Always trust @wheel

Signed-off-by: Joonas Rautiola <joonas.rautiola@unikie.com>
tiiuae · Aug 30, 2024 · 83832c6 · 83832c6
1 parent 0359bfc
commit 83832c6
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/hosts/common.nix b/hosts/common.nix
@@ -22,9 +22,11 @@ in
     nixPath = lib.mapAttrsToList (key: value: "${key}=${value.to.path}") config.nix.registry;
 
     settings = {
-      # root is trusted by default, but only when other users aren't specified.
-      # this line is here to merge the arrays when additional users are added
-      trusted-users = [ "root" ];
+      # We can trust root and any users with sudo rights
+      trusted-users = [
+        "root"
+        "@wheel"
+      ];
       # Enable flakes and new 'nix' command
       experimental-features = "nix-command flakes";
       # Subsituters