diff --git a/.gitea/workflows/build-prod-android.yml b/.gitea/workflows/build-prod-android.yml
index af18b88..5a3db42 100644
--- a/.gitea/workflows/build-prod-android.yml
+++ b/.gitea/workflows/build-prod-android.yml
@@ -1,6 +1,11 @@
 on:
   workflow_dispatch:
 
+env:
+  NIX_CONFIG: |
+    extra-substituters = https://attic.radiantwavetech.com/radiantwave
+    extra-trusted-public-keys = radiantwave:QADrjpBWJssTZ3KmiZtcWEf4uAm66oOlHmtQI3jkrgA=
+
 jobs:
   build-android:
     runs-on: build-server
diff --git a/.gitea/workflows/build-prod-commercial.yml b/.gitea/workflows/build-prod-commercial.yml
index 5b56db4..128b176 100644
--- a/.gitea/workflows/build-prod-commercial.yml
+++ b/.gitea/workflows/build-prod-commercial.yml
@@ -1,6 +1,11 @@
 on:
   workflow_dispatch:
 
+env:
+  NIX_CONFIG: |
+    extra-substituters = https://attic.radiantwavetech.com/radiantwave
+    extra-trusted-public-keys = radiantwave:QADrjpBWJssTZ3KmiZtcWEf4uAm66oOlHmtQI3jkrgA=
+
 jobs:
   build-commercial:
     runs-on: build-server
diff --git a/.gitea/workflows/build-prod-kiosk.yml b/.gitea/workflows/build-prod-kiosk.yml
index beaae9e..d341a4e 100644
--- a/.gitea/workflows/build-prod-kiosk.yml
+++ b/.gitea/workflows/build-prod-kiosk.yml
@@ -1,6 +1,11 @@
 on:
   workflow_dispatch:
 
+env:
+  NIX_CONFIG: |
+    extra-substituters = https://attic.radiantwavetech.com/radiantwave
+    extra-trusted-public-keys = radiantwave:QADrjpBWJssTZ3KmiZtcWEf4uAm66oOlHmtQI3jkrgA=
+
 jobs:
   build-kiosk:
     runs-on: build-server
diff --git a/.gitea/workflows/build-prod-rpi.yml b/.gitea/workflows/build-prod-rpi.yml
index 709cbde..4d8673a 100644
--- a/.gitea/workflows/build-prod-rpi.yml
+++ b/.gitea/workflows/build-prod-rpi.yml
@@ -1,6 +1,11 @@
 on:
   workflow_dispatch:
 
+env:
+  NIX_CONFIG: |
+    extra-substituters = https://attic.radiantwavetech.com/radiantwave https://nixos-raspberrypi.cachix.org
+    extra-trusted-public-keys = radiantwave:QADrjpBWJssTZ3KmiZtcWEf4uAm66oOlHmtQI3jkrgA= nixos-raspberrypi.cachix.org-1:4iMO9LXa8BqhU+Rpg6LQKiGa2lsNh/j2oiYLNOQ5sPI=
+
 jobs:
   build-rpi:
     runs-on: build-server