diff --git a/nix/demo-server/default.nix b/nix/demo-server/default.nix
index c6b2aff..3de3cc6 100644
--- a/nix/demo-server/default.nix
+++ b/nix/demo-server/default.nix
@@ -23,7 +23,10 @@
 
   networking.hostName = "archtika-demo-server";
 
-  security.pam.sshAgentAuth.enable = true;
+  security.pam = {
+    sshAgentAuth.enable = true;
+    services.sudo.sshAgentAuth = true;
+  };
 
   users = {
     mutableUsers = false;