diff --git a/thrall/configuration.nix b/thrall/configuration.nix
index 666e740..7e5bd6d 100644
--- a/thrall/configuration.nix
+++ b/thrall/configuration.nix
@@ -61,6 +61,20 @@
     email = "alex@jakalx.net";
   };
 
+  security.sudo = {
+    enable = true;
+    execWheelOnly = true;
+    extraRules = [
+      { groups = [ "wheel" ];
+        commands = [
+	  { command = "/run/current-system/sw/bin/nixos-rebuild switch";
+	    options = [ "NOPASSWD" ];
+	  }
+	];
+      }
+    ];
+  };
+
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
   console = {