diff --git a/infra/common/users.nix b/infra/common/users.nix
index 8bf33ac..098994d 100644
--- a/infra/common/users.nix
+++ b/infra/common/users.nix
@@ -29,6 +29,8 @@
 
   security.sudo.wheelNeedsPassword = false;
 
+  nix.settings.trusted-users = [ "@wheel" ];
+
   ## FIXME: Remove direct root authentication once NixOps4 supports users with
   ## password-less sudo.
   users.root.openssh.authorizedKeys.keys = [
diff --git a/infra/vm02179/configuration.nix b/infra/vm02179/configuration.nix
index 4e3cce9..1974593 100644
--- a/infra/vm02179/configuration.nix
+++ b/infra/vm02179/configuration.nix
@@ -6,8 +6,4 @@
     ip4 = "185.206.232.179";
     ip6 = "2a00:51c0:12:1201::179";
   };
-
-  nix = {
-    settings.trusted-users = [ "@wheel" ];
-  };
 }