From 2b33de452acd76e472cc0f5b5ee35c1330734ec7 Mon Sep 17 00:00:00 2001
From: Alan Pearce
Date: Sat, 20 Apr 2024 23:03:18 +0200
Subject: nix: trust no-one

---
 system/settings/configuration/nix.nix | 1 -
 system/settings/darwin.nix            | 1 -
 system/settings/programs/base.nix     | 3 +++
 3 files changed, 3 insertions(+), 2 deletions(-)

(limited to 'system/settings')

diff --git a/system/settings/configuration/nix.nix b/system/settings/configuration/nix.nix
index 4142fa34..6b6d51b3 100644
--- a/system/settings/configuration/nix.nix
+++ b/system/settings/configuration/nix.nix
@@ -9,7 +9,6 @@
     settings = {
       cores = 0;
       auto-optimise-store = true;
-      trusted-users = [ "@wheel" ];
     };
 
     daemonCPUSchedPolicy = "idle";
diff --git a/system/settings/darwin.nix b/system/settings/darwin.nix
index 460d47bd..06fd3d86 100644
--- a/system/settings/darwin.nix
+++ b/system/settings/darwin.nix
@@ -25,7 +25,6 @@
     settings.keep-derivations = true;
 
     linux-builder.enable = true;
-    settings.trusted-users = [ "@admin" ];
   };
 
   nixpkgs.config = {
diff --git a/system/settings/programs/base.nix b/system/settings/programs/base.nix
index 5e0fe7e5..efde273d 100644
--- a/system/settings/programs/base.nix
+++ b/system/settings/programs/base.nix
@@ -13,8 +13,11 @@
       "https://nix-community.cachix.org"
       "https://deploy-rs.cachix.org"
       "https://binarycache.alanpearce.eu"
+      "https://deploy-rs.cachix.org"
     ];
+
     trusted-public-keys = [
+      "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI="
       "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
       "deploy-rs.cachix.org-1:xfNobmiwF/vzvK1gpfediPwpdIP0rpDV2rYqx40zdSI="
       "binarycache.alanpearce.eu:ZwqO3XMuajPictjwih8OY2+RXnOKpjZEZFHJjGSxAI4="
-- 
cgit 1.4.1