diff --git a/flake.nix b/flake.nix
index cb2a600..f13435b 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,14 +24,15 @@
           ./modules/node.nix
           ./modules/kitty.nix
           ./modules/tesseract.nix
+          ./modules/doas.nix
           {
-            security.sudo.wheelNeedsPassword = false;
             users.mutableUsers = false;
           }
         ];
       };
 
     deploy.nodes.clicks = {
+      sudo = "doas -u";
       profiles.system = {
         remoteBuild = true;
         user = "root";