mirror of
https://github.com/ryan4yin/nix-config.git
synced 2026-01-11 22:30:25 +01:00
89 lines
2.6 KiB
Nix
89 lines
2.6 KiB
Nix
# Refer:
|
|
# - Flatpak manifest's docs:
|
|
# - https://docs.flatpak.org/en/latest/manifests.html
|
|
# - https://docs.flatpak.org/en/latest/sandbox-permissions.html
|
|
# - Firefox's flatpak manifest: https://hg.mozilla.org/mozilla-central/file/tip/taskcluster/docker/firefox-flatpak/runme.sh#l151
|
|
{
|
|
lib,
|
|
pkgs,
|
|
mkNixPak,
|
|
...
|
|
}:
|
|
mkNixPak {
|
|
config =
|
|
{
|
|
config,
|
|
sloth,
|
|
...
|
|
}:
|
|
{
|
|
app = {
|
|
package = pkgs.firefox-wayland;
|
|
binPath = "bin/firefox";
|
|
};
|
|
flatpak.appId = "org.mozilla.firefox";
|
|
|
|
imports = [
|
|
./modules/gui-base.nix
|
|
./modules/network.nix
|
|
];
|
|
|
|
# list all dbus services:
|
|
# ls -al /run/current-system/sw/share/dbus-1/services/
|
|
# ls -al /etc/profiles/per-user/ryan/share/dbus-1/services/
|
|
dbus.policies = {
|
|
"org.mozilla.firefox.*" = "own"; # firefox
|
|
"org.mozilla.firefox_beta.*" = "own"; # firefox beta
|
|
"org.mpris.MediaPlayer2.firefox.*" = "own";
|
|
"org.freedesktop.NetworkManager" = "talk";
|
|
|
|
"org.gnome.Shell.Screencast" = "talk";
|
|
# System tray icon
|
|
"org.freedesktop.Notifications" = "talk";
|
|
"org.kde.StatusNotifierWatcher" = "talk";
|
|
# File Manager
|
|
"org.freedesktop.FileManager1" = "talk";
|
|
# Uses legacy StatusNotifier implementation
|
|
"org.kde.*" = "own";
|
|
};
|
|
|
|
bubblewrap = {
|
|
# To trace all the home files QQ accesses, you can use the following nushell command:
|
|
# just trace-access firefox
|
|
# See the Justfile in the root of this repository for more information.
|
|
bind.rw = [
|
|
# given the read write permission to the following directories.
|
|
# NOTE: sloth.mkdir is used to create the directory if it does not exist!
|
|
(sloth.mkdir (sloth.concat' sloth.homeDir "/.mozilla"))
|
|
|
|
sloth.xdgDocumentsDir
|
|
sloth.xdgDownloadDir
|
|
sloth.xdgMusicDir
|
|
sloth.xdgVideosDir
|
|
];
|
|
bind.ro = [
|
|
"/sys/bus/pci"
|
|
[
|
|
"${config.app.package}/lib/firefox"
|
|
"/app/etc/firefox"
|
|
]
|
|
|
|
# ================ for browserpass extension ===============================
|
|
"/etc/gnupg"
|
|
(sloth.concat' sloth.homeDir "/.gnupg") # gpg's config
|
|
(sloth.concat' sloth.homeDir "/.local/share/password-store") # my secrets
|
|
(sloth.concat' sloth.runtimeDir "/gnupg") # for access gpg-agent socket
|
|
|
|
# Unsure
|
|
(sloth.concat' sloth.xdgConfigHome "/dconf")
|
|
];
|
|
|
|
sockets = {
|
|
x11 = false;
|
|
wayland = true;
|
|
pipewire = true;
|
|
};
|
|
};
|
|
};
|
|
}
|