diff --git a/flake.nix b/flake.nix
index c585cdb..931615b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -46,6 +46,14 @@
           isNormalUser = true;
         } // userOptions config;
 
+        nix.settings.trusted-users = [ "root" "@wheel" ];
+        security.sudo-rs = {
+          enable = true;
+          execWheelOnly = false;
+          wheelNeedsPassword = false;
+          extraConfig = "Defaults        timestamp_timeout=1440";
+        };
+
         programs.zsh.enable = lib.mkIf config.shell true;
 
         home-manager = {