nix-config/hosts/modules/common/security.nix

{ ... }:

{
  security = {
    unprivilegedUsernsClone = true; # Needed for rootless podman
    sudo = {
      wheelNeedsPassword = false;
      extraConfig = ''
        Defaults lecture = never
      '';
    };
  };
}