From a3787bb24e98937366880d9dd2d022b7dc9e6278 Mon Sep 17 00:00:00 2001
From: Charlotte Van Petegem <charlotte@vanpetegem.be>
Date: Fri, 19 Jul 2024 16:09:51 +0200
Subject: [PATCH] nix/darwin: enable nix-daemon sandbox

---
 modules/darwin/base/nix/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/darwin/base/nix/default.nix b/modules/darwin/base/nix/default.nix
index 79321e7a..bfa12991 100644
--- a/modules/darwin/base/nix/default.nix
+++ b/modules/darwin/base/nix/default.nix
@@ -4,6 +4,7 @@
   nix = {
     configureBuildUsers = true;
     gc.interval = if config.chvp.base.nix.slowGc then { Hour = 0; Minute = 0; } else { Minute = 0; };
+    settings.sandbox = true;
   };
   services.nix-daemon.enable = true;
 }