1 files changed, 7 insertions, 1 deletions
diff --git a/sys/svcs/nix/default.nix b/sys/svcs/nix/default.nix
index 11bae56f..7e5c8388 100644
--- a/sys/svcs/nix/default.nix
+++ b/sys/svcs/nix/default.nix
@@ -34,12 +34,18 @@ in {
         #"ca-derivations"
       ];
 
+      use-xdg-base-directories = true;
+
       #substituters = ["https://cache.ngi0.nixos.org/"];
       #trusted-public-keys = ["cache.ngi0.nixos.org-1:KqH5CBLNSyX184S9BKZJo1LxrxJ9ltnY2uAs5c/f1MA="];
-      fallback = true; # TODO: what does this do?
+
+      fallback = true; # Build from source, if binary can't be substituted
 
       keep-failed = true; # keep failed tmp build dirs
       pure-eval = true; # restrict file system and network access to hash
+
+      sandbox-fallback = false; # Don't disable the sandbox, if the kernel doesn't support
+                                # it
     };
   };
 }