--wip-- [skip ci]

instances/sif/configuration.nix

@@ -357,22 +357,21 @@
       enableGnomeKeyring = true;
       fprintAuth = true;
     };
-    swaylock = {
-      fprintAuth = true;
-      forwardXAuth = true;
-      logFailures = true;
-      # text = ''
-      #   auth sufficient pam_unix.so try_first_pass likeauth nullok
-      #   auth sufficient pam_fprintd.so
-      #   auth include login
-      # '';
-    };
-
     sudo = {
       fprintAuth = true;
       rootOK = true;
       forwardXAuth = true;
       logFailures = true;
+      text = ''
+        auth            sufficient      pam_rootok.so
+        # Uncomment the following line to implicitly trust users in the "wheel" group.
+        #auth           sufficient      pam_wheel.so trust use_uid
+        # Uncomment the following line to require a user to be in the "wheel" group.
+        auth            required        pam_wheel.so use_uid
+        auth            required        pam_unix.so
+        account         required        pam_unix.so
+        session         required        pam_unix.so
+      '';
       # enableGnomeKeyring = true;
       # text = ''
       #   auth		include		system-auth-fprintd