feat: hardening nixos desktops (#160)

* feat: hardening nixos desktops

* refactor: move hardening to the root folder

* feat: add nixpaks into nixpkgs via overlays

* feat: nixpak - add netease music

* docs: hardening

* fix: nvidia

* fix: disable apparmor & hardening profile to avoid neovim being killed

* fix: firefox cursor & fonts

home/linux/gui/base/games.nix

@@ -4,7 +4,7 @@
   ...
 }: {
   home.packages = with pkgs; [
-    # nix-gaming.packages.${pkgs.system}.osu-lazer-bin
+    # nix-gaming.packages.${pkgs.system}.osu-laser-bin
     gamescope # SteamOS session compositing window manager
     prismlauncher # A free, open source launcher for Minecraft
     winetricks # A script to install DLLs needed to work around problems in Wine

home/linux/gui/base/misc.nix

@@ -12,7 +12,6 @@
     # instant messaging
     telegram-desktop
     discord
-    pkgs-unstable.qq # https://github.com/NixOS/nixpkgs/tree/master/pkgs/applications/networking/instant-messengers/qq
 
     # remote desktop(rdp connect)
     remmina
@@ -21,6 +20,10 @@
     # misc
     flameshot
     ventoy # multi-boot usb creator
+
+    # my custom hardened packages
+    pkgs.nixpaks.qq
+    pkgs.nixpaks.qq-desktop-item
   ];
 
   # GitHub CLI tool

home/linux/gui/hyprland/values/wayland-apps.nix

@@ -21,6 +21,12 @@
     ''
     + (builtins.readFile "${nur-ryan4yin.packages.${pkgs.system}.catppuccin-foot}/catppuccin-mocha.conf");
 
+  home.packages = [
+    pkgs.firefox-wayland
+    # pkgs.nixpaks.firefox
+    # pkgs.nixpaks.firefox-desktop-item
+  ];
+
   programs = {
     # a wayland only terminal emulator
     foot = {
@@ -54,12 +60,6 @@
       ];
     };
 
-    firefox = {
-      enable = true;
-      enableGnomeExtensions = false;
-      package = pkgs.firefox-wayland; # firefox with wayland support
-    };
-
     vscode = {
       enable = true;
       # let vscode sync and update its configuration & extensions across devices, using github account.