diff --git a/defaults/system.nix b/defaults/system.nix
index 464c760..6dde606 100644
--- a/defaults/system.nix
+++ b/defaults/system.nix
@@ -35,6 +35,11 @@ in
       # memtest86.enable = true;
     };
 
+    security = lib.mkDefault {
+      sudo-rs.enable = true;
+      sudo.enable = false;
+    };
+
     # use tmpfs for /tmp to minimize disk wear
     # consider disabling if you have very limited memory
     boot.tmp = lib.mkDefault {