diff --git a/flake.nix b/flake.nix
index 41f8b3e..e435ecd 100644
--- a/flake.nix
+++ b/flake.nix
@@ -64,6 +64,7 @@
 
           overrideModAttrs = _: {
             # GOPROXY = "direct";
+            GOFLAGS = "-buildmode=pie -trimpath -mod=readonly -modcacherw";
           };
 
           inherit version;