diff --git a/nixos/modules/security/run0.nix b/nixos/modules/security/run0.nix
index 430c03706063..22296a76c95e 100644
--- a/nixos/modules/security/run0.nix
+++ b/nixos/modules/security/run0.nix
@@ -8,7 +8,7 @@
 let
   cfg = config.security.run0;
 
-  sudoAlias = pkgs.writeScriptBin "sudo" ''
+  sudoAlias = pkgs.writeShellScriptBin "sudo" ''
     if [[ "$1" == -* ]]; then
       echo "This script is a sudo-alias to systemd's run0 and does not support any sudo parameters."
       exit 1