diff --git a/hosts/best/hercules/caches.age b/hosts/best/hercules/caches.age
index 16c5547..e526f8f 100644
Binary files a/hosts/best/hercules/caches.age and b/hosts/best/hercules/caches.age differ
diff --git a/hosts/best/hercules/default.nix b/hosts/best/hercules/default.nix
index ac85b4a..3e6578f 100644
--- a/hosts/best/hercules/default.nix
+++ b/hosts/best/hercules/default.nix
@@ -1,5 +1,5 @@
-{ config, lib, ... }: let
-  inherit (lib) enabled genAttrs;
+{ self, config, lib, ... }: let
+  inherit (lib) enabled genAttrs removeAttrs;
 in {
   secrets.awsCredentials = {
     file  = ./credentials.age;
@@ -30,6 +30,11 @@ in {
       binaryCachesPath     = config.secrets.herculesCaches.path;
       clusterJoinTokenPath = config.secrets.herculesToken.path;
       secretsJsonPath      = config.secrets.herculesSecrets.path;
+
+      nixSettings = removeAttrs (import <| self + /flake.nix).nixConfig [
+        "extra-substituters"
+        "extra-trusted-private-keys"
+      ];
     };
   };
 }