wip

kimat · Mar 12, 2024 · 3353108 · 3353108
1 parent a7e5eee
commit 3353108
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/nixos/modules/services/desktops/espanso.nix b/nixos/modules/services/desktops/espanso.nix
@@ -21,20 +21,23 @@ in {
       serviceConfig = {
         ExecStart = "${cfg.package}/bin/espanso daemon";
         Restart = "on-failure";
-        CapabilityBoundingSet = [ "cap_dac_override+p" ];
-        AmbientCapabilites = [ "cap_dac_override+p" ];
+        # CapabilityBoundingSet = "CAP_DAC_OVERRIDE";
+        CapabilityBoundingSet =
+          [ "CAP_CHOWN" "CAP_FOWNER" "CAP_DAC_OVERRIDE" "CAP_DAC_READ_SEARCH" ];
+        # CapabilityBoundingSet = [ "cap_dac_override+p" ];
+        # AmbientCapabilites = [ "cap_dac_override+p" ];
       };
       wantedBy = [ "default.target" ];
     };
 
     environment.systemPackages = [ cfg.package ];
 
     security.wrappers.espanso = {
-      source = "${pkgs.espanso-wayland}/bin/espanso";
+      source = "${cfg.package}/bin/espanso";
       capabilities = "cap_dac_override+p";
       owner = "root";
       group = "users";
-      permissions = "u+rw,g+rw";
+      # permissions = "u+rw,g+rw";
     };
   };
 }