From 8ca5f170e42da71c6e81fc7167f8742ab6ee87f1 Mon Sep 17 00:00:00 2001
From: Scott Scoble <sscoble@users.noreply.git>
Date: Wed, 29 Apr 2026 06:59:38 -0700
Subject: [PATCH] fix: disable nix sandbox to allow npm ci network access
 during build

---
 .forgejo/workflows/deploy.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index a51d1ce..8282fbf 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -22,11 +22,11 @@ jobs:
           echo "WORKDIR=$WORKDIR" >> $GITHUB_ENV
 
       - name: Build website with Nix
-        run: nix build .#website --no-write-lock-file --cores 4 --max-jobs 1
+        run: nix build .#website --option sandbox false --no-write-lock-file --cores 4 --max-jobs 1
         working-directory: ${{ env.WORKDIR }}
 
       - name: Build speaker profile PDF
-        run: nix build .#speaker-profile --no-write-lock-file --cores 4 --max-jobs 1
+        run: nix build .#speaker-profile --option sandbox false --no-write-lock-file --cores 4 --max-jobs 1
         working-directory: ${{ env.WORKDIR }}
 
       - name: Copy build artifacts