diff --git a/hosts/hecuba/default.nix b/hosts/hecuba/default.nix
index f19fee7c..9672086f 100644
--- a/hosts/hecuba/default.nix
+++ b/hosts/hecuba/default.nix
@@ -64,6 +64,11 @@
     ];
   };
 
+  nix.settings.trusted-users = [
+    "root"
+    "@wheel"
+  ];
+
   environment.systemPackages = with pkgs; [
     vim
     git