diff --git a/nixy/configuration.nix b/nixy/configuration.nix
index 0fe0f7b..e16b629 100644
--- a/nixy/configuration.nix
+++ b/nixy/configuration.nix
@@ -26,6 +26,7 @@
     gc.options = "--delete-older-than 7d";
     package = pkgs.nixUnstable;
     settings = {
+      sandbox = true;
       experimental-features = ["nix-command" "flakes"];
     };
   };