diff --git a/modules/base/nix.nix b/modules/base/nix.nix
index b565b26..1056b13 100644
--- a/modules/base/nix.nix
+++ b/modules/base/nix.nix
@@ -19,8 +19,14 @@
       extra-substituters = [ "https://cache.lix.systems" ];
       trusted-public-keys = [ "cache.lix.systems:aBnZUw8zA7H35Cz2RyKFVs3H4PlGTLawyY5KRbvJR8o=" ];
 
+      # Only allow these users to use Nix
+      allowed-users = [
+        "root"
+        config.users.users.aires.name
+      ];
+
       # Avoid signature verification messages when doing remote builds
-      trusted-users = [ "${config.users.users.aires.name}" ];
+      trusted-users = [ config.users.users.aires.name ];
     };
 
     # Enable periodic nix store optimization