colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

go2tv: sandbox with bwrap

Browse Source
This commit is contained in:
Colin 2024-01-27 15:31:08 +00:00
parent ff356fdd49
commit 770db96ec6
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
hosts/common/programs/go2tv.nix
View File

@ -32,6 +32,21 @@ let
cfg = config.sane.programs.go2tv;
in
{
sane.programs.go2tv = {
sandbox.method = "bwrap";
sandbox.extraConfig = [
"--sane-sandbox-autodetect"
];
# for GUI invocation, allow the common media directories
sandbox.extraHomePaths = [
"Music"
"Videos"
];
sandbox.extraPaths = [
"/mnt/servo-media/Music"
"/mnt/servo-media/Videos"
];
};
# for serving local files
# see: go2tv/soapcalls/utils/iptools.go
# go2tv tries port 3500, and then walks up from there port-by-port until it finds a free one.