From 0454abacd9da606d48bde5f7c0b9e844c2031e1c Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Mon, 29 Jan 2024 12:52:16 +0000
Subject: [PATCH] komikku: sandbox

---
 hosts/common/programs/komikku.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/common/programs/komikku.nix b/hosts/common/programs/komikku.nix
index b2453cc5..b10fc6e8 100644
--- a/hosts/common/programs/komikku.nix
+++ b/hosts/common/programs/komikku.nix
@@ -1,6 +1,8 @@
 { ... }:
 {
   sane.programs.komikku = {
+    sandbox.method = "bwrap";  # TODO:sandbox untested
+    sandbox.wrapperType = "wrappedDerivation";
     secrets.".local/share/komikku/keyrings/plaintext.keyring" = ../../../secrets/common/komikku_accounts.json.bin;
     # downloads end up here, and without the toplevel database komikku doesn't know they exist.
     persist.byStore.plaintext = [ ".local/share/komikku" ];