aboutsummaryrefslogtreecommitdiffhomepage
path: root/options.nix
diff options
context:
space:
mode:
authorOphestra <cat@gensokyo.uk>2025-12-15 12:43:58 +0900
committerOphestra <cat@gensokyo.uk>2025-12-15 12:57:06 +0900
commit54610aaddcc01e335c34087bc0c3bc1de6d23cf8 (patch)
tree4e8ad54c21e4440ddd54a2be4089d7d4807f97ac /options.nix
parent2e806601693e0262641386ce5430d7e8d84b2a77 (diff)
internal/outcome: expose pipewire via pipewire-pulse
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst. Closes #29. Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'options.nix')
-rw-r--r--options.nix10
1 files changed, 1 insertions, 9 deletions
diff --git a/options.nix b/options.nix
index 1d3d6a16..db3f2c21 100644
--- a/options.nix
+++ b/options.nix
@@ -242,19 +242,11 @@ in
type = nullOr bool;
default = true;
description = ''
- Whether to share the PipeWire server via SecurityContext.
+ Whether to share the PipeWire server via pipewire-pulse on a SecurityContext socket.
'';
};
};
- pulse = mkOption {
- type = nullOr bool;
- default = true;
- description = ''
- Whether to run the PulseAudio compatibility daemon.
- '';
- };
-
share = mkOption {
type = nullOr package;
default = null;