Split off sudo module.

hosts/common/compute-node.nix

@@ -3,6 +3,7 @@
   imports = [
     ./impermanence.nix
     ./sshd.nix
+    ./sudo.nix
     ./user-ppetru.nix
   ];
 
@@ -14,14 +15,6 @@
       keyFile = "/dev/sda";
   };
 
-  security.sudo = {
-    extraConfig = ''
-      # rollback results in sudo lectures after each reboot
-      Defaults lecture = never
-    '';
-    wheelNeedsPassword = false;
-  };
-
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;