From 9e9d70785b3c2f3b10bc3f9f949146ef1465c9c9 Mon Sep 17 00:00:00 2001
From: Asmir A <asmir.abdulahovic@gmail.com>
Date: Mon, 1 Apr 2024 00:59:16 +0200
Subject: [PATCH] home/qutebrowser: wrap in firejail

---
 home/home.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/home/home.nix b/home/home.nix
index f13fd11..ec3f722 100644
--- a/home/home.nix
+++ b/home/home.nix
@@ -5,6 +5,11 @@
   inputs,
   ...
 }:
+let
+  qutebrowser_firejail = pkgs.writeShellScriptBin "qutebrowser" ''
+    firejail -- ${pkgs.qutebrowser}/bin/qutebrowser "$@"
+  '';
+in
 with lib; {
   imports = [./zsh.nix ./i3status-rust.nix ./sway.nix ./i3.nix ./home_packages.nix ./whatsapp-for-linux.nix];
 
@@ -28,7 +33,7 @@ with lib; {
   fonts.fontconfig.enable = true;
 
   home.sessionVariables = rec {
-    BROWSER = "${pkgs.qutebrowser}/bin/qutebrowser";
+    BROWSER = "${qutebrowser_firejail}/bin/qutebrowser";
     DEFAULT_BROWSER = "${BROWSER}";
     EDITOR = "nvim";
     _JAVA_AWT_WM_NONREPARENTING = "1";
@@ -140,7 +145,7 @@ with lib; {
 
     qutebrowser = {
       enable = true;
-      package = pkgs.qutebrowser.override {enableVulkan = false;};
+      package = qutebrowser_firejail;
       keyBindings = {
         normal = {
           "j" = "scroll-px 0 25";