{pkgs, ...}: {
  security.doas.enable = true;
  security.sudo.enable = false;

  environment.systemPackages = [
    pkgs.doas-sudo-shim
  ];
}