{ pkgs, ... }:
{
  sane.programs.conky = {
    sandbox.method = "bwrap";
    sandbox.net = "clearnet";  #< for the scripts it calls (weather)
    sandbox.extraPaths = [
      "/sys/class/power_supply"
      "/sys/devices"  # needed by sane-sysinfo
      # "/sys/devices/cpu"
      # "/sys/devices/system"
    ];
    sandbox.whitelistWayland = true;

    suggestedPrograms = [
      "sane-sysinfo"
      "sane-weather"
    ];

    fs.".config/conky/conky.conf".symlink.target = pkgs.substituteAll {
      src = ./conky.conf;
      bat = "sane-sysinfo";
      weather = "timeout 20 sane-weather";
    };

    services.conky = {
      description = "conky dynamic desktop background";
      partOf = [ "graphical-session" ];
      command = "conky";
    };
  };
}