diff --git a/hosts/vali/hermit/configuration.nix b/hosts/vali/hermit/configuration.nix
index 7c11d99..cefa68a 100644
--- a/hosts/vali/hermit/configuration.nix
+++ b/hosts/vali/hermit/configuration.nix
@@ -9,7 +9,6 @@
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
   console.keyMap = "de";
-  security.sudo.package = pkgs.sudo.override {withInsults = true;};
   security.polkit.enable = true;
   programs.kdeconnect.enable = true;
   programs.dconf.enable = true;
diff --git a/hosts/vali/temperance/configuration.nix b/hosts/vali/temperance/configuration.nix
index 4296d89..fcd7be3 100644
--- a/hosts/vali/temperance/configuration.nix
+++ b/hosts/vali/temperance/configuration.nix
@@ -8,7 +8,6 @@
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
   console.keyMap = "de";
-  security.sudo.package = pkgs.sudo.override {withInsults = true;};
   security.polkit.enable = true;
   programs.kdeconnect.enable = true;
   programs.dconf.enable = true;
diff --git a/modules/system/os/security/sudo.nix b/modules/system/os/security/sudo.nix
index f57fd74..0af4efc 100644
--- a/modules/system/os/security/sudo.nix
+++ b/modules/system/os/security/sudo.nix
@@ -1,6 +1,7 @@
 {
   lib,
   pkgs,
+  ...
 }: let
   inherit (lib) mkForce mkDefault;
 in {
@@ -8,8 +9,9 @@ in {
     sudo-rs.enable = mkForce false;
     sudo = {
       enable = true;
-      # We use the default sudo package
-      package = pkgs.sudo;
+      # We use the default sudo package, but with insults if we
+      # fail to provide the correct password
+      package = pkgs.sudo.override {withInsults = true;};
 
       # Wheel user should need the password to execute sudo commands
       wheelNeedsPassword = mkDefault true;