diff --git a/flake.nix b/flake.nix
index ddbcba5151edb..e7decfa94a68c 100644
--- a/flake.nix
+++ b/flake.nix
@@ -41,6 +41,12 @@
               buildInputs = (prev.buildInputs or [ ]) ++ [ common.cCompiler.cc.lib ];
               nativeBuildInputs = (prev.nativeBuildInputs or [ ]) ++ [ common.pkgs.makeWrapper ];
 
+              hardeningDisable =
+                let
+                  inherit (common.pkgs) lib stdenv;
+                in
+                  lib.optionals (stdenv.isAarch64 && stdenv.isDarwin) [ "stackprotector" ];
+
               postInstall = ''
                 ${prev.postInstall or ""}
                 if [ -f "$out/bin/hx" ]; then