diff --git a/services/hydra/default.nix b/services/hydra/default.nix
index 29e5508..1e54281 100644
--- a/services/hydra/default.nix
+++ b/services/hydra/default.nix
@@ -62,7 +62,7 @@ in {
     # XXX: Otherwise services.hydra-dev overwrites it to only hydra-queue-runner...
     #
     # Can be removed once this is added to some common config template.
-    nix.settings.trusted-users = [ "root" "hydra" "@wheel" ];
+    nix.settings.trusted-users = [ "root" "hydra" "hydra-www" "@wheel" ];
 
     services.hydra-dev = {
       enable = true;