# TODO extract into deployable module
  security.sudo = {
    wheelNeedsPassword = false;
    execWheelOnly = true;
  };

  # TODO extract into deployable module

  # TODO extract into deployable module
  security.sudo = {
    wheelNeedsPassword = false;
    execWheelOnly = true;
  };

              sshUser = "chris";
              fastConnection = true;
              magicRollback = false;
              autoRollback = false;
            };
          };
          taz = {
            hostname = "taz";
            profiles.system = {
              sshOpts = ["-t"];
              user = "root";
              path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.taz;
              sshUser = "chris";
              fastConnection = true;
              magicRollback = false;
              autoRollback = false;
            };
          };
          tootsie = {
            hostname = "tootsie";
            profiles.system = {
              sshOpts = ["-t"];
              user = "root";
              path = deploy-rs.lib.x86_64-linux.activate.nixos self.nixosConfigurations.tootsie;