diff --git a/modules/linux/core/default.nix b/modules/linux/core/default.nix
new file mode 100644
index 0000000..bc502c7
--- /dev/null
+++ b/modules/linux/core/default.nix
@@ -0,0 +1,13 @@
+{
+  security.sudo.enable = false;
+
+  security.doas = {
+    enable = true;
+    extraRules = [
+      {
+        keepEnv = true;
+        persist = true;
+      }
+    ];
+  };
+}