From 3bdee65620d9fee4db86698d12c28313ba28f1ee Mon Sep 17 00:00:00 2001
From: Fern Garden <mail@fern.garden>
Date: Thu, 24 Jul 2025 15:12:51 +0800
Subject: [PATCH] Move trusted-users option

---
 suites/default.nix        | 4 +---
 suites/server/default.nix | 3 +++
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/suites/default.nix b/suites/default.nix
index 0c0e75d..ee96342 100644
--- a/suites/default.nix
+++ b/suites/default.nix
@@ -14,9 +14,6 @@ with lib; {
     "flakes"
   ];
 
-  # Add @wheel to trusted-users for remote deployments.
-  nix.settings.trusted-users = ["root" "@wheel"];
-
   # Enable redistributable firmware.
   hardware.enableRedistributableFirmware = true;
 
@@ -253,6 +250,7 @@ with lib; {
     fishPlugins.gruvbox
     lynx
     ncdu
+    nh
     rsync
     tmux
     trash-cli
diff --git a/suites/server/default.nix b/suites/server/default.nix
index f5fc7a2..3e625f0 100644
--- a/suites/server/default.nix
+++ b/suites/server/default.nix
@@ -1,6 +1,9 @@
 {
   imports = [../.]; # Common config.
 
+  # Add @wheel to trusted-users for remote deployments.
+  nix.settings.trusted-users = ["root" "@wheel"];
+
   # Passwordless sudo.
   security.sudo.wheelNeedsPassword = false;