From 39404fc5e3f70b9ad7ba86507209b87fcda4dbfa Mon Sep 17 00:00:00 2001
From: isabel <isabel@isabelroses.com>
Date: Thu, 16 Jul 2026 11:50:38 +0100
Subject: [PATCH] Revert "base/nix/nix: remove insecure `trusted-users`"

This reverts commit c54aeb6c11791a47791a0d2741f76f439f45a8c1.
---
 modules/base/nix/nix.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/base/nix/nix.nix b/modules/base/nix/nix.nix
index 90f7f661..002eec29 100644
--- a/modules/base/nix/nix.nix
+++ b/modules/base/nix/nix.nix
@@ -49,6 +49,8 @@ in
 
       # users or groups which are allowed to do anything with the Nix daemon
       allowed-users = [ sudoers ];
+      # users or groups which are allowed to manage the nix store
+      trusted-users = [ sudoers ];
 
       # we don't want to track the registry, but we do want to allow the usage
       # of the `flake:` references, so we need to enable use-registries
-- 
2.51.2