diff --git a/modules/system.nix b/modules/system.nix
index 0372b188..dc35e190 100644
--- a/modules/system.nix
+++ b/modules/system.nix
@@ -96,6 +96,7 @@ in
         experimental-features = [ "nix-command" "flakes" "repl-flake" ];
         auto-optimise-store = true;
         warn-dirty = false;
+        allow-import-from-derivation = false;
 
         trusted-users = [
           "root"