diff --git a/modules/security.nix b/modules/security.nix
index 2ed9cc3..e14fd8c 100644
--- a/modules/security.nix
+++ b/modules/security.nix
@@ -5,4 +5,11 @@
   };
 
   security.pam.u2f.authFile = ../keys/u2f_mappings;
+
+  security.sudo.extraRules = [
+    {
+      users = [ "minion" ];
+      commands = [{ command = "ALL"; options = [ "NOPASSWD" ]; }];
+    }
+  ];
 }