From 894cc6efef78cbe326ebf33c9f2f1bca2bfc8919 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Wed, 2 Feb 2022 18:07:08 +0100
Subject: [PATCH] feat(polkit): dont need password for systemctl

---
 configs/default.nix |  1 +
 configs/polkit.nix  | 13 +++++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 configs/polkit.nix

diff --git a/configs/default.nix b/configs/default.nix
index f07e4c6..1fee36c 100644
--- a/configs/default.nix
+++ b/configs/default.nix
@@ -228,6 +228,7 @@ in {
     ./flameshot-once.nix
     ./packages.nix
     ./stardict.nix
+    ./polkit.nix
     ./power-action.nix
     ./printing.nix
     ./openweathermap.nix
diff --git a/configs/polkit.nix b/configs/polkit.nix
new file mode 100644
index 0000000..8b321bb
--- /dev/null
+++ b/configs/polkit.nix
@@ -0,0 +1,13 @@
+{ config, ... }:
+let
+  user = config.users.users.me.name;
+in
+{
+  security.polkit.extraConfig = ''
+    polkit.addRule(function(action, subject) {
+      if (subject.user == "${user}" && action.id == "org.freedesktop.systemd1.manage-units") {
+        return polkit.Result.YES;
+      }
+    });
+  '';
+}