diff --git a/nix/modules/default/default.nix b/nix/modules/default/default.nix
index d3b74ac90..c31697b42 100644
--- a/nix/modules/default/default.nix
+++ b/nix/modules/default/default.nix
@@ -149,6 +149,7 @@ in
               RestrictAddressFamilies = [
                 "AF_INET"
                 "AF_INET6"
+                "AF_UNIX"
               ];
               RestrictNamespaces = true;
               RestrictRealtime = true;