diff --git a/modules/bincache/default.nix b/modules/bincache/default.nix
index bc290a7..b47a8ae 100644
--- a/modules/bincache/default.nix
+++ b/modules/bincache/default.nix
@@ -14,12 +14,13 @@ with lib;
   };
 
   config = mkIf cfg.enable
-  {
-    users.users.nix-serve = {
-      isSystemUser = true;
-    };
+    {
+      users.users.nix-serve = {
+        isSystemUser = true;
+      };
+      nix.allowedUsers = [ "nix-serve" ];
       users.users.nix-serve.group = "nix-serve";
-      users.groups.nix-serve = {};
+      users.groups.nix-serve = { };
 
       sops.secrets.bin-cache-priv-key = {
         owner = "nix-serve";
@@ -30,7 +31,7 @@ with lib;
         secretKeyFile = "/run/secrets/bin-cache-priv-key";
         port = port;
       };
-      
+
       luj.nginx.enable = true;
       services.nginx.virtualHosts."${cfg.subdomain}.julienmalka.me" = {
         enableACME = true;
diff --git a/modules/nix/default.nix b/modules/nix/default.nix
index bb34886..3f9c2a3 100644
--- a/modules/nix/default.nix
+++ b/modules/nix/default.nix
@@ -13,7 +13,6 @@ with lib;
       nixpkgs.config.allowUnfree = true;
       nix = {
         autoOptimiseStore = true;
-        allowedUsers = [ "julien" "hydra" "nix-serve" ];
         gc = {
           automatic = true;
           dates = "daily";