1
0
Fork 0
mirror of https://github.com/LnL7/nix-darwin.git synced 2025-03-28 02:37:09 +00:00

lnl: enable sandboxing

This commit is contained in:
Daiderd Jordan 2017-11-28 22:03:51 +01:00
parent 46d0a16e51
commit a20e9d040c
No known key found for this signature in database
GPG key ID: D02435D05B810C96

View file

@ -24,9 +24,6 @@
system.defaults.trackpad.Clicking = true;
system.defaults.trackpad.TrackpadThreeFingerDrag = true;
services.nix-daemon.enable = true;
nix.package = pkgs.nixUnstable;
environment.systemPackages =
[ pkgs.curl
pkgs.fzf
@ -42,9 +39,8 @@
pkgs.khd
pkgs.kwm
pkgs.nixUnstable
# pkgs.nix
pkgs.nix-repl
config.nix.package
];
security.enableAccessibilityAccess = true;
@ -59,7 +55,7 @@
serviceConfig.StartInterval = 360;
};
services.activate-system.enable = true;
services.nix-daemon.enable = true;
nix.extraOptions = ''
gc-keep-derivations = true
@ -69,6 +65,8 @@
nix.binaryCachePublicKeys = [ "cache.daiderd.com-1:R8KOWZ8lDaLojqD+v9dzXAqGn29gEzPTTbr/GIpCTrI=" ];
nix.trustedBinaryCaches = [ https://d3i7ezr9vxxsfy.cloudfront.net ];
nix.trustedUsers = [ "@admin" ];
nix.useSandbox = true;
nix.package = pkgs.nixUnstable;
programs.nix-index.enable = true;
@ -195,7 +193,7 @@
programs.zsh.enableFzfGit = true;
programs.zsh.enableFzfHistory = true;
programs.zsh.variables.cfg = "$HOME/.nixpkgs/darwin-config.nix";
programs.zsh.variables.cfg = "$HOME/.config/nixpkgs/darwin/configuration.nix";
programs.zsh.variables.darwin = "$HOME/.nix-defexpr/darwin";
programs.zsh.variables.pkgs = "$HOME/.nix-defexpr/nixpkgs";