programs: sfeed: sandbox

2024-02-19 14:14:59 +00:00
parent 3effd59c9b
commit 4b47b76461
1 changed files with 4 additions and 0 deletions
--- a/hosts/common/programs/sfeed.nix
+++ b/hosts/common/programs/sfeed.nix
@@ -16,6 +16,10 @@ let
  ) wantedFeeds;
 in {
  sane.programs.sfeed = {
+    sandbox.method = "bwrap";
+    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.net = "clearnet";
+
    fs.".sfeed/sfeedrc".symlink.text = ''
      feeds() {
        ${lib.concatStringsSep "\n  " sfeedEntries}