diff --git a/hydra-module.nix b/hydra-module.nix
index d7cd7c8f..56ac6fee 100644
--- a/hydra-module.nix
+++ b/hydra-module.nix
@@ -186,6 +186,8 @@ in
       build-compress-log = false
     '';
 
+    nix.trustedUsers = [ "hydra" ];
+
     systemd.services.hydra-init =
       { wantedBy = [ "multi-user.target" ];
         requires = [ "postgresql.service" ];