summary refs log tree commit diff stats
path: root/system/settings
diff options
context:
space:
mode:
authorAlan Pearce2024-04-20 23:03:18 +0200
committerAlan Pearce2024-04-20 23:03:18 +0200
commit2b33de452acd76e472cc0f5b5ee35c1330734ec7 (patch)
tree74164dcc7dbfc8e9287dacd46bcdd07b95b8bf83 /system/settings
parent8af31e11a2b09de45ced64041c1b81a91072bc77 (diff)
downloadnixfiles-2b33de452acd76e472cc0f5b5ee35c1330734ec7.tar.lz
nixfiles-2b33de452acd76e472cc0f5b5ee35c1330734ec7.tar.zst
nixfiles-2b33de452acd76e472cc0f5b5ee35c1330734ec7.zip
nix: trust no-one
Diffstat (limited to 'system/settings')
-rw-r--r--system/settings/configuration/nix.nix1
-rw-r--r--system/settings/darwin.nix1
-rw-r--r--system/settings/programs/base.nix3
3 files changed, 3 insertions, 2 deletions
diff --git a/system/settings/configuration/nix.nix b/system/settings/configuration/nix.nix
index 4142fa34..6b6d51b3 100644
--- a/system/settings/configuration/nix.nix
+++ b/system/settings/configuration/nix.nix
@@ -9,7 +9,6 @@
     settings = {
       cores = 0;
       auto-optimise-store = true;
-      trusted-users = [ "@wheel" ];
     };
 
     daemonCPUSchedPolicy = "idle";
diff --git a/system/settings/darwin.nix b/system/settings/darwin.nix
index 460d47bd..06fd3d86 100644
--- a/system/settings/darwin.nix
+++ b/system/settings/darwin.nix
@@ -25,7 +25,6 @@
     settings.keep-derivations = true;
 
     linux-builder.enable = true;
-    settings.trusted-users = [ "@admin" ];
   };
 
   nixpkgs.config = {
diff --git a/system/settings/programs/base.nix b/system/settings/programs/base.nix
index 5e0fe7e5..efde273d 100644
--- a/system/settings/programs/base.nix
+++ b/system/settings/programs/base.nix
@@ -13,8 +13,11 @@
       "https://nix-community.cachix.org"
       "https://deploy-rs.cachix.org"
       "https://binarycache.alanpearce.eu"
+      "https://deploy-rs.cachix.org"
     ];
+
     trusted-public-keys = [
+      "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI="
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
       "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI="
       "binarycache.alanpearce.eu:ZwqO3XMuajPictjwih8OY2+RXnOKpjZEZFHJjGSxAI4="