build-server: ...

2 files changed, 3 insertions, 1 deletions

diff --git a/hosts/vidhar/default.nix b/hosts/vidhar/default.nix
index 836a85fa..ae0a8168 100644
--- a/hosts/vidhar/default.nix
+++ b/hosts/vidhar/default.nix
@@ -123,7 +123,7 @@
       '';
     };
     users.groups."ssh" = {
-      members = ["root" "nix-ssh-builder"];
+      members = ["root"];
     };
 
     security.sudo.extraConfig = ''
diff --git a/system-profiles/build-server/default.nix b/system-profiles/build-server/default.nix
index d0bfaf10..9cb9e142 100644
--- a/system-profiles/build-server/default.nix
+++ b/system-profiles/build-server/default.nix
@@ -10,7 +10,9 @@
       useDefaultShell = true;
       isSystemUser = true;
       group = "nix-ssh-builder";
+      extraGroups = [ "ssh" ];
     };
+    nix.trustedUsers = [ "nix-ssh-builder" ];
 
     services.openssh = {
       enable = true;