diff --git a/modules/base/nix/nix.nix b/modules/base/nix/nix.nix
index 90f7f661..002eec29 100644
--- a/modules/base/nix/nix.nix
+++ b/modules/base/nix/nix.nix
@@ -49,6 +49,8 @@ in
 
       # users or groups which are allowed to do anything with the Nix daemon
       allowed-users = [ sudoers ];
+      # users or groups which are allowed to manage the nix store
+      trusted-users = [ sudoers ];
 
       # we don't want to track the registry, but we do want to allow the usage
       # of the `flake:` references, so we need to enable use-registries