git.delta
  -> programs.delta with enableGitIntegration=true (deprecated warnings).
- image.nix: boot.loader.grub.timeout -> boot.loader.timeout (renamed option).
This commit is contained in:
mikl 2026-07-11 22:55:00 +03:00
commit 411a8ba689
5 changed files with 19 additions and 5 deletions

View file

@ -43,7 +43,7 @@ with lib;
boot.loader.grub.enable = mkDefault true;
boot.loader.grub.device = "/dev/vda";
boot.loader.grub.configurationLimit = 1; # только текущее, но механизм выбора есть
boot.loader.grub.timeout = 0;
boot.loader.timeout = 0;
boot.loader.systemd-boot.enable = mkForce false;
boot.loader.efi.canTouchEfiVariables = mkForce false;
@ -89,7 +89,7 @@ with lib;
image.baseName = "heather";
image.extension = "qcow2";
system.nixos.tags = [ "yandex-cloud" ];
system.build.image = import (modulesPath + "/lib/make-disk-image.nix") {
system.build.image = import (modulesPath + "/../lib/make-disk-image.nix") {
name = "heather-image";
inherit (config.image) baseName;
partitionTableType = "legacy"; # MBR + single ext4 root