diff --git a/modules/system/home-manager.nix b/modules/system/home-manager.nix
index e496ac0..169c729 100644
--- a/modules/system/home-manager.nix
+++ b/modules/system/home-manager.nix
@@ -8,5 +8,11 @@
     };
     # uncomment to prevent nmd IFD
     # sharedModules = [ { manual.manpages.enable = false; } ];
+
+    # HACK: due to git cve, nixos-rebuild --flake breaks; revert after nix is fixed
+    users.root.programs.git = {
+      enable = true;
+      extraConfig.safe.directory = "*";
+    };
   };
 }