From bb511472f067080b759f8d1d3f046625923c25f4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cyryl=20P=C5=82otnicki?= <cyplo@cyplo.net>
Date: Sun, 6 Mar 2022 10:01:07 +0000
Subject: [PATCH] make sure no chromium on servers

---
 nixos/gui/default.nix | 2 ++
 nixos/security.nix    | 1 -
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/nixos/gui/default.nix b/nixos/gui/default.nix
index 1873fc92..4b70b5cf 100644
--- a/nixos/gui/default.nix
+++ b/nixos/gui/default.nix
@@ -15,6 +15,8 @@ in
     };
   };
 
+  security.chromiumSuidSandbox.enable = true;
+
   home-manager.users.cyryl = { ... }: {
     gtk = {
       enable = true;
diff --git a/nixos/security.nix b/nixos/security.nix
index 7b78b435..5fe41e86 100644
--- a/nixos/security.nix
+++ b/nixos/security.nix
@@ -11,7 +11,6 @@
   networking.firewall.enable = true;
   services.clamav.daemon.enable = true;
   services.clamav.updater.enable = true;
-  security.chromiumSuidSandbox.enable = true;
   boot.kernelParams = [
     "slub_debug=FZP"
     "page_poison=1"