flake/nixos/sudo.nix

{
  security.sudo.extraRules = [
    {
      users = [ "cswimr" ];
      commands = [
        {
          command = "ALL";
          options = [
            "SETENV"
            "NOPASSWD"
          ];
        }
      ];
    }
  ];
}