@@ -19,11 +19,6 @@ agenix.inputs.nixpkgs.follows = "nixpkgs";
     deploy-rs.url = "github:serokell/deploy-rs";
   };
 
-  nixConfig = {
-    extra-substituters = [ "https://deploy-rs.cachix.org" ];
-    extra-trusted-public-keys = [ "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI=" ];
-  };
-
   outputs =
     inputs@
     { self

@@ -132,7 +132,6 @@ daemonIOSchedPriority = 6;
     settings = {
       max-jobs = 2;
       auto-optimise-store = true;
-      trusted-users = [ "root" "nixremote" ];
       experimental-features = [ "nix-command" "flakes" ];
     };
     gc = {

@@ -136,7 +136,6 @@
   system.stateVersion = "23.05";
 
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];
-  nix.settings.trusted-users = [ "root" "nixremote" ];
   services.displayManager.hiddenUsers = [ "nixremote" ];
   users.users.nixremote = {
     shell = "/bin/sh";

@@ -9,7 +9,6 @@ nix = {
     settings = {
       cores = 0;
       auto-optimise-store = true;
-      trusted-users = [ "@wheel" ];
     };
 
     daemonCPUSchedPolicy = "idle";

@@ -25,7 +25,6 @@ settings.keep-outputs = true;
     settings.keep-derivations = true;
 
     linux-builder.enable = true;
-    settings.trusted-users = [ "@admin" ];
   };
 
   nixpkgs.config = {

@@ -13,8 +13,11 @@ substituters = [
       "https://nix-community.cachix.org"
       "https://deploy-rs.cachix.org"
       "https://binarycache.alanpearce.eu"
+      "https://deploy-rs.cachix.org"
     ];
+
     trusted-public-keys = [
+      "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI="
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
       "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI="
       "binarycache.alanpearce.eu:ZwqO3XMuajPictjwih8OY2+RXnOKpjZEZFHJjGSxAI4="