nix-config/modules/nixos/core/security.nix

{
  flake.modules.nixos.core =
    { pkgs, ... }:
    {
      security = {
        sudo.wheelNeedsPassword = false;
      };
    };
}