caem/caenix
caem/caenix
1
Fork 0
Code Pull requests Releases Activity

Refactor the whole configuration #1

Merged
caem merged 354 commits from refactor into master 2025-02-01 14:05:16 +01:00
Conversation 0 Commits 354 Files changed 153 +5 -3
1 changed files with 5 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 5541426fd0 - Show all commits

8
overlays/nixpak/firefox.nix
View file

@ -2,7 +2,7 @@
# https://github.com/ryan4yin/nix-config/blob/7deed26cc5a3af2072b8c89a688f265607babc80/hardening/nixpaks/firefox.nix # https://github.com/ryan4yin/nix-config/blob/7deed26cc5a3af2072b8c89a688f265607babc80/hardening/nixpaks/firefox.nix
# https://github.com/schizofox/schizofox/blob/cdf69b2a445ff12680657a3bd44ce7c406bf2ae6/flake/modules/home-manager/default.nix # https://github.com/schizofox/schizofox/blob/cdf69b2a445ff12680657a3bd44ce7c406bf2ae6/flake/modules/home-manager/default.nix
{ lib, ... }: final: prev: { { ... }: final: prev: {
firefox-esr = let firefox-esr = let
sandboxed-firefox-esr = prev.mkNixPak { sandboxed-firefox-esr = prev.mkNixPak {
config = { sloth, ... }: { config = { sloth, ... }: {
@ -50,16 +50,18 @@
(envSuffix "XDG_RUNTIME_DIR" "/pulse") (envSuffix "XDG_RUNTIME_DIR" "/pulse")
(envSuffix "XDG_RUNTIME_DIR" "/doc") (envSuffix "XDG_RUNTIME_DIR" "/doc")
(envSuffix "XDG_RUNTIME_DIR" "/dconf") (envSuffix "XDG_RUNTIME_DIR" "/dconf")
(lib.mkLast [ "/etc/firefox/policies/policies.json" "/app/etc/firefox/policies/policies.json" ])
[(sloth.mkdir (sloth.concat' sloth.xdgConfigHome "/mozilla")) (sloth.concat' sloth.homeDir "/.mozilla")] [(sloth.mkdir (sloth.concat' sloth.xdgConfigHome "/mozilla")) (sloth.concat' sloth.homeDir "/.mozilla")]
# rw because we have to place policies.json inside
["${prev.firefox-esr}/lib/firefox" "/app/etc/firefox"]
]; ];
bind.ro = [ bind.ro = [
[ "/etc/firefox/policies/policies.json" "/app/etc/firefox/policies/policies.json" ]
"/sys/bus/pci" "/sys/bus/pci"
"/etc/resolv.conf" "/etc/resolv.conf"
"/etc/localtime" "/etc/localtime"
["${prev.firefox-esr}/lib/firefox" "/app/etc/firefox"]
(sloth.concat' sloth.xdgConfigHome "/dconf") (sloth.concat' sloth.xdgConfigHome "/dconf")
(sloth.concat' sloth.xdgConfigHome "/gtk-2.0") (sloth.concat' sloth.xdgConfigHome "/gtk-2.0")
(sloth.concat' sloth.xdgConfigHome "/gtk-3.0") (sloth.concat' sloth.xdgConfigHome "/gtk-3.0")