chore: add container to firefox

flake.lock

@@ -287,11 +287,11 @@
         "quickshell": "quickshell"
       },
       "locked": {
-        "lastModified": 1731862325,
-        "narHash": "sha256-K6F/3dMLzPucS0E3wCgqmIGu5WbrYRhVeTKRyFsh9Cc=",
+        "lastModified": 1732144137,
+        "narHash": "sha256-hrV1W+0oxvMNE9iEBSU0qSJV2kTFU+v5T0XnWZ1bcw4=",
         "ref": "refs/heads/main",
-        "rev": "a57cc7c1d2f6dc5dd2642b6d9d9dab2ca8f43da2",
-        "revCount": 81,
+        "rev": "de30bb78c998c4e496316b4faa31062e1fbc7586",
+        "revCount": 86,
         "type": "git",
         "url": "https://git.ccnlc.eu/nydragon/nysh.git"
       },

home/graphical/firefox/default.nix

@@ -2,6 +2,7 @@
   pkgs,
   lib,
   osConfig,
+  config,
   ...
 }:
 lib.mkIf osConfig.programs.firefox.enable {
@@ -9,8 +10,8 @@ lib.mkIf osConfig.programs.firefox.enable {
     enable = true;
     # Installed by nixpkgs module
     package = null;
-    profiles.ny = {
-      name = "ny";
+    profiles.${config.home.username} = {
+      name = config.home.username;
       isDefault = true;
       userChrome = ''
         /* Hides the native tabs */
@@ -26,6 +27,14 @@ lib.mkIf osConfig.programs.firefox.enable {
       settings = {
         "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
       };
+      containers = {
+        uni = {
+          color = "blue";
+          icon = "briefcase";
+        };
+      };
+      containersForce = true;
+
       search = {
         default = "DuckDuckGo";
         force = true;

home/sway/default.nix

@@ -115,12 +115,6 @@ lib.mkIf osConfig.programs.sway.enable {
             #: }}}
           };
         #: }}}
-        #: Startup {{{
-        startup = [
-          { command = "${config.services.kdeconnect.package}/bin/kdeconnect-indicator"; }
-          { command = "${pkgs.protonmail-bridge-gui}/bin/protonmail-bridge-gui --no-window"; }
-        ];
-        #: }}}
         assigns = {
           "2" = [ { app_id = "firefox"; } ];
           "3" = [ { app_id = "obsidian"; } ];

hosts/marr/default.nix

@@ -154,7 +154,10 @@
     MOZ_ENABLE_WAYLAND = 1;
   };
 
-  security.polkit.enable = true;
+  security.polkit = {
+    enable = true;
+    package = pkgs.polkit-kde-agent;
+  };
 
   virtualisation.libvirtd.enable = true;
   programs.virt-manager.enable = true;

options/services/nysh.nix

@@ -2,6 +2,7 @@
   lib,
   inputs',
   config,
+  pkgs,
   ...
 }:
 let
@@ -20,6 +21,11 @@ in
 
   config = mkIf cfg.enable {
     systemd.user.services.nysh = {
+      path = [
+        pkgs.curl
+        pkgs.brightnessctl
+        pkgs.networkmanager
+      ];
       wantedBy = [
         "multi-user.target"
         "graphical-session.target"
@@ -33,11 +39,6 @@ in
         Restart = "on-failure";
 
         NoNewPrivileges = true;
-        PrivateMounts = true;
-        ProtectHostname = true;
-        ProtectKernelTunables = true;
-        PrivateTmp = true;
-        IPAddressDeny = "any";
       };
     };
   };