diff --git a/home/vinzenz/.config/containers/policy.json b/home/vinzenz/.config/containers/policy.json
new file mode 100644
index 0000000..d13844e
--- /dev/null
+++ b/home/vinzenz/.config/containers/policy.json
@@ -0,0 +1,16 @@
+{
+    "default": [
+        {
+            "type": "reject"
+        }
+    ],
+    "transports": {
+        "docker-daemon": {
+            "": [
+                {
+                    "type": "insecureAcceptAnything"
+                }
+            ]
+        }
+    }
+}
\ No newline at end of file
diff --git a/home/vinzenz/default.nix b/home/vinzenz/default.nix
index 6cd8b3a..0b06468 100644
--- a/home/vinzenz/default.nix
+++ b/home/vinzenz/default.nix
@@ -48,22 +48,7 @@ inputs@{ pkgs, ... }:
 
     home.file."policy.json" = {
       target = ".config/containers/policy.json";
-      text = ''
-        {
-            "default": [
-                {
-                    "type": "insecureAcceptAnything"
-                }
-            ],
-            "transports":
-                {
-                    "docker-daemon":
-                        {
-                            "": [{"type":"insecureAcceptAnything"}]
-                        }
-                }
-        }
-      '';
+      text = builtins.readFile ./.config/containers/policy.json;
     };
   };
 }