tv: nix.requireSignedBinaryCaches = true

1 files changed, 4 insertions, 5 deletions

diff --git a/tv/2configs/default.nix b/tv/2configs/default.nix
index 1e0da8da..0a3e40a5 100644
--- a/tv/2configs/default.nix
+++ b/tv/2configs/default.nix
@@ -54,15 +54,14 @@ with config.krebs.lib;
       '';
       time.timeZone = "Europe/Berlin";
     }
+
     {
       # TODO check if both are required:
       nix.chrootDirs = [ "/etc/protocols" pkgs.iana_etc.outPath ];
 
-      nix.trustedBinaryCaches = [
-        "https://cache.nixos.org"
-        "http://cache.nixos.org"
-        "http://hydra.nixos.org"
-      ];
+      nix.requireSignedBinaryCaches = true;
+
+      nix.binaryCaches = ["https://cache.nixos.org"];
 
       nix.useChroot = true;
     }