Christoffer Martinsson
f5d2ebeaec
Fixes kernel namespace sandboxing issues when running as systemd service. The --no-sandbox flag disables Nix build sandboxing which requires kernel namespaces not available in restricted service environments.