liminalOS/modules/linux/core/default.nix

{
  security.sudo.enable = false;

  security.doas = {
    enable = true;
    extraRules = [
      {
        users = ["youwen"];
        keepEnv = true;
        persist = true;
      }
    ];
  };
}