feat: hardening nixos desktops (#160)

* feat: hardening nixos desktops

* refactor: move hardening to the root folder

* feat: add nixpaks into nixpkgs via overlays

* feat: nixpak - add netease music

* docs: hardening

* fix: nvidia

* fix: disable apparmor & hardening profile to avoid neovim being killed

* fix: firefox cursor & fonts

home/linux/gui/hyprland/values/wayland-apps.nix

@@ -21,6 +21,12 @@
     ''
     + (builtins.readFile "${nur-ryan4yin.packages.${pkgs.system}.catppuccin-foot}/catppuccin-mocha.conf");
 
+  home.packages = [
+    pkgs.firefox-wayland
+    # pkgs.nixpaks.firefox
+    # pkgs.nixpaks.firefox-desktop-item
+  ];
+
   programs = {
     # a wayland only terminal emulator
     foot = {
@@ -54,12 +60,6 @@
       ];
     };
 
-    firefox = {
-      enable = true;
-      enableGnomeExtensions = false;
-      package = pkgs.firefox-wayland; # firefox with wayland support
-    };
-
     vscode = {
       enable = true;
       # let vscode sync and update its configuration & extensions across devices, using github account.