From a9c1d8af1211e34fd8e67d7bb6390106c50ecf20 Mon Sep 17 00:00:00 2001 From: Bernardo Magri Date: Sun, 12 Jul 2026 07:27:06 +0100 Subject: [PATCH] fix(template): enable Widevine DRM in the shipped chromium MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Stock nixpkgs chromium has no Widevine CDM, so DRM streams (Netflix, Spotify web player) fail out of the box. Override with enableWideVine = true — allowUnfree is already on in the template, and the wrapper pulls the prebuilt CDM (~no rebuild, binary-cached chromium plus the -wv variant). Verified live on TuringMachine (downstream flake updated the same way, CDM present in the wrapper). Co-Authored-By: Claude Fable 5 --- templates/downstream/home.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/templates/downstream/home.nix b/templates/downstream/home.nix index d7f1672..6f2bfed 100644 --- a/templates/downstream/home.nix +++ b/templates/downstream/home.nix @@ -91,7 +91,9 @@ home.packages = with pkgs; [ libreoffice-fresh # office suite (documents, sheets, slides) vscode # code editor (unfree; allowUnfree is on) - chromium # web browser (mime defaults → chromium-browser.desktop) + (chromium.override { enableWideVine = true; }) + # web browser with Widevine DRM (Netflix, Spotify web…); + # unfree CDM — mime defaults → chromium-browser.desktop gimp # raster image editor inkscape # vector graphics mpv # media player