mumble: ship desktop interface

hosts/common/programs/assorted.nix

@@ -398,7 +398,7 @@ in
       "losslesscut-bin"  # x86-only
       # "makemkv"  # x86-only
       # "monero-gui"  # x86-only
-      # "mumble"
+      "mumble"
       # "nheko"  # Matrix chat client
       "nicotine-plus"  # soulseek client
       # "obsidian"
@@ -851,9 +851,6 @@ in
       "records/finance/cryptocurrencies/monero"
     ];
 
-    mumble.buildCost = 1;
-    mumble.persist.byStore.private = [ ".local/share/Mumble" ];
-
     nano.sandbox.autodetectCliPaths = "existingFileOrParent";
 
     netcat.sandbox.net = "all";

hosts/common/programs/default.nix

@@ -112,6 +112,7 @@
     ./mimetype.nix
     ./mmcli.nix
     ./mopidy.nix
+    ./mumble.nix
     ./mpv
     ./msmtp.nix
     ./nautilus.nix

hosts/common/programs/mumble.nix

@@ -0,0 +1,14 @@
+{ ... }:
+{
+  sane.programs.mumble = {
+    buildCost = 1;
+    persist.byStore.private = [
+      ".config/Mumble"  #< client cert, audio + UI settings
+      ".local/share/Mumble"  #< sqlite db; probably server connections
+    ];
+
+    sandbox.net = "all";
+    sandbox.whitelistWayland = true;
+    sandbox.whitelistAudio = true;
+  };
+}