Security(signal-desktop): sandbox in firejail

[julm/julm-nix.git] / home-manager / profiles / signal.nix

{ pkgs, pkgs-unstable, ... }:
{
  home.packages = [
    # FIXME: move to pkgs.signal-desktop when upgrading to a nixpkgs with a working signal-desktop
    (pkgs.firejailWrap {
      package = pkgs-unstable.signal-desktop;
      args = [
        "--profile=${pkgs.firejail}/etc/firejail/signal-desktop.profile"
      ];
    })
    pkgs.sigtop # For archiving messages
  ];
}