diff --git a/doc/known-files/8a9ebee68a25f8e1a74f510059e4690f6c2c36842e9bad065060cacb178b3670 b/doc/known-files/8a9ebee68a25f8e1a74f510059e4690f6c2c36842e9bad065060cacb178b3670
new file mode 100644
index 000000000..1f27442b8
--- /dev/null
+++ b/doc/known-files/8a9ebee68a25f8e1a74f510059e4690f6c2c36842e9bad065060cacb178b3670
@@ -0,0 +1,21 @@
+# DETERMINATE NIX CONFIG
+# do not modify! this file will be replaced!
+# user modification can go in nix.custom.conf
+
+!include nix.custom.conf
+
+max-jobs = auto
+bash-prompt-prefix = (nix:$name)\040
+extra-experimental-features = nix-command flakes
+
+netrc-file = /nix/var/determinate/netrc
+post-build-hook = /nix/var/determinate/post-build-hook.sh
+
+always-allow-substitutes = true
+extra-substituters = https://cache.flakehub.com
+extra-trusted-public-keys = cache.flakehub.com-3:hJuILl5sVK4iKm86JzgdXW12Y2Hwd5G07qKtHTOcDCM= cache.flakehub.com-4:Asi8qIv291s0aYLyH6IOnr5Kf6+OF14WVjkE6t3xMio= cache.flakehub.com-5:zB96CRlL7tiPtzA9/WKyPkp3A2vqxqgdgyTVNGShPDU= cache.flakehub.com-6:W4EGFwAGgBj3he7c5fNh9NkOXw0PUVaxygCVKeuvaqU= cache.flakehub.com-7:mvxJ2DZVHn/kRxlIaxYNMuDG1OvMckZu32um1TadOR8= cache.flakehub.com-8:moO+OVS0mnTjBTcOUh2kYLQEd59ExzyoW1QgQ8XAARQ= cache.flakehub.com-9:wChaSeTI6TeCuV/Sg2513ZIM9i0qJaYsF+lZCXg0J6o= cache.flakehub.com-10:2GqeNlIp6AKp4EF2MVbE1kBOp9iBSyo0UPR9KoR0o1Y=
+
+upgrade-nix-store-path-url = https://install.determinate.systems/nix-upgrade/stable/universal
+
+extra-nix-path = nixpkgs=flake:https://flakehub.com/f/DeterminateSystems/nixpkgs-weekly/*.tar.gz
+ssl-cert-file = /etc/nix/macos-keychain.crt
diff --git a/modules/nix/default.nix b/modules/nix/default.nix
index 857c4be81..a78d5bc16 100644
--- a/modules/nix/default.nix
+++ b/modules/nix/default.nix
@@ -706,6 +706,7 @@ in
       "6bb8d6b0dd16b44ee793a9b8382dac76c926e4c16ffb8ddd2bb4884d1ca3f811"  # DeterminateSystems Nix installer 0.34.0
       "24797ac05542ff8b52910efc77870faa5f9e3275097227ea4e50c430a5f72916"  # lix-installer 0.17.1 with flakes
       "b027b5cad320b5b8123d9d0db9f815c3f3921596c26dc3c471457098e4d3cc40"  # lix-installer 0.17.1 without flakes
+      "8a9ebee68a25f8e1a74f510059e4690f6c2c36842e9bad065060cacb178b3670"  # determinate-nixd 0.3.0
     ];
 
     environment.etc."nix/registry.json".text = builtins.toJSON {