diff --git a/modules/shell.nix b/modules/shell.nix
index 0606f9a..66799e7 100644
--- a/modules/shell.nix
+++ b/modules/shell.nix
@@ -18,6 +18,7 @@
       MANPAGER = "page -t man";
     };
     shellAliases = {
+      sudo = "sudo ";
       #make run0 use aliases
       run0 = "run0 --background='' ";
       s = "run0";
@@ -44,10 +45,13 @@
     interactiveShellInit = "fetch-rs";
   };
 
-  #begone sudo
-  security = {
-    #sudo.enable = lib.mkForce false;
-    #wrappers.su.setuid = lib.mkForce false;
+  security.sudo = {
+    execWheelOnly = true;
+    extraConfig = ''
+      Defaults timestamp_timeout=1
+      Defaults env_keep += "EDITOR VISUAL PAGER SYSTEMD_PAGERSECURE MANPAGER"
+      Defaults lecture = never
+    '';
   };
 
   #zsh stuff
@@ -113,7 +117,7 @@
         format = ''
           $cmd_duration$git_metrics$git_state$git_branch
           $status$directory$character'';
-        right_format = "$nix_shell\${custom.direnv} $time";
+        right_format = "$sudo$nix_shell\${custom.direnv} $time";
         continuation_prompt = "▶▶ ";
         character = {
           success_symbol = "[\\$](#9ece6a bold)";
@@ -153,6 +157,10 @@
           time_format = "%I:%M %p";
           disabled = false;
         };
+        sudo = {
+          format = "[ ](#7aa2f7)";
+          disabled = false;
+        };
       };
     };
   };