0279c030de
loupe: sandbox with bunpen
2024-09-03 00:33:16 +00:00
f0ea3f8bf6
fractal: sandbox with bunpen
2024-09-03 00:32:03 +00:00
712b2c38f0
firefox: disable Ctrl+W shortcut
...
finally, i can stop accidentally killing tabs when i mean to backspace
2024-09-02 15:43:12 +00:00
3212664f37
firefox: migrate extraPolicies to overrides.cfg
...
this fixes that the bookmarks policy in extraPolicies was breaking my bookmarks import
2024-09-02 15:15:00 +00:00
98c62f66dd
firefox: add duckduckgo search bookmark
2024-09-02 14:11:13 +00:00
1677f77fd6
firefox: statically define a few bookmarks
2024-09-02 14:04:47 +00:00
c5e21546ff
firefox: refactor: split addons into separate file
2024-09-02 13:57:53 +00:00
5eb597b133
programs: firefox: move to subdir
...
then i'll split it into separate files fore easier management
2024-09-02 13:41:11 +00:00
90f7953615
firefox: remove dead code
2024-09-02 13:29:11 +00:00
ab15d2a991
programs: replace gnome-disk-utility with gparted
...
the latter *appears* to work better when sandboxed
2024-09-02 12:02:32 +00:00
48fccebd1e
iptables: temporarily disable sandbox
...
it was overrestrictive
2024-09-01 21:24:19 +00:00
8f4d4c97bc
avahi: ensure that mDNS responses arent blocked by rpfilter
...
this PROBABLY isnt necessary, but keep it here as i debug stuff at least
2024-09-01 21:23:52 +00:00
7d75b3c736
neovim: docs: suggest alternate mappings for nvim-cmp
2024-09-01 15:38:13 +00:00
38c6ecefa6
programs: ship camera debugging tools
2024-09-01 11:31:10 +00:00
c80aa813d9
neovim: ship GitMessenger plugin for git-blame-like functionality
2024-09-01 01:12:27 +00:00
4f6ea0938c
neovim: Ctrl+Space to autocomplete
2024-09-01 01:00:37 +00:00
b4f921ab04
programs: tangram: disable (i dont use it)
2024-08-31 07:13:39 +00:00
1d79f3eacc
papers: ship in place of Zathura as the default pdf viewer
2024-08-30 12:53:05 +00:00
73583d19d4
programs: nix: ship nixVersions.latest
...
it gives better error messages, and i'm not seeing any regressions so far
2024-08-30 09:37:56 +00:00
19e2e37105
mpv: sandbox with bunpen instead of bwrap
...
it's far enough along to be actually working; though i likely give it a few more in-namespace capabilities than it really needs
2024-08-29 20:14:30 +00:00
a2fa3727cc
sane_sysvol: fix use of uninitialized volstr
...
hey, that lua language server is pretty neat ^_^
2024-08-29 11:43:19 +00:00
963a0ee56c
mpv: setup profiles by which to tune youtube quality preferences and debanding
2024-08-29 10:17:53 +00:00
3417a9fd3f
sanebox: remove the portal logic, and delegate it to manual handling by those few apps which truly need special casing
...
it's a questionable responsibility to give to the sandbox itself (unless i also have the sandbox do things like dbus proxying, someday). and it will make the bunpen implementation simpler
2024-08-27 11:00:15 +00:00
83ef250a34
neovim: fix lints
2024-08-26 20:47:18 +00:00
59ba9e4853
neovim: disable ltex-ls plugin
2024-08-26 20:46:32 +00:00
93159485fa
neovim: integrate LSP for lua, LaTeX, html, markdown, nix, OpenSCAD, Rust, js/TypeScript :)
2024-08-26 16:49:00 +00:00
e1f5a55bca
neovim: enable bash and python language servers
2024-08-26 14:06:49 +00:00
ea2739f86c
neovim: enable "which-key" plugin
2024-08-26 14:06:49 +00:00
3c9ff16108
neovim: simplify plugin config schema
2024-08-26 14:06:49 +00:00
0787a3a50e
neovim: split plugin configs into their own file
2024-08-26 14:06:49 +00:00
446e614e9a
neovim: split vimrc into own file
2024-08-26 14:06:49 +00:00
afd0ec09a1
nixfmt-rfc-style: ship
2024-08-26 14:06:49 +00:00
ae8e9267c4
nixpkgs: 0-unstable-2024-08-21 -> 0-unstable-2024-08-25
2024-08-26 08:15:49 +00:00
5f35eaccd9
programs/host: sandbox with bunpen instead of landlock
...
this just acts as a good proof-of-concept / testing it in the wild
2024-08-23 16:00:31 +00:00
c86d893a2c
modules/programs: sandbox: allow method = "bunpen"
2024-08-23 16:00:31 +00:00
9b11b64349
haredoc: ship
2024-08-22 09:00:14 +00:00
04c41f6045
alsa-ucm-conf: make clear which data i last updated everything
2024-08-21 08:26:50 +00:00
32a52c3366
gnome-calls: document limitations/compatibility
2024-08-21 08:26:00 +00:00
55175e5957
geary: fix that it was failing to connect
2024-08-21 06:06:10 +00:00
2758b0eae2
signal-desktop: DO start by default: until/unless i get signal-flare working, hosts which are capable should launch signal-desktop at boot
2024-08-21 03:30:16 +00:00
17dcf566f7
loupe: add /dev/dri to the sandbox for faster rendering
2024-08-20 08:52:24 +00:00
ddffda1594
nixpkgs: 0-unstable-2024-08-13 -> 0-unstable-2024-08-18
2024-08-19 13:49:32 +00:00
aecbfb45c9
gnome-calls: dont fail offline indefinitely when DNS errors
2024-08-18 14:24:11 +00:00
391c4f5aac
geary: change the default autostart to true
2024-08-17 12:13:15 +00:00
08d6f9c761
dconf: sandbox out-of-place
2024-08-16 02:48:24 +00:00
05bc5923cf
sway: sandbox out-of-place
2024-08-16 02:48:24 +00:00
114b37928a
tor-browser: sandbox out-of-place
2024-08-16 02:44:27 +00:00
729d2a9809
firefox: dont use inplace wrapper
...
avoiding inplace wrapping gives me more leverage over what gets linked into the final runtime environment
2024-08-16 02:16:37 +00:00
62ebdf5de4
brave: fix sandboxing
2024-08-16 00:15:58 +00:00
f834f551ed
assorted: clarify why i use wrapperType = inplace when sandboxing
2024-08-15 21:01:42 +00:00
