diff --git a/systems/github-runner.nix b/systems/github-runner.nix
index 90771d7..86a91a6 100644
--- a/systems/github-runner.nix
+++ b/systems/github-runner.nix
@@ -28,5 +28,6 @@ in
       efi.canTouchEfiVariables = true;
     };
   };
+  nix.settings.trusted-users = [ "root" "@wheel" ];
   services.openssh.enable = true;
 }