tree-wide: disallow IFD again

Only mako and swaylock need it, and they're not being used right now

2 files changed, 3 insertions, 3 deletions

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 98094ed..d9fe92f 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -50,7 +50,7 @@ jobs:
             --no-nom \
             --skip-cached \
             --systems "$SYSTEM" \
-            --option allow-import-from-derivation true \
+            --option allow-import-from-derivation false \
             --flake '.#hydraJobs'
 
   build-gate:
diff --git a/justfile b/justfile
index 9706426..3552de3 100644
--- a/justfile
+++ b/justfile
@@ -40,14 +40,14 @@ check *args="":
       --print-build-logs \
       --show-trace \
       --accept-flake-config \
-      --allow-import-from-derivation \
+      --no-allow-import-from-derivation \
       {{ args }}
 
 eval system *args="":
     nix eval \
       --raw \
       '.#nixosConfigurations.{{ system }}.config.system.build.toplevel' \
-      --allow-import-from-derivation \
+      --no-allow-import-from-derivation \
       {{ args }}
 
 update: