disallow non-root users from using the nix daemon

2025-12-14 22:58:31 +01:00
parent 1034bf8ff2
commit d0a0ac85d1
2 changed files with 3 additions and 0 deletions
--- a/modules/nix/settings.nix
+++ b/modules/nix/settings.nix
@@ -25,6 +25,7 @@ in

    nix = {
      optimise.automatic = cfg.optimise;
+      settings.allowed-users = [ "root" "@wheel" ];
      settings.experimental-features = [
        "nix-command"
        "flakes"