small improvements & security update

changelog:
- added additional commands for nixos `gc` in fish
- changed default app to `mpv` for gif images in mimeapps.list
- added config for clamav-scanner
- added `fangfrisch` to clamav
- sandboxed some apps & added profiles through firejail
- changed vscode to vscodium
- updated README

nixos/clamav-scanner.nix

@@ -0,0 +1,8 @@
+{ ... }:
+
+{
+  services.clamav.scanner = {
+    enable = true;
+    interval = "Sat *-*-* 04:00:00";
+  };
+}

nixos/flake.nix

@@ -17,6 +17,7 @@
         # ./disable-nvidia.nix
         ./opengl.nix
         # ./fingerprint-scanner.nix
+        # ./clamav-scanner.nix
         ./yubikey.nix
         ./sound.nix
         ./usb.nix

nixos/security-services.nix

@@ -29,6 +29,8 @@
   programs.browserpass.enable = true;
   services.clamav = {
     daemon.enable = true;
+    fangfrisch.enable = true;
+    fangfrisch.interval = "daily";
     updater.enable = true;
     updater.interval = "daily"; #man systemd.time
     updater.frequency = 12;
@@ -50,6 +52,31 @@
       };
       discord = {
         executable = "${lib.getBin pkgs.discord}/bin/discord";
+        profile = "${pkgs.firejail}/etc/firejail/discord.profile";
+      };
+      slack = {
+        executable = "${lib.getBin pkgs.slack}/bin/slack";
+        profile = "${pkgs.firejail}/etc/firejail/slack.profile";
+      };
+      telegram-desktop = {
+        executable = "${lib.getBin pkgs.tdesktop}/bin/telegram-desktop";
+        profile = "${pkgs.firejail}/etc/firejail/telegram-desktop.profile";
+      };
+      brave = {
+        executable = "${lib.getBin pkgs.brave}/bin/brave";
+        profile = "${pkgs.firejail}/etc/firejail/brave.profile";
+      };
+      qutebrowser = {
+        executable = "${lib.getBin pkgs.qutebrowser}/bin/qutebrowser";
+        profile = "${pkgs.firejail}/etc/firejail/qutebrowser.profile";
+      };
+      thunar = {
+        executable = "${lib.getBin pkgs.xfce.thunar}/bin/thunar";
+        profile = "${pkgs.firejail}/etc/firejail/thunar.profile";
+      };
+      vscodium = {
+        executable = "${lib.getBin pkgs.vscodium}/bin/vscodium";
+        profile = "${pkgs.firejail}/etc/firejail/vscodium.profile";
       };
     };
   };

nixos/users.nix

@@ -12,7 +12,7 @@
       youtube-music
       discord
       tdesktop
-      vscode
+      vscodium
       brave
     ];
   };