{ pkgs, ... }:
{
  security.sudo.enable = false;

  environment.systemPackages = [
    pkgs.doas-sudo-shim
  ];
  security.doas = {
    enable = true;
    extraRules = [
      {
        users = [ ":wheel" ];
        setEnv = [ "PATH" ];
      }
    ];
  };
}