From 44ed4f7a5c1377a65fe042cbacb76e35d400211c Mon Sep 17 00:00:00 2001
From: Stefan Schwarz <stefan.schwarz@thomann.io>
Date: Fri, 15 Mar 2024 11:15:51 +0100
Subject: [PATCH] fix lorri confi

---
 roles/base.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/roles/base.nix b/roles/base.nix
index 1186c9b..032f4d7 100644
--- a/roles/base.nix
+++ b/roles/base.nix
@@ -90,6 +90,8 @@ in {
       alias ls="ls --color=auto"
       alias vim="nvim"
       alias k="kubectl"
+      alias n="nix-shell -p"
+      alias nu="nix-shell -I nixpkgs=/nix/var/nix/profiles/per-user/root/channels/nixos-unstable -p"
 
       sink() {
         VAULT_TOKEN=$(vault token lookup -format=json | jq -r .data.id) \
@@ -139,7 +141,12 @@ in {
 
   services.fwupd.enable = true;
   services.resolved.enable = true;
+
   services.lorri.enable = true;
+  systemd.user.services.lorri.serviceConfig = {
+    ProtectSystem = pkgs.lib.mkForce "full";
+    ProtectHome = pkgs.lib.mkForce false;
+  };
 
   security.wrappers.gvfsd-nfs = {
     source = "${pkgs.gnome.gvfs}/libexec/gvfsd-nfs";