programs: persist data better for spotify, brave, tor

hosts/common/programs/assorted.nix

@@ -248,19 +248,10 @@ in
     # printer/filament settings
     slic3r.persist.plaintext = [ ".Slic3r" ];
 
-    # creds, widevine .so download. TODO: could easily manage these statically.
-    spotify.persist.plaintext = [ ".config/spotify" ];
-
     tdesktop.persist.private = [ ".local/share/TelegramDesktop" ];
 
     tokodon.persist.private = [ ".cache/KDE/tokodon" ];
 
-    # hardenedMalloc solves an "unable to connect to Tor" error when pressing the "connect" button
-    # - still required as of 2023/07/14
-    tor-browser-bundle-bin.package = pkgs.tor-browser-bundle-bin.override {
-      useHardenedMalloc = false;
-    };
-
     whalebird.persist.private = [ ".config/Whalebird" ];
 
     yarn.persist.plaintext = [ ".cache/yarn" ];

hosts/common/programs/brave.nix

@@ -0,0 +1,9 @@
+{ ... }:
+{
+  sane.programs.brave = {
+    persist.cryptClearOnBoot = [
+      ".cache/BraveSoftware"
+      ".config/BraveSoftware"
+    ];
+  };
+}

hosts/common/programs/default.nix

@@ -6,6 +6,7 @@
     ./alacritty.nix
     ./assorted.nix
     ./bemenu.nix
+    ./brave.nix
     ./calls.nix
     ./cantata.nix
     ./chatty.nix
@@ -53,11 +54,13 @@
     ./ripgrep.nix
     ./sfeed.nix
     ./splatmoji.nix
+    ./spotify.nix
     ./steam.nix
     ./stepmania.nix
     ./sublime-music.nix
     ./swaynotificationcenter.nix
     ./tangram.nix
+    ./tor-browser-bundle-bin.nix
     ./tuba.nix
     ./vlc.nix
     ./wireshark.nix

hosts/common/programs/spotify.nix

@@ -0,0 +1,14 @@
+{ ... }:
+{
+  sane.programs.spotify = {
+    persist.plaintext = [
+      # probably just songs and such (haven't checked)
+      ".cache/spotify"
+    ];
+    persist.private = [
+      # creds, widevine .so download. TODO: could easily manage these statically.
+      ".config/spotify"
+    ];
+  };
+}
+

hosts/common/programs/tor-browser-bundle-bin.nix

@@ -0,0 +1,13 @@
+{ pkgs, ... }:
+{
+  sane.programs.tor-browser-bundle-bin = {
+    package = pkgs.tor-browser-bundle-bin.override {
+      # hardenedMalloc solves an "unable to connect to Tor" error when pressing the "connect" button
+      # - still required as of 2023/07/14
+      useHardenedMalloc = false;
+    };
+    persist.cryptClearOnBoot = [
+      ".local/share/tor-browser"
+    ];
+  };
+}