| .. |
|
alsa-ucm-conf
|
nits: update --replace uses to --replace-{fail,quiet} as appropriate
|
2024-03-24 12:49:18 +00:00 |
|
blast-ugjka
|
blast-to-default: leverage sane-die-with-parent
|
2024-04-21 11:09:23 +00:00 |
|
conky
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
deadd-notification-center
|
deadd-notification-center: add to sane.programs
|
2024-03-08 04:06:18 +00:00 |
|
gnome-keyring
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
htop
|
htop: include "PRIORITY" column
|
2024-04-23 12:01:15 +00:00 |
|
koreader
|
koreader: fix sandboxing so that i can open links again
|
2024-04-24 01:02:02 +00:00 |
|
mimeo
|
doc: mimeo: mention jaro as alternative
|
2024-03-03 03:16:10 +00:00 |
|
mpv
|
sane-cast: add a menu for choosing which device to cast to whenever there are multiple
|
2024-04-23 08:10:05 +00:00 |
|
rofi
|
moby: update improve button mappings
|
2024-04-22 04:05:52 +00:00 |
|
sane-input-handler
|
sane-input-handler: fix power_hold -> power_tap_1_hold when inhibited by rofi
|
2024-04-22 06:27:33 +00:00 |
|
sway
|
style: refine the base pink color for mpv and sway/waybar
|
2024-04-13 20:29:24 +00:00 |
|
sway-autoscaler
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
swaynotificationcenter
|
swaync: show volume-per-app (TODO: stylize it better)
|
2024-04-17 01:37:03 +00:00 |
|
unl0kr
|
unl0kr: disable animations
|
2024-04-15 21:10:55 +00:00 |
|
waybar
|
style: refine the base pink color for mpv and sway/waybar
|
2024-04-13 20:29:24 +00:00 |
|
zsh
|
zsh: deref alias: make the result writable
|
2024-03-11 08:01:27 +00:00 |
|
abaddon.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
aerc.nix
|
packages: reduce the number of packages which are using inplace sandbox wrapping
|
2024-02-28 17:35:40 +00:00 |
|
alacritty.nix
|
alacritty: configure font size per-host
|
2024-03-06 05:07:30 +00:00 |
|
animatch.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
assorted.nix
|
valgrind: mark as not sandboxable
|
2024-04-23 09:08:05 +00:00 |
|
audacity.nix
|
audacity: fix sandboxing
|
2024-04-02 02:56:51 +00:00 |
|
bemenu.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
bonsai.nix
|
bonsai: store the config in ~/.config to allow easier online editing
|
2024-04-22 04:05:15 +00:00 |
|
brave.nix
|
programs: sandboxing: only permit wayland socket access to those specific apps which require it
|
2024-02-14 01:49:49 +00:00 |
|
bubblewrap.nix
|
nits: update --replace uses to --replace-{fail,quiet} as appropriate
|
2024-03-24 12:49:18 +00:00 |
|
calls.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
cantata.nix
|
persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)
|
2023-11-08 15:33:15 +00:00 |
|
catt.nix
|
programs: enable catt
|
2023-12-14 08:41:16 +00:00 |
|
celeste64.nix
|
ship celeste64
|
2024-03-06 04:56:39 +00:00 |
|
chatty.nix
|
programs: allow running binaries in a netns-style firejail
|
2024-01-20 11:11:12 +00:00 |
|
cozy.nix
|
cozy: patch via sane.programs, not overlay
|
2024-03-04 09:26:25 +00:00 |
|
cups.nix
|
programs: ship cups
|
2024-04-14 03:33:55 +00:00 |
|
curlftpfs.nix
|
curlftpfs: document sandbox attempt
|
2024-04-23 09:08:05 +00:00 |
|
dconf.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
default.nix
|
pipewire: sandbox with landlock (so that rtkit integration works) and split rtkit into own file
|
2024-04-23 09:08:05 +00:00 |
|
dialect.nix
|
dialect: fix so it works inside a sandbox
|
2024-03-02 18:25:13 +00:00 |
|
dino.nix
|
dino: record another bug
|
2024-04-17 09:53:08 +00:00 |
|
dissent.nix
|
nits: update --replace uses to --replace-{fail,quiet} as appropriate
|
2024-03-24 12:49:18 +00:00 |
|
dtrx.nix
|
feeds: podcasts: add Tech Tales
|
2024-04-19 21:46:03 +00:00 |
|
element-desktop.nix
|
element-desktop: use native wayland, not Xwayland
|
2024-03-23 18:51:41 +00:00 |
|
engrampa.nix
|
engrampa: remove custom patch (upstream released a new version)
|
2024-03-24 07:46:22 +00:00 |
|
epiphany.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
evince.nix
|
programs: sandboxing: only permit wayland socket access to those specific apps which require it
|
2024-02-14 01:49:49 +00:00 |
|
fcitx5.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
feedbackd.nix
|
feedbackd: fix so it depends on pipewire before launch
|
2024-03-26 13:48:13 +00:00 |
|
firefox.nix
|
firefox: decrease scrollbar width 20px -> 14px
|
2024-04-21 21:08:07 +00:00 |
|
firejail.nix
|
modules/programs: require manual definition; don't auto-populate attrset
|
2024-02-28 13:35:09 +00:00 |
|
flare-signal.nix
|
programs: allow running binaries in a netns-style firejail
|
2024-01-20 11:11:12 +00:00 |
|
fontconfig.nix
|
fontconfig: populate the cache directory even when cross compiling
|
2024-04-22 09:47:20 +00:00 |
|
fractal.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
frozen-bubble.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
fwupd.nix
|
modules/programs: require manual definition; don't auto-populate attrset
|
2024-02-28 13:35:09 +00:00 |
|
g4music.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
gajim.nix
|
persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)
|
2023-11-08 15:33:15 +00:00 |
|
gdbus.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
geary.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
git.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
gnome-feeds.nix
|
programs: remove wantedBy from the fs, and make it implicit
|
2023-05-08 21:41:02 +00:00 |
|
gnome-maps.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
gnome-weather.nix
|
packages: reduce the number of packages which are using inplace sandbox wrapping
|
2024-02-28 17:35:40 +00:00 |
|
go2tv.nix
|
go2tv: clarify compatibility
|
2024-04-22 12:45:55 +00:00 |
|
gpodder.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
grimshot.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
gthumb.nix
|
programs: allow running binaries in a netns-style firejail
|
2024-01-20 11:11:12 +00:00 |
|
gvfs.nix
|
gvfs: enable as part of nautilus, not sway
|
2024-04-13 20:29:24 +00:00 |
|
handbrake.nix
|
nixpkgs: 2024-03-21 -> 2024-03-22
|
2024-03-22 11:56:51 +00:00 |
|
helix.nix
|
persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)
|
2023-11-08 15:33:15 +00:00 |
|
imagemagick.nix
|
programs: sandboxing: link /etc into sandboxed programs
|
2024-02-27 22:25:17 +00:00 |
|
jellyfin-media-player.nix
|
programs: allow running binaries in a netns-style firejail
|
2024-01-20 11:11:12 +00:00 |
|
kdenlive.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
komikku.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
lemoa.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
less.nix
|
less: sandbox
|
2024-03-02 07:11:45 +00:00 |
|
lftp.nix
|
programs: ship lftp ftp client
|
2024-04-18 04:17:10 +00:00 |
|
libreoffice.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
loupe.nix
|
loupe: associate with avif filetype
|
2024-04-09 19:22:59 +00:00 |
|
mako.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
megapixels.nix
|
megapixels: fix folder icon to actually open ~/Pictures/Photos
|
2024-04-22 00:16:46 +00:00 |
|
mepo.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
mopidy.nix
|
programs: allow running binaries in a netns-style firejail
|
2024-01-20 11:11:12 +00:00 |
|
msmtp.nix
|
programs: ship msmtp sendmail implementation
|
2023-07-01 00:28:59 +00:00 |
|
nautilus.nix
|
gvfs: enable as part of nautilus, not sway
|
2024-04-13 20:29:24 +00:00 |
|
neovim.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
newsflash.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
nheko.nix
|
persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)
|
2023-11-08 15:33:15 +00:00 |
|
nicotine-plus.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
nix-index.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
notejot.nix
|
notejot: fix sandboxing
|
2024-04-09 15:44:01 +00:00 |
|
ntfy-sh.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
objdump.nix
|
programs: ship objdump
|
2024-04-13 20:29:24 +00:00 |
|
obsidian.nix
|
mime: support multiple implementors of the same association, with different priorities
|
2023-07-15 10:11:31 +00:00 |
|
offlineimap.nix
|
secrets: rename "universal" -> "common" to match the language of hosts/
|
2023-05-14 08:52:43 +00:00 |
|
open-in-mpv.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
pipewire.nix
|
pipewire: switch back to bwrap sandboxing and document limitations
|
2024-04-24 13:14:35 +00:00 |
|
planify.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
playerctl.nix
|
users/services: implement dbus readiness checks for s6-rc
|
2024-03-21 17:16:11 +00:00 |
|
portfolio-filemanager.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
rhythmbox.nix
|
persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)
|
2023-11-08 15:33:15 +00:00 |
|
ripgrep.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
rtkit.nix
|
WIP: pipewire: trying to tune so lima doesnt crash
|
2024-04-24 09:20:13 +00:00 |
|
s6-rc.nix
|
s6: migrate to /run/user/$id/s6
|
2024-03-23 21:33:08 +00:00 |
|
sane-sandboxed.nix
|
sane-sandboxed: split out into an actual package
|
2024-04-15 18:57:22 +00:00 |
|
sane-screenshot.nix
|
sane-screenshot: give it permissions to my screenshots dir (derp)
|
2024-03-02 06:14:05 +00:00 |
|
sane-scripts.nix
|
sane-bt-add: fix sandboxing
|
2024-04-03 09:48:21 +00:00 |
|
schlock.nix
|
docs: note limitations of schlock
|
2024-03-08 08:16:11 +00:00 |
|
sfeed.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
signal-desktop.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
splatmoji.nix
|
splatmoji: actually install the .desktop files
|
2024-03-01 18:03:45 +00:00 |
|
spot.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
spotify.nix
|
programs: sandboxing: only permit wayland socket access to those specific apps which require it
|
2024-02-14 01:49:49 +00:00 |
|
steam.nix
|
steam: fix controllers to work in the sandbox
|
2024-03-03 20:03:20 +00:00 |
|
stepmania.nix
|
programs: stepmania: sandbox
|
2024-02-25 18:26:32 +00:00 |
|
strings.nix
|
packages: reduce the number of packages which are using inplace sandbox wrapping
|
2024-02-28 17:35:40 +00:00 |
|
sublime-music.nix
|
programs: allow running binaries in a netns-style firejail
|
2024-01-20 11:11:12 +00:00 |
|
supertuxkart.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
swayidle.nix
|
sway: place SWAYSOCK in a subdirectory
|
2024-03-23 11:33:58 +00:00 |
|
swaylock.nix
|
swayidle: enable; pair with swaylock
|
2024-03-06 20:55:01 +00:00 |
|
sysvol.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
tangram.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
tor-browser.nix
|
packages: reduce the number of packages which are using inplace sandbox wrapping
|
2024-02-28 17:35:40 +00:00 |
|
tuba.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
vlc.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
waylock.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
wike.nix
|
wike: fix sandboxing for 3.0
|
2024-04-19 01:26:58 +00:00 |
|
wine.nix
|
remove samba from closure
|
2024-02-01 15:28:40 +00:00 |
|
wireplumber.nix
|
WIP: pipewire: trying to tune so lima doesnt crash
|
2024-04-24 09:20:13 +00:00 |
|
wireshark.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
wvkbd.nix
|
users/services: simplify the before/after/wantedBy criteria, to match s6 concepts
|
2024-03-21 17:16:11 +00:00 |
|
xarchiver.nix
|
programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that
|
2024-02-28 17:39:00 +00:00 |
|
xdg-desktop-portal-gtk.nix
|
users/services: implement dbus readiness checks for s6-rc
|
2024-03-21 17:16:11 +00:00 |
|
xdg-desktop-portal-wlr.nix
|
xdg-desktop-portal-wlr: propery document its dependency on pipewire
|
2024-04-02 09:01:35 +00:00 |
|
xdg-desktop-portal.nix
|
fix warnings: remove xdg-desktop-portal patch; fix mautrix-meta enable logic
|
2024-04-05 21:40:42 +00:00 |
|
xdg-terminal-exec.nix
|
xdg-terminal-exec: remove upstreamed patched
|
2024-04-14 14:16:50 +00:00 |
|
xdg-utils.nix
|
xdg-utils: re-add mimetype package
|
2024-02-13 12:31:04 +00:00 |
|
zathura.nix
|
PDF viewer: evince -> zathura
|
2024-03-06 04:51:01 +00:00 |
|
zeal.nix
|
introduce 'moby-min' host variant for the quickest deployment (no webkitgtk)
|
2024-04-13 20:29:24 +00:00 |
|
zecwallet-lite.nix
|
programs: zecwallet-lite: move to own file
|
2024-01-01 15:17:51 +00:00 |
