diff --git a/common/base.nix b/common/base.nix
index 966d6fc..ad29477 100644
--- a/common/base.nix
+++ b/common/base.nix
@@ -32,6 +32,10 @@
     keep-outputs = false
   '';
 
+  # colmena uses tangler user, so we need it here for it the user to be able
+  # to add unsigned paths through the nix daemon (happens when --no-build-on-target is used)
+  nix.settings.trusted-users = lib.mkForce ["root" "tangler"];
+
   environment.systemPackages = map lib.lowPrio [
     pkgs.curl
     pkgs.gitMinimal