main
1{
2  etc.sslCertificates.enable = true;
3  # nixpak already binds /etc/resolv.conf and /etc/hosts for networked sandboxes.
4  bubblewrap.network = true;
5}