programs: dialect: sandbox with bubblewrap

2024-01-23 16:23:14 +00:00 · 2024-01-23 16:23:14 +00:00 · ccf4f66dd9
commit ccf4f66dd9
parent b38e5403a5
1 changed files with 5 additions and 0 deletions
--- a/hosts/common/programs/dialect.nix
+++ b/hosts/common/programs/dialect.nix
@ -1,6 +1,8 @@
 { pkgs, ... }:
 {
  sane.programs.dialect = {
+    sandbox.method = "bwrap";
+
    packageUnwrapped = pkgs.dialect.overrideAttrs (upstream: {
      # TODO: send upstream
      # TODO: figure out how to get audio working
@ -9,5 +11,8 @@
        pkgs.glib-networking  # for TLS
      ];
    });
+
+    # dialect reads settings via dconf
+    fs.".config/dconf" = {};
  };
 }