nix-files

alsa-ucm-conf

alsa-ucm-conf: make clear which data i last updated everything

2024-08-21 08:26:50 +00:00

blast-ugjka

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

conky

conky: sandbox with bunpen

2024-09-03 14:45:59 +00:00

deadd-notification-center

deadd-notification-center: add to sane.programs

2024-03-08 04:06:18 +00:00

firefox

firefox: add a "pr" search shortcut to search nixpkgs PRs

2024-09-05 05:30:10 +00:00

gnome-keyring

gnome-keyring-daemon: sandbox with bunpen

2024-09-06 03:12:00 +00:00

htop

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

koreader

assorted: remove outdated comments about landlock > bwrap

2024-09-03 04:49:36 +00:00

mimeo

dont treat python packages specially: lift all python packages out of python-packages/ subdir; remove pyPkgs arg from static-nix-shell.mkPython3

2024-06-27 11:28:17 +00:00

mpv

mpv: sandbox with bunpen instead of bwrap

2024-08-29 20:14:30 +00:00

neovim

neovim: sandbox with bunpen

2024-09-03 01:50:01 +00:00

networkmanager_dmenu

modules/programs: rename isolatePids -> keepPids, isolateUsers -> keepUsers

2024-09-06 04:06:42 +00:00

nwg-panel

nwg-panel/torch-toggle: sandbox with bunpen

2024-09-07 18:33:08 +00:00

pipewire

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

rofi

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

rsyslog

rsyslog: disable

2024-08-08 07:40:59 +00:00

sane-input-handler

wvkbd: sandbox with bunpen

2024-09-07 02:14:20 +00:00

sway

fcitx5: re-enable

2024-09-07 18:35:55 +00:00

sway-autoscaler

static-nix-shell: fix mkBash scripts to actually be invokable from the CLI

2024-06-15 07:42:04 +00:00

swaynotificationcenter

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

unl0kr

unl0kr: sandbox with bunpen

2024-09-03 15:42:39 +00:00

waybar

sway: sandbox out-of-place

2024-08-16 02:48:24 +00:00

xdg-desktop-portal-gnome

xdg-desktop-portal-gnome: sandbox with bunpen

2024-09-03 17:56:17 +00:00

zsh

sane-deadlines: only show on physical login, not ssh

2024-07-29 03:42:52 +00:00

abaddon.nix

users/services: simplify the before/after/wantedBy criteria, to match s6 concepts

2024-03-21 17:16:11 +00:00

aerc.nix

aerc: sandbox with bunpen

2024-09-04 13:49:40 +00:00

alacritty.nix

alacritty: configure font size per-host

2024-03-06 05:07:30 +00:00

animatch.nix

animatch: sandbox with bunpen

2024-09-03 14:10:14 +00:00

assorted.nix

iputils: sandbox with bunpen

2024-09-07 20:26:36 +00:00

audacity.nix

audacity: sandbox with bunpen

2024-09-03 14:46:47 +00:00

ausyscall.nix

ausyscall: sandbox with bunpen

2024-09-03 03:30:57 +00:00

avahi.nix

avahi: fix ip6tables firewall rule

2024-09-06 01:17:21 +00:00

bemenu.nix

programs/assorted: prefer makeBinaryWrapper over makeWrapper

2024-07-03 16:35:45 +00:00

bitcoin-cli.nix

link manpages into all linkIntoOwnPackage users

2024-08-01 17:43:58 +00:00

bonsai.nix

bonsai: sandbox with bunpen

2024-09-06 05:20:51 +00:00

brave.nix

brave: sandbox with bunpen

2024-09-03 12:39:57 +00:00

brightnessctl.nix

assorted: remove outdated comments about landlock > bwrap

2024-09-03 04:49:36 +00:00

bubblewrap.nix

nits: update --replace uses to --replace-{fail,quiet} as appropriate

2024-03-24 12:49:18 +00:00

bunpen.nix

modules/programs: sandbox: allow method = "bunpen"

2024-08-23 16:00:31 +00:00

callaudiod.nix

callaudiod: sandbox

2024-07-05 23:12:16 +00:00

calls.nix

gnome-calls: document limitations/compatibility

2024-08-21 08:26:00 +00:00

cantata.nix

persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)

2023-11-08 15:33:15 +00:00

capsh.nix

libcap: split into separate capsh and captree programs, and sandbox the latter

2024-08-12 10:13:50 +00:00

captree.nix

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

catt.nix

programs: enable catt

2023-12-14 08:41:16 +00:00

celeste64.nix

celeste64: sandbox with bunpen

2024-09-03 17:51:13 +00:00

chatty.nix

programs: allow running binaries in a netns-style firejail

2024-01-20 11:11:12 +00:00

cozy.nix

assorted: remove outdated comments about landlock > bwrap

2024-09-03 04:49:36 +00:00

cups.nix

programs: ship cups

2024-04-14 03:33:55 +00:00

curl.nix

curl: sandbox with bunpen

2024-09-03 13:04:45 +00:00

curlftpfs.nix

modules/programs: rename isolatePids -> keepPids, isolateUsers -> keepUsers

2024-09-06 04:06:42 +00:00

dbus.nix

modules/programs: rename isolatePids -> keepPids, isolateUsers -> keepUsers

2024-09-06 04:06:42 +00:00

dconf.nix

dconf: sandbox with bunpen

2024-09-03 18:21:58 +00:00

default.nix

sm64ex-coop-deluxe: ship (and configure so that you dont have to drag the rom)

2024-09-07 06:21:11 +00:00

dialect.nix

dialect: sandbox with bunpen

2024-09-03 14:11:05 +00:00

dino.nix

dino: sandbox with bunpen

2024-09-03 02:13:00 +00:00

dissent.nix

dissent: sandbox with bunpen

2024-09-03 02:23:42 +00:00

dtrx.nix

dtrx: sandbox with bunpen

2024-09-03 14:04:41 +00:00

eg25-control.nix

gps-share: dont launch until after the modem is actually powered on

2024-07-24 11:15:44 +00:00

element-desktop.nix

element-desktop: sandbox with bunpen

2024-09-03 17:48:58 +00:00

engrampa.nix

engrampa: sandbox with bunpen

2024-09-03 14:05:34 +00:00

epiphany.nix

epiphany: sandbox with bunpen

2024-09-06 05:23:00 +00:00

errno.nix

errno: sandbox with bunpen

2024-09-03 03:37:05 +00:00

evince.nix

assorted programs: specify sandbox.autodetectCliPaths variant more precisely than just true

2024-05-28 07:14:27 +00:00

exiftool.nix

exiftool: sandbox with bunpen

2024-09-03 19:19:24 +00:00

fcitx5.nix

fcitx5: re-enable

2024-09-07 18:35:55 +00:00

feedbackd.nix

replace builtins.toJSON with writers.writeJSON where possible

2024-06-18 09:33:17 +00:00

firefox-xdg-open.nix

firefox-xdg-open: sandbox with bunpen

2024-09-03 14:07:28 +00:00

flare-signal.nix

flare-signal: update compatibility notes

2024-08-07 22:07:56 +00:00

foliate.nix

foliate: sandbox with bunpen

2024-09-06 05:25:20 +00:00

fontconfig.nix

fontconfig: sandbox with bunpen

2024-09-03 18:22:27 +00:00

fractal.nix

fractal: sandbox with bunpen

2024-09-03 00:32:03 +00:00

free.nix

free: sandbox with bunpen

2024-09-03 02:26:17 +00:00

frozen-bubble.nix

frozen-bubble: sandbox with bunpen

2024-09-03 18:35:07 +00:00

fwupd.nix

modules/programs: require manual definition; don't auto-populate attrset

2024-02-28 13:35:09 +00:00

g4music.nix

g4music: sandbox with bunpen

2024-09-07 19:23:05 +00:00

gajim.nix

persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)

2023-11-08 15:33:15 +00:00

gdb.nix

gdb: ship a python-capable gdbinit

2024-06-19 23:03:17 +00:00

gdbus.nix

gdbus: sandbox with bunpen

2024-09-03 12:54:06 +00:00

geary.nix

geary: sandbox with bunpen

2024-09-03 01:48:07 +00:00

geoclue2.nix

geoclue: dont place unsandboxed files on PATH

2024-07-06 03:05:49 +00:00

geoclue-demo-agent.nix

geoclue-demo-agent: sandbox with bunpen

2024-09-07 04:31:53 +00:00

git.nix

git: sandbox with bunpen

2024-09-03 13:05:42 +00:00

gnome-clocks.nix

gnome-clocks: sandbox with bunpen

2024-09-03 14:07:57 +00:00

gnome-feeds.nix

replace builtins.toJSON with writers.writeJSON where possible

2024-06-18 09:33:17 +00:00

gnome-maps.nix

gnome-maps: sandbox with bunpen

2024-09-03 12:38:19 +00:00

gnome-weather.nix

gnome-weather: sandbox with bunpen

2024-09-03 14:08:26 +00:00

go2tv.nix

go2tv: sandbox with bunpen

2024-09-07 18:37:18 +00:00

gocryptfs.nix

gocryptfs: sandbox with landlock

2024-08-05 23:01:38 +00:00

gpodder.nix

gpodder: sandbox with bunpen

2024-09-03 18:24:04 +00:00

gps-share.nix

gps-share: sandbox with bunpen

2024-09-07 04:27:20 +00:00

gpsd.nix

moby: remove gps.nix

2024-06-20 12:01:10 +00:00

grimshot.nix

grimshot: fix sandboxing so that wl-clipboard can actually copy stuff to the clipboard

2024-09-06 04:57:53 +00:00

gst-device-monitor.nix

gst-device-monitor: sandbox with bunpen

2024-09-03 19:19:24 +00:00

gthumb.nix

programs: allow running binaries in a netns-style firejail

2024-01-20 11:11:12 +00:00

gvfs.nix

gvfs: enable as part of nautilus, not sway

2024-04-13 20:29:24 +00:00

handbrake.nix

nixpkgs: 2024-05-26 -> 2024-05-31, nixpkgs-wayland -> 2024-05-31

2024-05-31 06:09:03 +00:00

haredoc.nix

haredoc: sandbox with bunpen

2024-09-03 02:25:52 +00:00

helix.nix

persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)

2023-11-08 15:33:15 +00:00

iio-sensor-proxy.nix

iio-sensor-proxy: sandbox

2024-07-04 19:27:16 +00:00

imagemagick.nix

imagemagick: sandbox with bunpen

2024-09-03 17:52:23 +00:00

inkscape.nix

inkscape: split to own file and sandbox with bunpen

2024-09-03 19:19:24 +00:00

jellyfin-media-player.nix

programs: allow running binaries in a netns-style firejail

2024-01-20 11:11:12 +00:00

kdenlive.nix

kdenlive: sandbox with bunpen

2024-09-03 19:19:24 +00:00

keymapp.nix

pc: add tools to make using the ZSA Ergodox easier

2024-06-28 10:25:02 +00:00

komikku.nix

komikku: sandbox with bunpen

2024-09-06 05:24:48 +00:00

krita.nix

krita: split into own file and sandbox with bunpen

2024-09-03 17:30:41 +00:00

lemoa.nix

programs: set buildCost=1 for assorted low-priority programs

2024-05-13 22:45:33 +00:00

less.nix

less: sandbox with bunpen

2024-09-03 02:24:51 +00:00

lftp.nix

lftp: sandbox with bunpen

2024-09-03 19:19:24 +00:00

lgtrombetta-compass.nix

lgtrombetta-compass: ship

2024-07-18 16:40:17 +00:00

libreoffice.nix

assorted programs: specify sandbox.autodetectCliPaths variant more precisely than just true

2024-05-28 07:14:27 +00:00

loupe.nix

loupe: sandbox with bunpen

2024-09-03 00:33:16 +00:00

mako.nix

users/services: simplify the before/after/wantedBy criteria, to match s6 concepts

2024-03-21 17:16:11 +00:00

megapixels.nix

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

mepo.nix

mepo: sandbox with bunpen

2024-09-03 13:06:25 +00:00

mimetype.nix

mimetype: sandbox with bunpen

2024-09-03 12:40:39 +00:00

mmcli.nix

mmcli: sandbox

2024-07-06 18:49:18 +00:00

mopidy.nix

programs: allow running binaries in a netns-style firejail

2024-01-20 11:11:12 +00:00

msmtp.nix

programs: ship msmtp sendmail implementation

2023-07-01 00:28:59 +00:00

nautilus.nix

nautilus: sandbox with bunpen

2024-09-03 16:06:42 +00:00

newsflash.nix

newsflash: sandbox with bunpen

2024-09-03 13:02:10 +00:00

nheko.nix

persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)

2023-11-08 15:33:15 +00:00

nicotine-plus.nix

nicotine-plus: fix so it can read its config file on first run

2024-07-22 15:51:40 +00:00

nix-index.nix

programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that

2024-02-28 17:39:00 +00:00

nix.nix

programs: nix: ship nixVersions.latest

2024-08-30 09:37:56 +00:00

nmcli.nix

nmcli: sandbox with bunpen

2024-09-03 14:04:07 +00:00

notejot.nix

notejot: fix sandboxing

2024-05-28 03:59:31 +00:00

ntfy-sh.nix

users/services: simplify the before/after/wantedBy criteria, to match s6 concepts

2024-03-21 17:16:11 +00:00

objdump.nix

objdump: sandbox with bunpen

2024-09-03 19:19:24 +00:00

obsidian.nix

mime: support multiple implementors of the same association, with different priorities

2023-07-15 10:11:31 +00:00

offlineimap.nix

secrets: rename "universal" -> "common" to match the language of hosts/

2023-05-14 08:52:43 +00:00

ols.nix

ols: sandbox with bunpen

2024-09-07 17:26:30 +00:00

open-in-mpv.nix

programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that

2024-02-28 17:39:00 +00:00

pactl.nix

pactl: sandbox with bunpen

2024-09-03 14:11:27 +00:00

papers.nix

papers: sandbox with bunpen

2024-09-03 13:03:58 +00:00

pidof.nix

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

pkill.nix

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

planify.nix

programs: buildCost: introduce a new level between min and light

2024-05-13 22:45:33 +00:00

playerctl.nix

playerctl: sandbox with bunpen

2024-09-03 14:47:39 +00:00

portfolio-filemanager.nix

gvfs: disable (it was broken)

2024-05-29 18:39:31 +00:00

ps.nix

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

qmk-udev-rules.nix

qmk/ergodox/udev: cleanup

2024-06-30 16:52:36 +00:00

rhythmbox.nix

persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)

2023-11-08 15:33:15 +00:00

ripgrep.nix

ripgrep (rg): sandbox with bunpen

2024-09-03 02:28:33 +00:00

rtkit.nix

WIP: pipewire: trying to tune so lima doesnt crash

2024-04-24 09:20:13 +00:00

s6-rc.nix

unl0kr: port to an s6 service

2024-07-25 18:45:01 +00:00

sane-deadlines.nix

sane-deadlines: sandbox with bunpen

2024-09-03 02:24:25 +00:00

sane-open.nix

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

sane-private-unlock-remote.nix

sane-private-unlock-remote: sandbox with bunpen

2024-09-03 13:10:16 +00:00

sane-screenshot.nix

modules/programs: simplfiy the common combination of keeping pids AND /proc by introducing "keepPidsAndProc"

2024-09-06 04:18:46 +00:00

sane-scripts.nix

sane-ip-check: sandbox with bunpen

2024-09-03 19:19:24 +00:00

sane-secrets-unlock.nix

sane-secrets-unlock: sandbox with bunpen

2024-09-03 14:49:02 +00:00

sane-sysload.nix

sane-sysload: sandbox with bunpen

2024-09-03 02:21:36 +00:00

sane-theme.nix

nixpkgs: 2024-07-01 -> 2024-07-02

2024-07-03 09:08:53 +00:00

sanebox.nix

libcap: split into separate capsh and captree programs, and sandbox the latter

2024-08-12 10:13:50 +00:00

satellite.nix

satellite: sandbox with bunpen

2024-09-07 05:44:40 +00:00

schlock.nix

schlock: sandbox with bunpen

2024-09-06 05:27:19 +00:00

seatd.nix

seatd/bunpen: remove the need for CAP_SETPCAP

2024-09-07 18:58:47 +00:00

sfeed.nix

remove lingering references to sxmo

2024-05-27 00:38:30 +00:00

shadow.nix

login: remove systemd pam integration (so it doesnt try, and fail, to start the user manager)

2024-05-29 15:42:39 +00:00

signal-desktop.nix

signal-desktop: sandbox with bunpen

2024-09-03 02:13:52 +00:00

sm64ex-coop-deluxe.nix

sm64ex-coop-deluxe: ship (and configure so that you dont have to drag the rom)

2024-09-07 06:21:11 +00:00

sm64ex-coop.nix

s64ex-coop: sandbox

2024-09-05 08:56:43 +00:00

soundconverter.nix

soundconverter: split into own file and sandbox with bunpen

2024-09-03 17:30:41 +00:00

splatmoji.nix

splatmoji: actually install the .desktop files

2024-03-01 18:03:45 +00:00

spot.nix

programs: set buildCost=1 for assorted low-priority programs

2024-05-13 22:45:33 +00:00

spotify.nix

assorted: remove some no-longer-needed sandbox.wrapperType = "inplace" declarations

2024-08-15 10:32:22 +00:00

steam.nix

steam: fix controllers to work in the sandbox

2024-03-03 20:03:20 +00:00

stepmania.nix

stepmania: shift the data dir patch upstream

2024-09-06 02:21:08 +00:00

strings.nix

string: sandbox with bunpen

2024-09-03 03:37:31 +00:00

sublime-music.nix

programs: allow running binaries in a netns-style firejail

2024-01-20 11:11:12 +00:00

supertuxkart.nix

supertuxkart: sandbox with bunpen

2024-09-03 19:19:24 +00:00

swayidle.nix

swayidle: sandbox with bunpen

2024-09-03 18:27:37 +00:00

swaylock.nix

swaylock: sandbox with bunpen

2024-09-03 16:05:34 +00:00

switchboard.nix

switchboard: sandbox

2024-06-22 03:43:23 +00:00

syshud.nix

syshud: sandbox with bunpen

2024-09-03 02:40:03 +00:00

tangram.nix

programs: buildCost: introduce a new level between min and light

2024-05-13 22:45:33 +00:00

tor-browser.nix

tor-browser: sandbox with bunpen

2024-09-03 13:11:15 +00:00

tuba.nix

programs: set buildCost=1 for assorted low-priority programs

2024-05-13 22:45:33 +00:00

via.nix

qmk/ergodox/udev: cleanup

2024-06-30 16:52:36 +00:00

visidata.nix

visidata: sandbox with bunpen

2024-09-03 17:53:37 +00:00

vlc.nix

assorted programs: specify sandbox.autodetectCliPaths variant more precisely than just true

2024-05-28 07:14:27 +00:00

wally-cli.nix

wally-cli: sandbox

2024-07-07 02:10:53 +00:00

waylock.nix

programs: make sandbox.wrapperType default to "wrappedDerivation" and remove everywhere i manually set that

2024-02-28 17:39:00 +00:00

where-am-i.nix

where-am-i: sandbox with bunpen

2024-09-07 04:29:45 +00:00

wike.nix

wike: sandbox with bunpen

2024-09-06 05:21:55 +00:00

wine.nix

persist: rename "cryptClearOnBoot" to "ephemeral"

2024-07-25 12:11:46 +00:00

wireplumber.nix

modules/programs: rename isolatePids -> keepPids, isolateUsers -> keepUsers

2024-09-06 04:06:42 +00:00

wireshark.nix

wireshark: fix sandboxing when reading pcaps

2024-07-04 22:28:02 +00:00

wvkbd.nix

wvkbd: sandbox with bunpen

2024-09-07 02:14:20 +00:00

xarchiver.nix

programs: set buildCost=1 for assorted low-priority programs

2024-05-13 22:45:33 +00:00

xdg-desktop-portal-gtk.nix

sanebox: remove all profile-related features except for direct, path-based profile loading

2024-05-15 09:13:20 +00:00

xdg-desktop-portal-wlr.nix

xdg-desktop-portal-wlr: propery document its dependency on pipewire

2024-04-02 09:01:35 +00:00

xdg-desktop-portal.nix

sanebox: remove the portal logic, and delegate it to manual handling by those few apps which truly need special casing

2024-08-27 11:00:15 +00:00

xdg-terminal-exec.nix

applications: hide .desktop files which arent meant to be user-visible

2024-05-12 17:43:07 +00:00

xdg-utils.nix

sanebox: remove the portal logic, and delegate it to manual handling by those few apps which truly need special casing

2024-08-27 11:00:15 +00:00

youtube-tui.nix

youtube-tui: sandbox with bunpen

2024-09-03 19:19:24 +00:00

zathura.nix

foliate: ship

2024-08-08 21:08:51 +00:00

zeal.nix

programs: buildCost: introduce a new level between min and light

2024-05-13 22:45:33 +00:00

zecwallet-lite.nix

programs: zecwallet-lite: move to own file

2024-01-01 15:17:51 +00:00

zfs-tools.nix

link manpages into all linkIntoOwnPackage users

2024-08-01 17:43:58 +00:00

zsa-udev-rules.nix

pc: add tools to make using the ZSA Ergodox easier

2024-06-28 10:25:02 +00:00

zulip.nix

programs: ship zulip

2024-05-04 08:28:48 +00:00