firejail = {
      source = "${pkgs.firejail.out}/bin/firejail";
    };
should work