{ ... }: { security.sudo = { enable = true; extraRules = [ # Sudoers wheel can do everything without password { commands = [ { command = "ALL"; options = [ "NOPASSWD" ]; } ]; groups = [ "wheel" ]; } ]; }; }