dotfiles/provision/modules/desktop/browser.nix

{ config, lib, pkgs, user, ... }:

let cfg = config.modules.desktop.browser;

in {
  options.modules.desktop.browser.enable = lib.mkEnableOption "browser";
  config = lib.mkIf cfg.enable {
    environment.systemPackages = with pkgs; [
      google-chrome # Web browser developed by Google.
    ];
    programs.chromium = {
      enable = true;
      extraOpts = {

        # Disable all manner of account-related things.
        "BrowserSignin" = 0; # disable
        "BrowserAddPersonEnabled" = false;
        "BrowserGuestModeEnabled" = false;
        "UserDisplayName" = "PolicyUser";
        "UserFeedbackAllowed" = false;
        "BackgroundModeEnabled" = false;
        "MetricsReportingEnabled" = false;
        "BlockExternalExtensions" = true;
        "AutofillAddressEnabled" = false;
        "AutofillCreditCardEnabled" = false;
        "PasswordManagerEnabled" = false;
        "PromptForDownloadLocation" = true;
        "SyncDisabled" = true;
        "SpellcheckEnabled" = true;
        "SpellcheckLanguage" = [ "en-US" ];
        "CloudPrintSubmitEnabled" = false;
        "EnableMediaRouter" = false;
        "ShowCastIconInToolbar" = false;

        # Install extensions
        "ExtensionInstallForcelist" = [
          "ihennfdbghdiflogeancnalflhgmanop" # Gruvbox theme
          "fkeaekngjflipcockcnpobkpbbfbhmdn" # Copy as Markdown
          "pcmpcfapbekmbjjkdalcgopdkipoggdi" # MarkDownload
          "nngceckbapebfimnlniiiahkandclblb" # Bitwarden
          "icpgjfneehieebagbmdbhnlpiopdcmna" # New Tab Redirect
          "oahiolknhkbpcolgnpljehalnhblolkm" # Shorts Blocker
          "hkgfoiooedgoejojocmhlaklaeopbecg" # Picture-in-Picture (by Google)
          "dbepggeogbaibhgnhhndojpepiihcmeb" # Vimium
        ];

        # Setup bookmarks
        "BookmarkBarEnabled" = true;
        "ShowAppsShortcutInBookmarkBar" = false;
        "ManagedBookmarks" = [
          { "toplevel_name" = "Bookmarks"; }
          { "name" = "Daily"; "children" = [
            { "url" = "https://lc.tstarr.us"; name = "Chisme Mattermost"; }
            { "url" = "https://rss.tstarr.us"; name = "Miniflux"; }
            { "url" = "https://cloud.tstarr.us"; name = "Nextcloud"; }
            { "url" = "https://git.tstarr.us"; name = "Gitea"; }
            { "url" = "https://media.tstarr.us/web/index.html#!/home.html"; name = "Jellyfin"; }
            { "url" = "https://home.tstarr.us"; name = "Home Assistant"; }
            { "url" = "https://www.youtube.com/feed/subscriptions"; name = "Youtube"; }
            { "url" = "https://gmail.com/"; name = "Mail"; }
            { "url" = "https://github.com/"; name = "GitHub"; }
            { "url" = "https://www.google.com/"; name = "Google"; }
            { "url" = "https://www.icloud.com/"; name = "iCloud"; }
          ]; }
          { "name" = "Games"; "children" = [
            { "url" = "https://www.protondb.com/"; name = "ProtonDB"; }
            { "url" = "https://vimm.net/"; name = "Vimm's Lair: Preserving the Classics"; }
          ]; }
          { "name" = "Homelab"; "children" = [
            { "url" = "http://localhost:8384"; name = "Syncthing"; }
            { "url" = "https://github.com/starr-dusT/dotfiles"; name = "Dotfiles"; }
            { "url" = "https://rssbridge.tstarr.us"; name = "RSSBridge"; }
          ]; }
          { "name" = "Nix"; "children" = [
            { "url" = "https://nixos.org/nix/manual/"; name = "nix-manual"; }
            { "url" = "https://nixos.org/nixpkgs/manual/"; name = "nixpkgs-manual"; }
            { "url" = "https://nixos.org/nixos/manual/"; name = "nixos-manual"; }
            { "url" = "https://nixos.org/nixos/options.html"; name = "nixos-options"; }
            { "url" = "https://discourse.nixos.org/"; name = "nixos-discourse"; }
            { "url" = "https://old.reddit.com/r/nixos/"; name = "nixos-reddit"; }
            { "url" = "https://nixos.wiki/"; name = "nixos-wiki"; }
          ]; }
        ];
      };
    };

    networking.firewall.allowedTCPPorts = [ 8080 ];
    services.static-web-server = {
      enable = true;
      listen = "[::]:8080";
      root = ../../../resources/blank;
    };
  };
}