Deploys as non-root user

citrus.nix

@@ -26,6 +26,11 @@
     };
   };
 
+  security.sudo.wheelNeedsPassword = false; # Needed for colmena.
+  nix.settings.trusted-users = [ "root" "@wheel" ];
+
+  documentation.man.enable = false; # Takes way too long to build.
+
   # Allow SSH with authorized keys only!
   services.openssh = {
     enable = true;

flake.nix

@@ -52,6 +52,7 @@
         colmena = {
           meta.nixpkgs = pkgs;
           orange = {
+            deployment.targetUser = "geekygay";
             imports = modules;
           };
         };