diff --git a/machines/hippocampus/servers/public/hydra.nix b/machines/hippocampus/servers/public/hydra.nix
index 405ff47..4f745ce 100644
--- a/machines/hippocampus/servers/public/hydra.nix
+++ b/machines/hippocampus/servers/public/hydra.nix
@@ -26,6 +26,9 @@ in {
       </dynamicruncommand>
     '';
   };
+  nix.extraOptions = ''
+    allowed-uris = https://github.com/ https://git.savannah.gnu.org/ https://git.syzygial.cc https://gitlab.com https://sr.ht
+  '';
   systemd.services.hydra = {
     serviceConfig = {
       RestartSec = "20s";