diff --git a/config/base.nix b/config/base.nix
index 95671bd..061c6b9 100644
--- a/config/base.nix
+++ b/config/base.nix
@@ -47,16 +47,9 @@
   };
   security = {
     polkit.enable = true;
-    sudo.enable = false;
-    doas = {
+    sudo = {
       enable = true;
       wheelNeedsPassword = false;
-      extraRules = [
-        {
-          keepEnv = true;
-          persist = true;
-        }
-      ];
     };
     pam.loginLimits = [
       {