diff --git a/modules/essentials/nix.nix b/modules/essentials/nix.nix
index 8802ec9..68173a7 100644
--- a/modules/essentials/nix.nix
+++ b/modules/essentials/nix.nix
@@ -1,5 +1,10 @@
 {
   nixpkgs.config.allowUnfree = true;
 
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
+
+  nix.settings.sandbox = true;
 }