From 0c53293a9ed007002ff0e284097b81f689265355 Mon Sep 17 00:00:00 2001
From: Winter <winter@winter.cafe>
Date: Sat, 12 Apr 2025 15:38:02 -0400
Subject: [PATCH] nix: fix tests in darwin sandbox

---
 flake.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/flake.nix b/flake.nix
index 22d5ffd4c..fd3cc1fcd 100644
--- a/flake.nix
+++ b/flake.nix
@@ -116,6 +116,12 @@
             "^target/"
           ];
 
+          # Taplo requires SystemConfiguration access, as it unconditionally creates a
+          # reqwest client.
+          sandboxProfile = ''
+            (allow mach-lookup (global-name "com.apple.SystemConfiguration.configd"))
+          '';
+
           cargoLock.lockFile = ./Cargo.lock;
           nativeBuildInputs = nativeBuildInputs ++ [pkgs.installShellFiles];
           inherit buildInputs nativeCheckInputs;