ofborg: reduce overly broad trusted-users setting
We can let this list compose naturally without allowing all users trusted access.
Martin Weinelt committed
Jun 8, 2026 at 13:31 UTC
08e81d53531e75ba3513f00f7ab6f8558d6d303d
1 file changed
+3
-2
non-critical-infra/modules/ofborg/ofborg-config.nix
+3
-2
@@ -89,6 +89,7 @@ in
89
};
90
};
91
92
- nix.settings.trusted-users = lib.mkForce [ "*" ];
93
- nix.settings.allowed-users = lib.mkForce [ "*" ];
92
+ nix.settings.trusted-users = [
93
+ "ofborg-builder"
94
+ ];
95
}