diff --git a/host.nix b/host.nix
index 75a40e6..a122ba7 100644
--- a/host.nix
+++ b/host.nix
@@ -53,6 +53,8 @@ lib.flatMap ({ name, config, ip, ports, volumes, ... }:
           firewall.allowedUDPPorts = ports.udp;
         };
 
+        security.sudo.enable = false;
+
         system.stateVersion = state-version;
       };
     };