Xory/dots
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

merge firejail #2

Merged
Xory merged 3 commits from firejail into master 2025-10-28 14:14:42 +02:00
Conversation 0 Commits 3 Files changed 2 +22 -38
1 changed files with 22 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit ea0019478c - Show all commits

60
hosts/voidspear/configuration.nix
View file

@ -2,7 +2,7 @@
# your system. Help is available in the configuration.nix(5) man page # your system. Help is available in the configuration.nix(5) man page
# and in the NixOS manual (accessible by running ‘nixos-help’). # and in the NixOS manual (accessible by running ‘nixos-help’).
{ config, pkgs, ... }: { config, pkgs, lib, ... }:
{ {
imports = imports =
@ -87,43 +87,27 @@
# Firejail # Firejail
programs.firejail = { programs.firejail = {
enable = true; enable = true;
wrappedBinaries = { wrappedBinaries =
firefox = { let
executable = "${pkgs.firefox}/bin/firefox"; apps = {
profile = "${pkgs.firejail}/etc/firejail/firefox.profile"; firefox = {};
extraArgs = [ "signal-desktop-bin" = { name = "signal-desktop"; };
"--env=GTK_THEME=Adwaita:dark" vesktop = {};
]; spotify = {};
}; obsidian = {};
signal-desktop-bin = { };
executable = "${pkgs.signal-desktop-bin}/bin/signal-desktop"; in
profile = "${pkgs.firejail}/etc/firejail/signal-desktop.profile"; lib.mapAttrs (pkg: conf:
extraArgs = [ let
"--env=GTK_THEME=Adwaita:dark" binName = conf.name or pkg;
]; in
}; {
vesktop = { executable = "${pkgs.${pkg}}/bin/${binName}";
executable = "${pkgs.vesktop}/bin/vesktop"; profile = "${pkgs.firejail}/etc/firejail/${binName}.profile";
profile = "${pkgs.firejail}/etc/firejail/vesktop.profile"; extraArgs = [
extraArgs = [ "--env=GTK_THEME=Adwaita:dark"
"--env=GTK_THEME=Adwaita:dark" ];
]; }) apps;
};
spotify = {
executable = "${pkgs.spotify}/bin/spotify";
profile = "${pkgs.firejail}/etc/firejail/spotify.profile";
extraArgs = [
"--env=GTK_THEME=Adwaita:dark"
];
};
obsidian = {
executable = "${pkgs.vesktop}/bin/obsidian";
profile = "${pkgs.firejail}/etc/firejail/obsidian.profile";
extraArgs = [
"--env=GTK_THEME=Adwaita:dark"
];
};
};
}; };
# Enable the X11 windowing system. # Enable the X11 windowing system.