diff --git a/hosts/common/programs/sops.nix b/hosts/common/programs/sops.nix
index 2becc357a..838011226 100644
--- a/hosts/common/programs/sops.nix
+++ b/hosts/common/programs/sops.nix
@@ -23,6 +23,7 @@
       '';
     });
     sandbox.extraHomePaths = [
+      ".config/nvim"
       ".config/sops"
       "nixos"
       # TODO: sops should only need access to knowledge/secrets,