From 220b02da85f4350f59cfb6cd60198fc367dd3ed2 Mon Sep 17 00:00:00 2001
From: adikro <adikro@disroot.org>
Date: Sun, 26 Apr 2026 22:36:08 +0200
Subject: sync

---
 os/core/security.nix | 24 ++++--------------------
 os/srv/gaming.nix    |  2 +-
 os/wm/niri.nix       |  2 +-
 3 files changed, 6 insertions(+), 22 deletions(-)

(limited to 'os')

diff --git a/os/core/security.nix b/os/core/security.nix
index fd518c0..c401a14 100644
--- a/os/core/security.nix
+++ b/os/core/security.nix
@@ -48,29 +48,13 @@ in
             roddhjav-apparmor-rules
           ];
         };
-        programs.firejail.enable = true;
-        environment.etc = {
-          "firejail/games.profile".text = ''
-            include wine.profile
-
-            # --- Security stuff ---
-            apparmor
-            nonewprivs
-            net none
-            noinput
-            nogroups
-            novideo
-            dbus-user none
-            dbus-system none
+        services.dbus.apparmor = "enabled";
+        specialisation.no-apparmor.configuration.security.apparmor.enable = lib.mkForce false;
 
-            # --- Filesystem Isolation ---
-            whitelist ~/games/repacks/firejail
-            private-tmp
-          '';
-        };
+        programs.firejail.enable = true;
         environment.systemPackages = with pkgs; [
-          landrun
           apparmor-utils
+          apparmor-parser
           apparmor-bin-utils
         ];
       })
diff --git a/os/srv/gaming.nix b/os/srv/gaming.nix
index ca59782..164670f 100644
--- a/os/srv/gaming.nix
+++ b/os/srv/gaming.nix
@@ -58,7 +58,7 @@ in
     (lib.mkIf cfg.launchers.enable {
       environment.systemPackages = with pkgs; [
         heroic
-        (pkgs.bottles.override { removeWarningPopup = true; })
+        # (pkgs.bottles.override { removeWarningPopup = true; })
         (prismlauncher.override {
           additionalLibs = with pkgs; [ ocl-icd ];
           jdks = with pkgs; [ javaPackages.compiler.temurin-bin.jdk-25 ];
diff --git a/os/wm/niri.nix b/os/wm/niri.nix
index 587f543..58d27af 100644
--- a/os/wm/niri.nix
+++ b/os/wm/niri.nix
@@ -19,7 +19,7 @@ in
 
     programs.niri = {
       enable = true;
-      # package = pkgs.niri-unstable;
+      package = pkgs.niri-unstable;
     };
 
     os.srv.compat.enable = true;
-- 
cgit v1.3