diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index d214b37..e405796 100755
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -207,9 +207,9 @@
   virtualisation.incus.enable = true;
 
   # allow sandboxes to see my temp keys
-  #  nix.settings.extra-sandbox-paths = [
-  #    "/run/sops-virtual-key.txt=/run/sops-virtual/virtual-key.txt"
-  #  ];
+  nix.settings.extra-sandbox-paths = [
+    "/run/sops-virtual-key.txt=/run/sops-virtual/virtual-key.txt"
+  ];
 
   networking = {
     hostName = meta.hostname;