diff --git a/darwin/maud/default.nix b/darwin/maud/default.nix
index c1e011e..64ae3d8 100644
--- a/darwin/maud/default.nix
+++ b/darwin/maud/default.nix
@@ -19,7 +19,6 @@
 
   environment.variables.EDITOR = "nvim";
 
-  services.nix-daemon.enable = true;
   programs = {
     fish = {
       enable = true;
@@ -75,7 +74,11 @@
 
   environment.loginShell = "${pkgs.fish}/bin/fish";
 
-  nix.settings.experimental-features = "nix-command flakes";
+  services.nix-daemon.enable = true;
+  nix.settings = {
+    sandbox = true;
+    experimental-features = "nix-command flakes";
+  };
 
   nixpkgs.overlays = [ inputs.lix-module.overlays.default ];