diff --git a/hosts/monolith/configuration.nix b/hosts/monolith/configuration.nix
index 1e82325..95818dd 100644
--- a/hosts/monolith/configuration.nix
+++ b/hosts/monolith/configuration.nix
@@ -18,8 +18,10 @@
   users.users.jonas = {
     isNormalUser = true;
     description = "Jonas";
+    hashedPassword = ""; # passwordless login (sudo is now unusable without specifying NOPASSWD)
     extraGroups = ["networkmanager" "wheel" "docker" "dialout"];
   };
+  security.sudo.wheelNeedsPassword = false;
   users.groups.data = {
     gid = 1001;
     members = ["jonas"];