diff --git a/common/nix.nix b/common/nix.nix
index fd5de27..7d9b21a 100644
--- a/common/nix.nix
+++ b/common/nix.nix
@@ -12,13 +12,14 @@
       auto-optimise-store = true;
       experimental-features = ["nix-command" "flakes" "auto-allocate-uids" "cgroups" "ca-derivations"];
       auto-allocate-uids = true;
-      use-cgroups = true;
+      sandbox = true;
       trusted-substituters = [
         "https://nix-community.cachix.org/"
       ];
       trusted-public-keys = [
         "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
       ];
+      use-cgroups = true;
     };
   };
 }