From 662042a2bf857b68efeb29eb11ee38eb6c974823 Mon Sep 17 00:00:00 2001
From: moinessim <47434700+moinessim@users.noreply.github.com>
Date: Tue, 23 Jul 2019 10:09:15 -0500
Subject: [PATCH] Make hostStoreAsReadOnly true by default.

Co-Authored-By: Robert Hensing <roberth@users.noreply.github.com>
---
 src/nix/modules/service/host-store.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/nix/modules/service/host-store.nix b/src/nix/modules/service/host-store.nix
index e8fa9ee..63a77c1 100644
--- a/src/nix/modules/service/host-store.nix
+++ b/src/nix/modules/service/host-store.nix
@@ -19,7 +19,7 @@ in
     };
     service.hostStoreAsReadOnly = mkOption {
       type = types.bool;
-      default = false;
+      default = true;
       description = "Adds a ':ro' (read-only) access mode to the host nix store bind mount.";
     };
     service.useHostNixDaemon = mkOption {