39 lines
997 B
Nix
39 lines
997 B
Nix
{ ... }:
|
|
{
|
|
sane.programs.portfolio-filemanager = {
|
|
# this is all taken pretty directly from nautilus config
|
|
sandbox.method = "bwrap";
|
|
sandbox.whitelistDbus = [ "user" ]; # for portals launching apps
|
|
sandbox.whitelistWayland = true;
|
|
sandbox.extraHomePaths = [
|
|
# grant access to pretty much everything, except for secret keys.
|
|
"/"
|
|
".persist/ephemeral"
|
|
".persist/plaintext"
|
|
"knowledge"
|
|
"nixos"
|
|
];
|
|
sandbox.extraPaths = [
|
|
"/boot"
|
|
"/mnt/desko"
|
|
"/mnt/lappy"
|
|
"/mnt/moby"
|
|
"/mnt/servo"
|
|
# "nix"
|
|
"/run/media" # for mounted devices
|
|
"/tmp"
|
|
"/var"
|
|
];
|
|
sandbox.extraRuntimePaths = [
|
|
# not sure if these are actually necessary
|
|
"gvfs"
|
|
"gvfsd"
|
|
];
|
|
|
|
mime.priority = 160; #< default is 100, so higher means we fall-back to other apps that might be more specialized
|
|
mime.associations = {
|
|
"inode/directory" = "dev.tchx84.Portfolio.desktop";
|
|
};
|
|
};
|
|
}
|