disable sudo lecture

machines/lenovo.nix

@@ -41,7 +41,7 @@
     btrfs subvolume create /btrfs_tmp/root
     mkdir /btrfs_tmp/root/persist
     mkdir /btrfs_tmp/root/etc
-    mount ${config.fileSystems."/persist".device} /btrfs_tmp/root/persist
+    mount ${config.fileSystems."/persist".device} /btrfs_tmp/root/persist -o subvol=persist
     cp /btrfs_tmp/root/persist/etc/ssh /btrfs_tmp/root/etc/ssh -r
     umount /btrfs_tmp/root/persist
     rm -r /btrfs_tmp/root/persist

modules/nixos/common.nix

@@ -17,4 +17,7 @@
   boot.tmp.cleanOnBoot = true;
 
   networking.domain = lib.mkDefault config.networking.hostName;
+
+  # disable lecture
+  security.sudo.extraConfig = ''Defaults lecture="never"'';
 }