wip on firejail for firefox

nixos/gui/default.nix

@@ -4,7 +4,6 @@ let
 in
   {
     programs.firejail.enable = true;
-
     programs.firejail.wrappedBinaries = {
       firefox = {
         executable = "${pkgs.lib.getBin pkgs.firefox}/bin/firefox";
@@ -33,6 +32,7 @@ in
 
       imports = [
         ./vscode.nix
+        ./firejail.nix
       ];
 
       home.packages = with pkgs; with pkgs.gnome3; with pkgs.python38Packages; [

nixos/gui/firejail.nix

@@ -0,0 +1,8 @@
+{ config, pkgs, lib, ... }:
+{
+  home.file.".config/firejail/firefox.profile".text = ''
+    include ${pkgs.firejail}/etc/firejail/firefox.profile
+
+    ignore apparmor
+    ignore noexec '' + "$" + "{HOME}";
+  }