allow systemctl operations to admins without auth

1 files changed, 13 insertions, 0 deletions

diff --git a/hel.nix b/hel.nix
index e04a06e1..59285cda 100644
--- a/hel.nix
+++ b/hel.nix
@@ -310,6 +310,19 @@
                        source = ''${pkgs.callPackage ./custom/notify-user.nix { inherit (pkgs.haskellPackages) ghcWithPackages; }}/bin/notify-gkleen'';
                      }
                    ];
+
+    polkit = {
+      enable = true;
+      extraConfig = ''
+        polkit.addRule(function(action, subject) {
+          if (    action.id == "org.freedesktop.systemd1.manage-units"
+               && subject.isInGroup("admin")
+             ) {
+              return polkit.Result.YES;
+          }
+        });
+      '';
+    };
   };
 
   time.timeZone = "Europe/Berlin";