Grimmauld/grimm-nixos-laptop
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

discord blocking!

Browse source
This commit is contained in:
Grimmauld 2024-10-06 12:25:18 +02:00
parent 3a29e3975e
commit 48cb9f9e7c
Signed by: Grimmauld
GPG key ID: C2946668769F91FB
3 changed files with 100 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

84
common/tooling/opensnitch/default.nix
View file

@ -8,11 +8,12 @@ let
inherit (config.grimmShared) enable tooling graphical;
inherit (lib)
optional
optionals
getBin
getExe
concatLines
getExe'
escapeRegex
getVersion
mkIf
;
@ -216,6 +217,87 @@ in
};
};
vesktop_deny = mkIf (graphical) {
name = "vesktop-deny";
enabled = true;
action = "deny";
precedence = false;
duration = "always";
operator = {
type ="regexp";
sensitive = false;
operand = "process.command";
data = "/nix/store/[a-z0-9]{32}-electron-unwrapped-${escapeRegex (getVersion pkgs.electron)}/libexec/electron/electron.*${escapeRegex "${pkgs.vesktop}/opt/Vesktop/resources/app.asar"}";
};
};
vesktop_allow = mkIf (graphical) {
name = "vesktop-allow";
enabled = true;
action = "allow";
precedence = true;
duration = "always";
operator = {
type = "list";
operand = "list";
list = [
{
type ="regexp";
sensitive = false;
operand = "process.command";
data = "/nix/store/[a-z0-9]{32}-electron-unwrapped-${escapeRegex (getVersion pkgs.electron)}/libexec/electron/electron.*${escapeRegex "${pkgs.vesktop}/opt/Vesktop/resources/app.asar"}";
}
{
type = "lists";
operand = "lists.domains_regexp";
data = ./discord_hosts;
}
];
};
};
vesktop_daemon_deny = mkIf (graphical) {
name = "vesktop-daemon-deny";
enabled = true;
action = "deny";
precedence = false;
duration = "always";
operator = {
type ="regexp";
sensitive = false;
operand = "process.command";
data = "/nix/store/[a-z0-9]{32}-electron-unwrapped-${escapeRegex (getVersion pkgs.electron)}/libexec/electron/electron.*${escapeRegex "--utility-sub-type=network.mojom.NetworkService"}.*--user-data-dir=/home/.+/\.config/vesktop.+";
};
};
vesktop_daemon_allow = mkIf (graphical) {
name = "vesktop-daemon-allow";
enabled = true;
action = "allow";
precedence = true;
duration = "always";
operator = {
type = "list";
operand = "list";
list = [
{
type ="regexp";
sensitive = false;
operand = "process.command";
data = "/nix/store/[a-z0-9]{32}-electron-unwrapped-${escapeRegex (getVersion pkgs.electron)}/libexec/electron/electron.*${escapeRegex "--utility-sub-type=network.mojom.NetworkService"}.*--user-data-dir=/home/.+/\.config/vesktop.+";
}
{
type = "lists";
operand = "lists.domains_regexp";
data = ./discord_hosts;
}
];
};
};
avahi = mkIf (config.services.avahi.enable) {
name = "avahi";
enabled = true;

11
common/tooling/opensnitch/discord_hosts/hosts.list Normal file
View file

@ -0,0 +1,11 @@
cloudflare.com
discordapp.com
discordapp.net
discord.gg
discord.com
vencord.dev
github.com
githubusercontent.com
scdn.co
spotify.com

6
overlays/vesktop.nix Normal file
View file

@ -0,0 +1,6 @@
{ prev, ... }:
{
vesktop = prev.vesktop.override {
withTTS = false;
};
}