packages/nixpak: add ungoogled-chromium

packages/nixpak/modules/network.nix

@@ -0,0 +1,7 @@
+{
+  etc.sslCertificates.enable = true;
+  bubblewrap = {
+    bind.ro = [ "/etc/resolv.conf" ];
+    network = true;
+  };
+}

packages/nixpak/ungoogled-chromium/default.nix

@@ -0,0 +1,28 @@
+{ mkNixPak, ungoogled-chromium }:
+
+mkNixPak {
+  config = { config, sloth, ... }: {
+    app.package = ungoogled-chromium;
+    flatpak.appId = "org.chromium.Chromium";
+    imports = [
+      ../modules/gui-base.nix
+      ../modules/network.nix
+    ];
+    bubblewrap = {
+      bind.rw = [
+        [
+          (sloth.mkdir (sloth.concat [
+            sloth.appCacheDir
+            "/nixpak-app-shared-tmp"
+          ]))
+          "/tmp"
+        ]
+        (sloth.concat [
+          sloth.xdgConfigHome
+          "/chromium"
+        ])
+        (sloth.concat' sloth.homeDir "/Downloads")
+      ];
+    };
+  };
+}

packages/packages.nix

@@ -62,5 +62,7 @@ in
 
   steam-metro-skin = import ./data/misc/steam-metro-skin { inherit (pkgs) fetchzip; };
 
+  ungoogled-chromium = sandbox ./nixpak/ungoogled-chromium { };
+
   vaults = pkgs.callPackage ./apps/vaults { };
 }