From ccf4f66dd93b71c9e7e960cd14ce115ca81f4c73 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Tue, 23 Jan 2024 16:23:14 +0000
Subject: [PATCH] programs: dialect: sandbox with bubblewrap

---
 hosts/common/programs/dialect.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/common/programs/dialect.nix b/hosts/common/programs/dialect.nix
index c9484259..7c1c854f 100644
--- a/hosts/common/programs/dialect.nix
+++ b/hosts/common/programs/dialect.nix
@@ -1,6 +1,8 @@
 { pkgs, ... }:
 {
   sane.programs.dialect = {
+    sandbox.method = "bwrap";
+
     packageUnwrapped = pkgs.dialect.overrideAttrs (upstream: {
       # TODO: send upstream
       # TODO: figure out how to get audio working
@@ -9,5 +11,8 @@
         pkgs.glib-networking  # for TLS
       ];
     });
+
+    # dialect reads settings via dconf
+    fs.".config/dconf" = {};
   };
 }