add os config

Signed-off-by: Robert Günzler <r@gnzler.io>

1 files changed, 34 insertions, 0 deletions

diff --git a/os/etc/doas.conf b/os/etc/doas.conf
new file mode 100644
index 0000000..ff42adb
--- /dev/null
+++ b/os/etc/doas.conf
@@ -0,0 +1,34 @@
+permit nopass keepenv root
+permit persist keepenv setenv { -XDG_CACHE_HOME -XDG_DATA_HOME -XDG_CONFIG_HOME } :wheel as root
+
+# service mgmt stuff
+permit nopass :wheel as root cmd s6-rc
+permit nopass :wheel as root cmd s6-svok
+permit nopass :wheel as root cmd s6-svstat
+permit nopass :wheel as root cmd s6-svc
+
+# udisks replacement
+permit nopass :wheel as root cmd lsblk
+permit nopass :wheel as root cmd mount
+permit nopass :wheel as root cmd umount
+
+# external monitor backlighting
+permit nopass :wheel as root cmd ddcutil
+
+# suspend/hibernate
+permit nopass :wheel as root cmd s2ram
+permit nopass :wheel as root cmd s2disk
+permit nopass :wheel as root cmd rtcwake
+permit nopass :wheel as root cmd tee args /sys/power/state
+
+# goprocam
+permit nopass :wheel as root cmd modprobe args v4l2loopback devices=1 video_nr=44 card_label="GoPro" exclusive_caps=1 
+permit nopass :wheel as root cmd modprobe args -r v4l2loopback
+permit nopass :wheel as root cmd v4l2loopback-ctl
+
+# obs
+permit nopass :wheel as root cmd modprobe args v4l2loopback exclusive_caps=1 card_label="OBS Virtual Camera"
+
+# vpnmenu
+permit nopass :wheel as root cmd wg-quick
+permit nopass :wheel as root cmd wg args show interfaces