diff --git a/.config/firejail/discord.local b/.config/firejail/discord.local
new file mode 100644
index 0000000..658c3d2
--- /dev/null
+++ b/.config/firejail/discord.local
@@ -0,0 +1,16 @@
+
+# NOTE: none of this was necessary, the fix was a bug in electron:
+#	https://support.discord.com/hc/en-us/community/posts/360039220031-Left-clicking-the-tray-icon-in-Discord-0-0-8-for-Linux
+
+
+#noblacklist /usr/share/icons
+#whitelist /usr/share/icons
+#read-only /usr/share/icons
+#
+#noblacklist ${HOME}/.netrc
+#noblacklist ${HOME}/.wget-hsts
+#noblacklist ${HOME}/.wgetrc
+#
+#private-bin gzip,wget
+
+#noblacklist /usr/lib/libappindicator*
diff --git a/.config/firejail/firefox.local b/.config/firejail/firefox.local
new file mode 100644
index 0000000..a672a7b
--- /dev/null
+++ b/.config/firejail/firefox.local
@@ -0,0 +1,21 @@
+ignore noexec ${HOME}
+
+## copy firejail config parts from mpv.profile
+noblacklist ${HOME}/.config/mpv
+noblacklist ${HOME}/.config/youtube-dl
+noblacklist ${HOME}/.netrc
+
+include allow-lua.inc
+include allow-python3.inc
+mkdir ${HOME}/.config/mpv
+mkdir ${HOME}/.config/youtube-dl
+mkfile ${HOME}/.netrc
+whitelist ${HOME}/.config/mpv
+whitelist ${HOME}/.config/youtube-dl
+whitelist ${HOME}/.netrc
+whitelist /usr/share/lua
+whitelist /usr/share/lua*
+whitelist /usr/share/vulkan
+
+##private-bin env,mpv,python*,waf,youtube-dl
+#private-bin env,mpv,python*,yt-dlp
diff --git a/.config/firejail/okular.local b/.config/firejail/okular.local
new file mode 100644
index 0000000..a78a4a0
--- /dev/null
+++ b/.config/firejail/okular.local
@@ -0,0 +1,3 @@
+
+noblacklist ${HOME}/Desktop
+
diff --git a/.config/firejail/wine.local b/.config/firejail/wine.local
new file mode 100644
index 0000000..db4ffd2
--- /dev/null
+++ b/.config/firejail/wine.local
@@ -0,0 +1 @@
+noblacklist ${HOME}/.cache/wine
diff --git a/sync.sh b/sync.sh
index a9cc02c..86e81d9 100755
--- a/sync.sh
+++ b/sync.sh
@@ -28,3 +28,8 @@ rsync -avP ${VIM_FILES} ./vim
 rsync -avP ${GDB_FILES} ./gdb
 rsync -avP ${BASH_SCRIPTS} ./bash_scripts
 
+APP_CONFIGS="
+	$HOME/.config/firejail"
+
+rsync -avP ${APP_CONFIGS} .config/
+