Colin
1e25f37774
```
• Updated input 'nixpkgs-next-unpatched':
'github:nixos/nixpkgs/33cddc79aa062e243c59d3ac36b8b938f267748a' (2024-03-21)
→ 'github:nixos/nixpkgs/86b5ff8306a63bb266590018b21d2ae502a74880' (2024-03-22)
• Updated input 'nixpkgs-unpatched':
'github:nixos/nixpkgs/783b241f949bea90e3347ce516ad8af84bde3126' (2024-03-21)
→ 'github:nixos/nixpkgs/6e147dce88054c47dd90c0be8c33500e023f8261' (2024-03-22)
```
24 lines
670 B
Nix
24 lines
670 B
Nix
{ pkgs, ... }:
|
|
{
|
|
sane.programs.handbrake = {
|
|
sandbox.method = "landlock"; #< also supports bwrap, but landlock ensures we don't write to non-mounted tmpfs dir
|
|
sandbox.whitelistDbus = [ "user" ]; # notifications
|
|
sandbox.whitelistWayland = true;
|
|
sandbox.extraHomePaths = [
|
|
"Music"
|
|
"Pictures/from" # e.g. videos filmed from my phone
|
|
"Videos/local"
|
|
"Videos/servo"
|
|
"tmp"
|
|
];
|
|
sandbox.autodetectCliPaths = true;
|
|
|
|
# disable expensive sambda dependency; i don't use it.
|
|
packageUnwrapped = pkgs.handbrake.override {
|
|
ffmpeg-full = pkgs.ffmpeg-full.override {
|
|
withSamba = false;
|
|
};
|
|
};
|
|
};
|
|
}
|