Split off sudo module.

hosts/common/impermanence.nix

@@ -24,6 +24,11 @@
   fileSystems."/var/log".options = ["compress=zstd" "noatime" ];
   fileSystems."/var/log".neededForBoot = true;
 
+  # rollback results in sudo lectures after each reboot
+  security.sudo.extraConfig = ''
+    Defaults lecture = never
+  '';
+
   # reset / at each boot
   # Note `lib.mkBefore` is used instead of `lib.mkAfter` here.
   boot.initrd.postDeviceCommands = pkgs.lib.mkBefore ''