From dc03d3f41e526cae48b95676c497638767240472 Mon Sep 17 00:00:00 2001
From: dadada <dadada@dadada.li>
Date: Sat, 8 Oct 2022 15:31:37 +0200
Subject: [PATCH] pruflas: allow some inputs in nix when running in restricted
 mode (Hydra)

---
 flake.nix                       | 4 ++--
 nixos/pruflas/configuration.nix | 4 ++++
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/flake.nix b/flake.nix
index a678789..0eaf205 100644
--- a/flake.nix
+++ b/flake.nix
@@ -29,11 +29,11 @@
       url = github:dadada/recipemd/nix-flake;
     };
     agenix = {
-      url = "github:ryantm/agenix";
+      url = github:ryantm/agenix;
       inputs.nixpkgs.follows = "myNixpkgs";
     };
     deploy-rs = {
-      url = "github:serokell/deploy-rs";
+      url = github:serokell/deploy-rs;
       inputs.nixpkgs.follows = "myNixpkgs";
     };
   };
diff --git a/nixos/pruflas/configuration.nix b/nixos/pruflas/configuration.nix
index dee8401..2d570df 100644
--- a/nixos/pruflas/configuration.nix
+++ b/nixos/pruflas/configuration.nix
@@ -37,6 +37,10 @@ in
     }
   ];
 
+  nix.extraOptions = ''
+    allowed-uris = https://github.com/NixOS https://github.com/nix-community https://github.com/dadada https://git.dadada.li/ github.com/ryantm/agenix github.com/serokell/deploy-rs https://gitlab.com/khumba/nvd.git
+  '';
+
   services.nginx = {
     enable = true;
     recommendedTlsSettings = true;