Add security setup.

nodes/hosts/common/configuration.nix

@@ -17,6 +17,7 @@
     ./services/sound.nix
     ./system/bluetooth.nix
     ./system/locale.nix
+    ./system/security.nix
     ./system/time.nix
     ./system/users.nix
   ];

nodes/hosts/common/system/security.nix

@@ -0,0 +1,29 @@
+{ pkgs, lib, ... }: {
+  security = {
+    rtkit.enable = true;
+    pam.services.hyprlock = {};
+
+    polkit = {
+      enable = true;
+      adminIdentities = [
+        "unix-group:wheel"
+      ];
+    };
+    
+    sudo = {
+      enable = lib.mkForce false;
+    };
+   
+    sudo-rs = {
+      enable = true;
+      wheelNeedsPassword = true;
+      execWheelOnly = true;
+    };
+  };
+
+  environment.systemPackages = [
+    pkgs.vulnix
+  ];
+}
+
+