diff --git a/nixos/cache-server.nix b/nixos/cache-server.nix
index e6ddb30..8f173a1 100644
--- a/nixos/cache-server.nix
+++ b/nixos/cache-server.nix
@@ -11,6 +11,7 @@
     enable = true;
     secretKeyFile = config.age.secrets.${keyName}.path;
   };
+  nix.settings.trusted-users = [ "nix-serve" ];
   services.nginx = {
     virtualHosts.${domain} = {
       forceSSL = true;