diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 64b9e50..d55b590 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -6,13 +6,13 @@ jobs:
   tests:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: cachix/install-nix-action@v25
-      with:
-        nix_path: nixpkgs=channel:nixos-unstable
-    - uses: cachix/cachix-action@v14
-      with:
-        name: liminalos
-        # If you chose API tokens for write access OR if you have a private cache
-        authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
-    - run: nix build
+      - uses: actions/checkout@v4
+      - uses: cachix/install-nix-action@v25
+        with:
+          nix_path: nixpkgs=channel:nixos-unstable
+      - uses: cachix/cachix-action@v14
+        with:
+          name: liminalos
+          # If you chose API tokens for write access OR if you have a private cache
+          authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
+      - run: nix build .#demeter --accept-flake-config
diff --git a/flake.nix b/flake.nix
index 304e4e8..0f73c3d 100755
--- a/flake.nix
+++ b/flake.nix
@@ -190,4 +190,10 @@
       ];
     };
   };
+
+  nixConfig = {
+    extra-substituters = ["https://liminalos.cachix.org"];
+    extra-trusted-public-keys = ["liminalos.cachix.org-1:GpwgIRFfXwZtZaHA2RPaVGI2ErJKasbb15pkMmQ7dN4="];
+    allow-import-from-derivation = "true";
+  };
 }