darwin: enable sandbox and adapt deprecated api

Signed-off-by: Qiming Chu <[email protected]>
Emin017 · Feb 25, 2025 · 7a4cdd9 · 7a4cdd9
1 parent 24a4a5b
commit 7a4cdd9
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/system/darwin/darwin.nix b/system/darwin/darwin.nix
@@ -5,10 +5,14 @@
 
   # Auto upgrade nix package and the daemon service.
   services.nix-daemon.enable = true;
+  nix.enable = true;
   # nix.package = pkgs.nix;
 
   # Necessary for using flakes on this system.
   nix.settings.experimental-features = "nix-command flakes";
+  nix.settings = {
+    sandbox = true;
+  };
 
   # Create /etc/zshrc that loads the nix-darwin environment.
   programs.zsh.enable = true; # default shell on catalina