programs: ship zulip

hosts/common/programs/default.nix

@@ -143,6 +143,7 @@
     ./zathura.nix
     ./zeal.nix
     ./zecwallet-lite.nix
+    ./zulip.nix
     ./zsh
   ];
 

hosts/common/programs/zulip.nix

@@ -0,0 +1,11 @@
+{ ... }:
+{
+  sane.programs.zulip = {
+    sandbox.method = "bwrap";
+    sandbox.net = "clearnet";
+    sandbox.whitelistDbus = [ "user" ];  # notifications (i hope!)
+    sandbox.whitelistWayland = true;
+    # creds
+    persist.byStore.private = [ ".config/Zulip" ];
+  };
+}

hosts/modules/gui/default.nix

@@ -175,6 +175,7 @@ in
       "wireshark"  # could maybe ship the cli as sysadmin pkg
       # "xterm"  # requires Xwayland
       # "zecwallet-lite"  # x86-only
+      "zulip"
     ]
   );