From e60e3d5fc7c0379562da83b529d2b4a935f0203a Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Thu, 16 Apr 2026 16:54:33 -0700
Subject: [PATCH] Use programs.firefox module with 1Password extension via
 policy

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 nixos/ringtail/configuration.nix | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/nixos/ringtail/configuration.nix b/nixos/ringtail/configuration.nix
index 84d1803..565d9e4 100644
--- a/nixos/ringtail/configuration.nix
+++ b/nixos/ringtail/configuration.nix
@@ -106,6 +106,20 @@ in
   # Fish shell
   programs.fish.enable = true;
 
+  # Firefox with 1Password extension
+  programs.firefox = {
+    enable = true;
+    nativeMessagingHosts.packages = [ pkgs._1password-gui ];
+    policies = {
+      ExtensionSettings = {
+        "{d634138d-c276-4fc8-924b-40a0ea21d284}" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/1password-x-password-manager/latest.xpi";
+          installation_mode = "force_installed";
+        };
+      };
+    };
+  };
+
   # 1Password (modules handle CLI group/setgid and polkit for GUI integration)
   programs._1password.enable = true;
   programs._1password-gui = {
@@ -202,7 +216,6 @@ in
     fuzzel
     pulseaudio
     librewolf
-    firefox
   ];
 
   # Allow running dynamically linked binaries (mise-installed runtimes, etc.)