published
updated
deploy-rs has a few requirements and a few make it easier configuration tricks if you're porting an pre-flakes machine to deploy-rs
nix.trustedUsers = [ "root" "@wheel" ];
security.sudo.wheelNeedsPassword = false;
Though the first line isn't strictly necessary, sometimes you'll get user not trusted when deploying remote services. The second one is strictly necessary.