hexa: connection limit? I have

        extraConfig = ''
          Match All
            MaxSessions 100
        '';

on my services.openssh

hexa: session limit? I have

        extraConfig = ''
          Match All
            MaxSessions 100
        '';

on my services.openssh

hi, I'm new to Nix and want to use Colmena to setup a remote host. This works fine, but what I don't understand is when I specify a user with "targetUser" in the "deployment" set who is member of the wheel group and "security.sudo.wheelNeedsPassword" is set to "false", I still need to add the user to "nix.settings.trusted-users" for it to work.
Otherwise I get the error

[ERROR]   stderr) error: cannot add path '/nix/store/6nh78ndmjdqg19ni7gmngp3cpjsf9ykm-system-path' because it lacks a valid signature

when running "colmena apply".
Does anyone know why that is?

So one either needs to set nix.settings.trusted-users to the targetUser or use root as the targetUser?

In reply to @me:indeednotjames.com

anyone else noticing that targets in a flake don't substitute from cache.nixos.org when running colmena apply?
I haven't investigated further yet.
But I did notice that disabling nix copy seems to fix it 👀

really dump patch, as there is no cmd flag to disable it (running latest main):

diff --git a/src/nix/host/ssh.rs b/src/nix/host/ssh.rs
index d45ed99..1b33717 100644
--- a/src/nix/host/ssh.rs
+++ b/src/nix/host/ssh.rs
@@ -261,7 +261,7 @@ impl Ssh {
         let ssh_options = self.ssh_options();
         let ssh_options_str = ssh_options.join(" ");
 
-        let mut command = if self.use_nix3_copy {
+        let mut command = if false {
             // experimental `nix copy` command with ssh-ng://
             let mut command = Command::new("nix");