A Nix module to create sandboxed web apps