diff --git a/hosts/nixos-server-reid/default.nix b/hosts/nixos-server-reid/default.nix
index 6c90b9c..33996e9 100755
--- a/hosts/nixos-server-reid/default.nix
+++ b/hosts/nixos-server-reid/default.nix
@@ -44,7 +44,13 @@ in {
       mosh.enable = true;
     };
 
-    security.useDoas = false;
+    security.useDoas = true;
+  };
+
+  security.doas = {
+    extraRules = [
+      { users = [ "reidlab" ]; noPass = true; persist = false; keepEnv = true; }
+    ];
   };
 
   # enable network manager - probably not the best on a single server but Oh Well