diff --git a/modules/services/dmz/hydra.nix b/modules/services/dmz/hydra.nix
index 8ba371e..53bd3f9 100644
--- a/modules/services/dmz/hydra.nix
+++ b/modules/services/dmz/hydra.nix
@@ -66,9 +66,12 @@
     };
     
     nix = {
-      settings.trusted-users = [
-        "hydra"
-      ];
+      settings = {
+        trusted-users = [
+          "hydra"
+        ];
+        allowed-uris = "http:// https://";
+      };
 
       extraOptions = ''
         secret-key-files = ${config.age.secrets."keys/nixsign".path}