diff --git a/roles/workstation.nix b/roles/workstation.nix
index 79e1d23..b2e68af 100644
--- a/roles/workstation.nix
+++ b/roles/workstation.nix
@@ -3,6 +3,9 @@
 {
   nixpkgs.config.allowUnfree = true;
 
+  # for ihp
+  nix.trustedUsers = [ "root" "me" ];
+
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;