caem/nixos-system-config
caem/nixos-system-config
1
Fork 0
Code Pull requests 1 Releases Activity

asd

Browse source
This commit is contained in:
caem 2025-01-25 02:53:51 +01:00
parent 97a1ff240a
commit 5541426fd0
Signed by: caem
GPG key ID: 69A830D03203405F
1 changed files with 5 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
overlays/nixpak/firefox.nix
View file

@ -2,7 +2,7 @@
# https://github.com/ryan4yin/nix-config/blob/7deed26cc5a3af2072b8c89a688f265607babc80/hardening/nixpaks/firefox.nix
# https://github.com/schizofox/schizofox/blob/cdf69b2a445ff12680657a3bd44ce7c406bf2ae6/flake/modules/home-manager/default.nix
{ lib, ... }: final: prev: {
{ ... }: final: prev: {
firefox-esr = let
sandboxed-firefox-esr = prev.mkNixPak {
config = { sloth, ... }: {
@ -50,16 +50,18 @@
(envSuffix "XDG_RUNTIME_DIR" "/pulse")
(envSuffix "XDG_RUNTIME_DIR" "/doc")
(envSuffix "XDG_RUNTIME_DIR" "/dconf")
(lib.mkLast [ "/etc/firefox/policies/policies.json" "/app/etc/firefox/policies/policies.json" ])
[(sloth.mkdir (sloth.concat' sloth.xdgConfigHome "/mozilla")) (sloth.concat' sloth.homeDir "/.mozilla")]
# rw because we have to place policies.json inside
["${prev.firefox-esr}/lib/firefox" "/app/etc/firefox"]
];
bind.ro = [
[ "/etc/firefox/policies/policies.json" "/app/etc/firefox/policies/policies.json" ]
"/sys/bus/pci"
"/etc/resolv.conf"
"/etc/localtime"
["${prev.firefox-esr}/lib/firefox" "/app/etc/firefox"]
(sloth.concat' sloth.xdgConfigHome "/dconf")
(sloth.concat' sloth.xdgConfigHome "/gtk-2.0")
(sloth.concat' sloth.xdgConfigHome "/gtk-3.0")