Bunch of stuff to get this ready for a two user system

system/settings/security/doas/default.nix

@@ -0,0 +1,18 @@
+{ pkgs, ... }:
+{
+  security = {
+    sudo.enable = false;
+    doas = {
+      enable = true;
+      extraRules = [
+        { # Give wheel root access
+          groups = [ "wheel" ];
+          keepEnv = true;
+          persist = true;
+        }
+      ];
+    };
+  };
+
+  environment.systemPackages = with pkgs; [ doas-sudo-shim ];
+}