nixpkgs/nixos/modules/programs/noisetorch.nix

{ config, pkgs, lib, ... }:

with lib;

let cfg = config.programs.noisetorch;
in
{
  options.programs.noisetorch = {
    enable = mkEnableOption (lib.mdDoc "noisetorch + setcap wrapper");

    package = mkPackageOption pkgs "noisetorch" { };
  };

  config = mkIf cfg.enable {
    security.wrappers.noisetorch = {
      owner = "root";
      group = "root";
      capabilities = "cap_sys_resource=+ep";
      source = "${cfg.package}/bin/noisetorch";
    };
    environment.systemPackages = [ cfg.package ];
  };
}