summaryrefslogtreecommitdiff
path: root/os
diff options
context:
space:
mode:
authoradikro <adikro@disroot.org>2026-04-26 22:36:08 +0200
committeradikro <adikro@disroot.org>2026-04-26 22:36:08 +0200
commit220b02da85f4350f59cfb6cd60198fc367dd3ed2 (patch)
treea0c9801aa636784df62f9fc7c109a7dbd66fd3da /os
parent251ea36117f63919dbb7b928e45740a71f90c7b4 (diff)
sync
Diffstat (limited to 'os')
-rw-r--r--os/core/security.nix24
-rw-r--r--os/srv/gaming.nix2
-rw-r--r--os/wm/niri.nix2
3 files changed, 6 insertions, 22 deletions
diff --git a/os/core/security.nix b/os/core/security.nix
index fd518c0..c401a14 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -48,29 +48,13 @@ in
roddhjav-apparmor-rules
];
};
- programs.firejail.enable = true;
- environment.etc = {
- "firejail/games.profile".text = ''
- include wine.profile
-
- # --- Security stuff ---
- apparmor
- nonewprivs
- net none
- noinput
- nogroups
- novideo
- dbus-user none
- dbus-system none
+ services.dbus.apparmor = "enabled";
+ specialisation.no-apparmor.configuration.security.apparmor.enable = lib.mkForce false;
- # --- Filesystem Isolation ---
- whitelist ~/games/repacks/firejail
- private-tmp
- '';
- };
+ programs.firejail.enable = true;
environment.systemPackages = with pkgs; [
- landrun
apparmor-utils
+ apparmor-parser
apparmor-bin-utils
];
})
diff --git a/os/srv/gaming.nix b/os/srv/gaming.nix
index ca59782..164670f 100644
--- a/os/srv/gaming.nix
+++ b/os/srv/gaming.nix
@@ -58,7 +58,7 @@ in
(lib.mkIf cfg.launchers.enable {
environment.systemPackages = with pkgs; [
heroic
- (pkgs.bottles.override { removeWarningPopup = true; })
+ # (pkgs.bottles.override { removeWarningPopup = true; })
(prismlauncher.override {
additionalLibs = with pkgs; [ ocl-icd ];
jdks = with pkgs; [ javaPackages.compiler.temurin-bin.jdk-25 ];
diff --git a/os/wm/niri.nix b/os/wm/niri.nix
index 587f543..58d27af 100644
--- a/os/wm/niri.nix
+++ b/os/wm/niri.nix
@@ -19,7 +19,7 @@ in
programs.niri = {
enable = true;
- # package = pkgs.niri-unstable;
+ package = pkgs.niri-unstable;
};
os.srv.compat.enable = true;