diff --git a/modules/nix/default.nix b/modules/nix/default.nix
index 507d6b5..72609c5 100644
--- a/modules/nix/default.nix
+++ b/modules/nix/default.nix
@@ -388,6 +388,10 @@ in
 
     environment.etc."nix/nix.conf".source = nixConf;
 
+    environment.etc."nix/nix.conf".knownSha256Hashes = [
+      "c4ecc3d541c163c8fcc954ccae6b8cab28c973dc283fea5995c69aaabcdf785f"  # nix installer
+    ];
+
     # List of machines for distributed Nix builds in the format
     # expected by build-remote.
     environment.etc."nix/machines" =
diff --git a/modules/programs/bash/default.nix b/modules/programs/bash/default.nix
index 7d13c69..fb93b79 100644
--- a/modules/programs/bash/default.nix
+++ b/modules/programs/bash/default.nix
@@ -98,5 +98,11 @@ in
       fi
     '';
 
+    environment.etc."bashrc".knownSha256Hashes = [
+      "444c716ac2ccd9e1e3347858cb08a00d2ea38e8c12fdc5798380dc261e32e9ef"
+      "617b39e36fa69270ddbee19ddc072497dbe7ead840cbd442d9f7c22924f116f4"  # nix installer
+      "6be16cf7c24a3c6f7ae535c913347a3be39508b3426f5ecd413e636e21031e66"  # nix installer
+    ];
+
   };
 }
diff --git a/modules/programs/zsh/default.nix b/modules/programs/zsh/default.nix
index ee92441..64436e2 100644
--- a/modules/programs/zsh/default.nix
+++ b/modules/programs/zsh/default.nix
@@ -195,5 +195,17 @@ in
       fi
     '';
 
+    environment.etc."zprofile".knownSha256Hashes = [
+      "db8422f92d8cff684e418f2dcffbb98c10fe544b5e8cd588b2009c7fa89559c5"
+      "0235d3c1b6cf21e7043fbc98e239ee4bc648048aafaf6be1a94a576300584ef2"
+    ];
+
+    environment.etc."zshrc".knownSha256Hashes = [
+      "19a2d673ffd47b8bed71c5218ff6617dfc5e8533b240b9ba79142a45f8823c23"
+      "fb5827cb4712b7e7932d438067ec4852c8955a9ff0f55e282473684623ebdfa1"
+      "c5a00c072c920f46216454978c44df044b2ec6d03409dc492c7bdcd92c94a110"  # nix install
+      "40b0d8751adae5b0100a4f863be5b75613a49f62706427e92604f7e04d2e2261"  # nix install
+    ];
+
   };
 }