{
  flake.modules.nixos.base = {
    security = {
      doas = {
        enable = true;
        extraRules = [
          {
            groups = ["wheel"];
            keepEnv = true;
            persist = true;
          }
        ];
      };

      sudo.enable = false;
    };
  };
}