hydra: wip init

modules/nixos/nix/default.nix

@@ -56,7 +56,7 @@ in
         users = [
           "root"
           config.${namespace}.user.name
-        ];
+        ] ++ optional config.services.hydra.enable "hydra";
       in
       {
         package = cfg.package;
@@ -83,6 +83,10 @@ in
             keep-derivations = true;
           });
 
+        extraOptions = ''
+          allowed-uris = https://github.com/ https://git.christophhollizeck.dev/
+        '';
+
         gc = {
           automatic = true;
           dates = "daily";