From 197ac138e3836db6cfe2feea76437fa6221b7a10 Mon Sep 17 00:00:00 2001
From: Ahwx <ahwx@ahwx.org>
Date: Mon, 28 Jul 2025 01:00:22 +0200
Subject: [PATCH] feat: only allow `@wheel` to use nix

---
 modules/core/system.nix | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/modules/core/system.nix b/modules/core/system.nix
index 3fff33f..cc2ab7c 100644
--- a/modules/core/system.nix
+++ b/modules/core/system.nix
@@ -8,13 +8,12 @@
 {
   nix = {
     settings = {
+      allowed-users = [ "@wheel" ];
       auto-optimise-store = true;
       experimental-features = [
         "nix-command"
         "flakes"
       ];
-      # substituters = [ "" ];
-      # trusted-public-keys = [ "" ];
     };
     gc = {
       automatic = true;