diff --git a/hosts/hephaestus.nix b/hosts/hephaestus.nix
index bfc5462..1cd9605 100644
--- a/hosts/hephaestus.nix
+++ b/hosts/hephaestus.nix
@@ -29,6 +29,12 @@ in
     fonts.sizes.desktop = 24;
   };
 
+  security.sudo-rs = {
+    enable = true;
+    execWheelOnly = true;
+    wheelNeedsPassword = true;
+  };
+
   boot = {
     kernelModules = [
       "kvm-amd"