From 83832c64902c4b05ae2a1e5836634150c56b7f49 Mon Sep 17 00:00:00 2001
From: Joonas Rautiola <joonas.rautiola@unikie.com>
Date: Thu, 29 Aug 2024 20:48:55 +0300
Subject: [PATCH] Always trust @wheel

Signed-off-by: Joonas Rautiola <joonas.rautiola@unikie.com>
---
 hosts/common.nix | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/hosts/common.nix b/hosts/common.nix
index 7c6eb0e2..69e5999b 100644
--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -22,9 +22,11 @@ in
     nixPath = lib.mapAttrsToList (key: value: "${key}=${value.to.path}") config.nix.registry;
 
     settings = {
-      # root is trusted by default, but only when other users aren't specified.
-      # this line is here to merge the arrays when additional users are added
-      trusted-users = [ "root" ];
+      # We can trust root and any users with sudo rights
+      trusted-users = [
+        "root"
+        "@wheel"
+      ];
       # Enable flakes and new 'nix' command
       experimental-features = "nix-command flakes";
       # Subsituters