NixOS fails to pull the git submodule because the sandbox doesn't have ssh. I'd appreciate it if you change the ssh address to an http address.