{ config, ... }:
let
  cfg = config.flake;
in
{
  flake.modules.nixos.default = {
    security.sudo.wheelNeedsPassword = false;
    nix.settings.trusted-users = [ "@wheel" ];
    users.users.${cfg.admin.username}.extraGroups = [ "wheel" ];
  };
}