home/qutebrowser: wrap in firejail

This commit is contained in:
Asmir A 2024-04-01 00:59:16 +02:00
parent 3d6b1cdd84
commit 9e9d70785b
Signed by: asmir
GPG Key ID: 020C42B7A9ABA3E2

View File

@ -5,6 +5,11 @@
inputs, inputs,
... ...
}: }:
let
qutebrowser_firejail = pkgs.writeShellScriptBin "qutebrowser" ''
firejail -- ${pkgs.qutebrowser}/bin/qutebrowser "$@"
'';
in
with lib; { with lib; {
imports = [./zsh.nix ./i3status-rust.nix ./sway.nix ./i3.nix ./home_packages.nix ./whatsapp-for-linux.nix]; imports = [./zsh.nix ./i3status-rust.nix ./sway.nix ./i3.nix ./home_packages.nix ./whatsapp-for-linux.nix];
@ -28,7 +33,7 @@ with lib; {
fonts.fontconfig.enable = true; fonts.fontconfig.enable = true;
home.sessionVariables = rec { home.sessionVariables = rec {
BROWSER = "${pkgs.qutebrowser}/bin/qutebrowser"; BROWSER = "${qutebrowser_firejail}/bin/qutebrowser";
DEFAULT_BROWSER = "${BROWSER}"; DEFAULT_BROWSER = "${BROWSER}";
EDITOR = "nvim"; EDITOR = "nvim";
_JAVA_AWT_WM_NONREPARENTING = "1"; _JAVA_AWT_WM_NONREPARENTING = "1";
@ -140,7 +145,7 @@ with lib; {
qutebrowser = { qutebrowser = {
enable = true; enable = true;
package = pkgs.qutebrowser.override {enableVulkan = false;}; package = qutebrowser_firejail;
keyBindings = { keyBindings = {
normal = { normal = {
"j" = "scroll-px 0 25"; "j" = "scroll-px 0 25";