nix-conf/system/security.nix

{...}: {
  security.doas = {
    enable = true;
    extraRules = [
      {
        groups = ["wheel"];
        persist = true;
      }
    ];
  };
  security.polkit.enable = true;
}