diff --git a/nix/deployments/nixops.nix b/nix/deployments/nixops.nix
index bfb1642..b847846 100644
--- a/nix/deployments/nixops.nix
+++ b/nix/deployments/nixops.nix
@@ -8,6 +8,9 @@
   };
   defaults = {
     documentation.enable = false;
+
+    # for nixops to log in and perform operations as haak (instead of root)
+    security.sudo.wheelNeedsPassword = false;
   };
   nas = {
     deployment.targetHost = "192.168.1.65";