cleanup

hosts/nas/impermanence.nix

@@ -1,4 +1,4 @@
-{ ... }@args:
+{ ... }:
 {
   # Set up impernance configuration for things like bluetooth
   # In this configuration with /etc and /var/log being persistent, only directories outside of that need to be done here. See hardware configuration for all mountpoints.
@@ -34,4 +34,9 @@
       "/etc/machine-id"
     ];
   };
+
+  security.sudo.extraConfig = ''
+    # rollback results in sudo lectures after each reboot
+    Defaults lecture = never
+  '';
 }