home: set up nom; base: switch to sudo-rs

external/scripts/nixdev.sh

···
-#! /usr/bin/env bash
-
-set -euo pipefail
-
-export FF_SKIP=1
-
-if [[ "$(nix flake show 2>/dev/null)" =~ 'devShells' ]]; then
-  nix develop -c zsh
-else
-  nix-shell --run zsh "$@"
-fi

external/zsh/functions.zsh

···
+function nixos-rebuild() {
+  sudo nixos-rebuild --no-reexec --flake "$HOME/dotfiles#$(hostname)" --log-format internal-json -v "$@" |& nom --json
+}
+
 function nixpkgs-build() {
   nix-build -E "with import <nixpkgs> {}; callPackage ./$1 {}"
 }

home/modules/packages.nix

···
 {
   # TODO: update all to 25.11 stable
   home.packages = with pkgs; [
+    nix-output-monitor
     jellyfin-tui
     prettyping
     fastfetch

home/modules/programs/zsh.nix

···
 
       car = "cat";
 
-      nixrs = "sudo nixos-rebuild switch --flake ~/dotfiles\\#$(hostname)";
+      nix-build = "nom build";
+      nix-shell = "nom shell";
+      nixdev = "nom develop";
 
       diff = "diff --color=auto";
       grep = "grep --color=auto";

modules/base.nix

···
     useXkbConfig = true;
   };
 
+  security.sudo-rs = {
+    enable = true;
+    execWheelOnly = true;
+    extraRules = [
+      {
+        groups = [ "wheel" ];
+        commands = [
+          {
+            command = "/run/current-system/sw/bin/nixos-rebuild";
+            options = [ "NOPASSWD" ];
+          }
+        ];
+      }
+    ];
+  };
+
   users.users.adam = {
     isNormalUser = true;
     shell = pkgs.zsh;