feat(sandboxing): declare sandboxing module

2026-10-12 23:51:54 +02:00
parent 3bbc5e83fc
commit d317aa39a6
3 changed files with 19 additions and 0 deletions
@@ -0,0 +1,17 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+
+let
+  cfg = config.sandboxing;
+in
+{
+  options.sandboxing.enable = lib.mkOption { default = false; };
+
+  config = lib.mkIf cfg.enable {
+    environment.systemPackages = [ pkgs.bubblewrap ];
+  };
+}