From 914a82558744c69d2480de3adb8afb1797c33361 Mon Sep 17 00:00:00 2001
From: DannyDannyDanny <dth@taiga.ai>
Date: Fri, 24 Apr 2026 13:47:38 +0200
Subject: [PATCH] =?UTF-8?q?feat(sunken-ship):=20trust=20danny=20for=20nix?=
 =?UTF-8?q?=20remote=20builds=20=F0=9F=8F=97=EF=B8=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nixos/hosts/sunken-ship.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nixos/hosts/sunken-ship.nix b/nixos/hosts/sunken-ship.nix
index 442534e..a8b96bf 100644
--- a/nixos/hosts/sunken-ship.nix
+++ b/nixos/hosts/sunken-ship.nix
@@ -55,6 +55,10 @@
 
   # Passwordless sudo for wheel.
   security.sudo.wheelNeedsPassword = false;
+
+  # Trust `danny` for Nix remote builds (so the mac can delegate
+  # x86_64-linux builds here via ssh-ng://danny@sunken-ship-zt).
+  nix.settings.trusted-users = [ "root" "danny" ];
   environment.systemPackages = with pkgs; [
     git # clone/bootstrap and dotfiles-rebuild timer
     brightnessctl # manual backlight; replaces removed `light` from nixpkgs