From 5375cab716c70d3022bb82bb92d1cc743c9103fc Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Sat, 17 Feb 2024 15:47:47 +0000
Subject: [PATCH] programs: ntfy-sh: sandbox

---
 hosts/common/programs/ntfy-sh.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/hosts/common/programs/ntfy-sh.nix b/hosts/common/programs/ntfy-sh.nix
index a52cc9ed..2a44a40f 100644
--- a/hosts/common/programs/ntfy-sh.nix
+++ b/hosts/common/programs/ntfy-sh.nix
@@ -20,6 +20,10 @@ in
       };
     };
 
+    sandbox.method = "bwrap";
+    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.net = "clearnet";
+
     secrets.".config/ntfy-sh/topic" = ../../../secrets/common/ntfy-sh-topic.bin;
 
     services.ntfy-sub = {