30 lines
701 B
Nix
30 lines
701 B
Nix
{
|
|
lib,
|
|
pkgs,
|
|
config,
|
|
...
|
|
}:
|
|
let
|
|
inherit (lib.my) getExe';
|
|
in
|
|
{
|
|
systemd.user.services.swww = {
|
|
Install.WantedBy = [ "graphical-session.target" ];
|
|
Unit.After = [ "graphical-session.target" ];
|
|
|
|
Service = {
|
|
Type = "simple";
|
|
ExecStart = getExe' pkgs.swww "swww-daemon";
|
|
Restart = "on-failure";
|
|
BindPaths = "/run/user /home/${config.home.username}/.cache/swww";
|
|
TemporaryFileSystem = "/home /run/user /root";
|
|
ProtectProc = "noaccess";
|
|
RestrictNamespaces = true;
|
|
CapabilityBoundingSet = "";
|
|
PrivateUsers = true;
|
|
RestrictAddressFamilies = "AF_UNIX";
|
|
} // lib.my.systemdHardening;
|
|
};
|
|
|
|
home.packages = [ pkgs.swww ];
|
|
}
|