diff options
author | Alan Pearce | 2024-04-20 23:03:18 +0200 |
---|---|---|
committer | Alan Pearce | 2024-04-20 23:03:18 +0200 |
commit | 2b33de452acd76e472cc0f5b5ee35c1330734ec7 (patch) | |
tree | 74164dcc7dbfc8e9287dacd46bcdd07b95b8bf83 /system/settings | |
parent | 8af31e11a2b09de45ced64041c1b81a91072bc77 (diff) | |
download | nixfiles-2b33de452acd76e472cc0f5b5ee35c1330734ec7.tar.lz nixfiles-2b33de452acd76e472cc0f5b5ee35c1330734ec7.tar.zst nixfiles-2b33de452acd76e472cc0f5b5ee35c1330734ec7.zip |
nix: trust no-one
Diffstat (limited to 'system/settings')
-rw-r--r-- | system/settings/configuration/nix.nix | 1 | ||||
-rw-r--r-- | system/settings/darwin.nix | 1 | ||||
-rw-r--r-- | system/settings/programs/base.nix | 3 |
3 files changed, 3 insertions, 2 deletions
diff --git a/system/settings/configuration/nix.nix b/system/settings/configuration/nix.nix index 4142fa34..6b6d51b3 100644 --- a/system/settings/configuration/nix.nix +++ b/system/settings/configuration/nix.nix @@ -9,7 +9,6 @@ settings = { cores = 0; auto-optimise-store = true; - trusted-users = [ "@wheel" ]; }; daemonCPUSchedPolicy = "idle"; diff --git a/system/settings/darwin.nix b/system/settings/darwin.nix index 460d47bd..06fd3d86 100644 --- a/system/settings/darwin.nix +++ b/system/settings/darwin.nix @@ -25,7 +25,6 @@ settings.keep-derivations = true; linux-builder.enable = true; - settings.trusted-users = [ "@admin" ]; }; nixpkgs.config = { diff --git a/system/settings/programs/base.nix b/system/settings/programs/base.nix index 5e0fe7e5..efde273d 100644 --- a/system/settings/programs/base.nix +++ b/system/settings/programs/base.nix @@ -13,8 +13,11 @@ "https://nix-community.cachix.org" "https://deploy-rs.cachix.org" "https://binarycache.alanpearce.eu" + "https://deploy-rs.cachix.org" ]; + trusted-public-keys = [ + "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI=" "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs=" "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI=" "binarycache.alanpearce.eu:ZwqO3XMuajPictjwih8OY2+RXnOKpjZEZFHJjGSxAI4=" |