From 9c43ddf7192782535958396e453dce37f36edf4d Mon Sep 17 00:00:00 2001
From: Malte Brandy <malte.brandy@maralorn.de>
Date: Wed, 6 Feb 2019 17:19:52 +0100
Subject: [PATCH] Tentative sudo rule

---
 system/modules/server/git.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/system/modules/server/git.nix b/system/modules/server/git.nix
index 9466974e..58abe674 100644
--- a/system/modules/server/git.nix
+++ b/system/modules/server/git.nix
@@ -14,6 +14,7 @@ in
     };
   };
   config = mkIf config.m-0.git-server.enable {
+    security.sudo.extraRules = [ { commands = [ { command = "sudo nixos-rebuild switch --option tarball-ttl 0"; options = [ "SETENV" "NOPASSWD" ]; users = "git"; } ]; } ];
     services.gitolite = {
       enable = true;
       user = "git";