diff --git a/sourcehut.nix b/sourcehut.nix
index 9d8e4c1..957473c 100644
--- a/sourcehut.nix
+++ b/sourcehut.nix
@@ -4,6 +4,8 @@ let
   fqdn = "sourcehut.${base-domain}";
 in
 {
+  # workaround: https://github.com/NixOS/nixpkgs/issues/317865
+  programs.git.config.safe.directory = "*";
   services.sourcehut = {
     enable = true;
     meta = {