chore: setup Zen Browser stuff and update lockfile [skip ci]

Signed-off-by: Andrei Jiroh Halili <[e-mail]>

.zed/settings.json

···
+{
+  "languages": {
+    "Nix": {
+      "language_servers": ["nil", "!nixd"]
+    }
+  },
+  "lsp": {
+    "nil": {
+      "initialization_options": {
+        "formatting": {
+          "command": ["nixfmt"]
+        },
+        "nix": {
+          "flake": {
+            "autoArchive": true,
+            "autoEvalInputs": false,
+            "nixpkgsInputName": "nixpkgs"
+          }
+        }
+      }
+    }
+  }
+}

flake.lock

···
         ]
       },
       "locked": {
-        "lastModified": 1756991914,
-        "narHash": "sha256-4ve/3ah5H/SpL2m3qmZ9GU+VinQYp2MN1G7GamimTds=",
+        "lastModified": 1757075491,
+        "narHash": "sha256-a+NMGl5tcvm+hyfSG2DlVPa8nZLpsumuRj1FfcKb2mQ=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "b08f8737776f10920c330657bee8b95834b7a70f",
+        "rev": "f56bf065f9abedc7bc15e1f2454aa5c8edabaacf",
         "type": "github"
       },
       "original": {
···
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1756925795,
-        "narHash": "sha256-kUb5hehaikfUvoJDEc7ngiieX88TwWX/bBRX9Ar6Tac=",
+        "lastModified": 1757103352,
+        "narHash": "sha256-PtT7ix43ss8PONJ1VJw3f6t2yAoGH+q462Sn8lrmWmk=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "ba6fab29768007e9f2657014a6e134637100c57d",
+        "rev": "11b2a10c7be726321bb854403fdeec391e798bf0",
         "type": "github"
       },
       "original": {
···
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs_2",
         "systems": "systems",
-        "vscode-server": "vscode-server"
+        "vscode-server": "vscode-server",
+        "zen-browser": "zen-browser"
       }
     },
     "systems": {
···
       "original": {
         "owner": "nix-community",
         "repo": "nixos-vscode-server",
+        "type": "github"
+      }
+    },
+    "zen-browser": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1757131548,
+        "narHash": "sha256-ym0Vrjvj6rG14yIv62h8pestIixLDqNFUE5Gs3FXPoo=",
+        "owner": "youwen5",
+        "repo": "zen-browser-flake",
+        "rev": "788e25b20abd27a7af53c975237a345ecd01867c",
+        "type": "github"
+      },
+      "original": {
+        "owner": "youwen5",
+        "repo": "zen-browser-flake",
         "type": "github"
       }
     }

flake.nix

···
 
   # try to be in-sync with the nix-channels
   inputs = {
-    # nixpkgs stdlib
+    # nixpkgs essientials
     lib.url = "github:nix-community/nixpkgs.lib";
-
-    # nixpkgs itself
     nixpkgs.url = "https://flakehub.com/f/DeterminateSystems/nixpkgs-weekly/*.tar.gz";
+    flake-utils = {
+      url = "github:numtide/flake-utils";
+      inputs = {
+        systems = {
+          follows = "systems";
+        };
+      };
+    };
+    nixos-generators = {
+      url = "github:nix-community/nixos-generators";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    systems = {
+      url = "github:nix-systems/default";
+    };
 
     # home-manager
     home-manager = {
···
         flake-utils.follows = "flake-utils";
       };
     };
-    
-    # flake utils
-    flake-utils = {
-      url = "github:numtide/flake-utils";
+    zen-browser = {
+      url = "github:youwen5/zen-browser-flake";
       inputs = {
-        systems = {
-          follows = "systems";
-        };
+        nixpkgs.follows = "nixpkgs";
       };
     };
 
···
       url = "github:Mic92/nix-ld";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-    
-    # nixos-generators
-    nixos-generators = {
-      url = "github:nix-community/nixos-generators";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
-
-    systems = {
-      url = "github:nix-systems/default";
-    };
   };
 
-  outputs = {
-    self,
-    nixpkgs,
-    home-manager,
-    nixos-hardware,
-    determinate,
-    vscode-server,
-    nix-ld,
-    flake-utils,
-    systems,
-    nixos-generators,
-    lib
-  }:
-  {
-    nixosConfigurations = {
-      recoverykit-amd64 = nixpkgs.lib.nixosSystem {
-        system = "x86_64-linux";
-        modules = [
-          ./hosts/recoverykit/configuration.nix
-          "${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
-        ];
-      };
+  outputs =
+    {
+      self,
+      nixpkgs,
+      home-manager,
+      nixos-hardware,
+      determinate,
+      vscode-server,
+      nix-ld,
+      flake-utils,
+      systems,
+      nixos-generators,
+      lib,
+      zen-browser,
+    }:
+    {
+      nixosConfigurations = {
+        recoverykit-amd64 = nixpkgs.lib.nixosSystem {
+          system = "x86_64-linux";
+          modules = [
+            ./hosts/recoverykit/configuration.nix
+            "${nixpkgs}/nixos/modules/installer/cd-dvd/installation-cd-minimal.nix"
+          ];
+        };
 
-      portable-amd64-256gb = nixpkgs.lib.nixosSystem{
-        system = "x86_64-linux";
-        modules = [
-          ./hosts/portable/amd64/configuration.nix
+        portable-amd64-256gb = nixpkgs.lib.nixosSystem {
+          system = "x86_64-linux";
+          modules = [
+            ./hosts/portable/amd64/configuration.nix
 
-          # load Determinate Nix and the rest
-          determinate.nixosModules.default
-          home-manager.nixosModules.home-manager
-          vscode-server.nixosModules.default
-          nix-ld.nixosModules.nix-ld
+            # load Determinate Nix and the rest
+            determinate.nixosModules.default
+            home-manager.nixosModules.home-manager
+            vscode-server.nixosModules.default
+            nix-ld.nixosModules.nix-ld
 
-          # one-liners?
-          { programs.nix-ld.dev.enable = true; }
-        ];
-      };
+            # one-liners?
+            { programs.nix-ld.dev.enable = true; }
+          ];
+        };
 
-      stellapent-cier = nixpkgs.lib.nixosSystem {
-        system = "x86_64-linux";
-        modules = [
-          ./hosts/stellapent-cier/configuration.nix
+        stellapent-cier = nixpkgs.lib.nixosSystem {
+          inherit zen-browser;
+          # for some reason, zen-browser needs to be imported before nixos-hardware
+          # otherwise, it fails to build with some missing dependencies
+          system = "x86_64-linux";
+          modules = [
+            ./hosts/stellapent-cier/configuration.nix
 
-          # load Determinate Nix and the rest
-          determinate.nixosModules.default
-          home-manager.nixosModules.home-manager
-          vscode-server.nixosModules.default
-          nix-ld.nixosModules.nix-ld
+            # load Determinate Nix and the rest
+            determinate.nixosModules.default
+            home-manager.nixosModules.home-manager
+            vscode-server.nixosModules.default
+            nix-ld.nixosModules.nix-ld
 
-          # one-liners?
-          { programs.nix-ld.dev.enable = true; }
-        ];
-      };
-    };
-    homeConfigurations = {
-      # Usage
-      # - From GitHub:
-      #  nix run home-manager/master -- switch --flake github:andreijiroh-dev/nixops-config#stellapent-cier
-      # - Locally:
-      #  nix run home-manager/master -- switch --flake .#stellapent-cier
-      stellapent-cier = home-manager.lib.homeManagerConfiguration {
-        inherit lib;
-        pkgs = nixpkgs.legacyPackages.x86_64-linux;
-        modules = [
-          ./shared/home-manager/main.nix
-          {
-            home = {
-              username = "gildedguy";
-              homeDirectory = "/home/gildedguy";
-            };
-          }
-        ];
+            # one-liners?
+            { programs.nix-ld.dev.enable = true; }
+          ];
+        };
       };
+      homeConfigurations = {
+        # Usage
+        # - From GitHub:
+        #  nix run home-manager/master -- switch --flake github:andreijiroh-dev/nixops-config#stellapent-cier
+        # - Locally:
+        #  nix run home-manager/master -- switch --flake .#stellapent-cier
+        stellapent-cier = home-manager.lib.homeManagerConfiguration {
+          inherit lib;
+          pkgs = nixpkgs.legacyPackages.x86_64-linux;
+          modules = [
+            ./shared/home-manager/main.nix
+            {
+              home = {
+                username = "gildedguy";
+                homeDirectory = "/home/gildedguy";
+              };
+            }
+          ];
+        };
 
-      # Usage
-      # - From GitHub:
-      #  nix run home-manager/master -- switch --flake github:andreijiroh-dev/nixops-config#plain
-      # - Locally:
-      #  nix run home-manager/master -- switch --flake .#plain
-      plain = home-manager.lib.homeManagerConfiguration {
-        pkgs = nixpkgs.legacyPackages.x86_64-linux;
-        modules = [
-          ./shared/home-manager/main.nix
-          {
-            home.username = "ajhalili2006";
-            home.homeDirectory = "/home/ajhalili2006";
-          }
-        ];
-      };
+        # Usage
+        # - From GitHub:
+        #  nix run home-manager/master -- switch --flake github:andreijiroh-dev/nixops-config#plain
+        # - Locally:
+        #  nix run home-manager/master -- switch --flake .#plain
+        plain = home-manager.lib.homeManagerConfiguration {
+          pkgs = nixpkgs.legacyPackages.x86_64-linux;
+          modules = [
+            ./shared/home-manager/main.nix
+            {
+              home.username = "ajhalili2006";
+              home.homeDirectory = "/home/ajhalili2006";
+            }
+          ];
+        };
 
-      # Usage
-      # - From GitHub:
-      #  nix run home-manager/master -- switch --flake github:andreijiroh-dev/nixops-config#arm64-plain
-      # - Locally:
-      #  nix run home-manager/master -- switch --flake .#arm64-plain
-      arm64-plain = home-manager.lib.homeManagerConfiguration {
-        pkgs = nixpkgs.legacyPackages.aarch64-linux;
-        modules = [
-          ./shared/home-manager/nogui.nix
-          {
-            home.username = "ajhalili2006";
-            home.homeDirectory = "/home/ajhalili2006";
-          }
-        ];
+        # Usage
+        # - From GitHub:
+        #  nix run home-manager/master -- switch --flake github:andreijiroh-dev/nixops-config#arm64-plain
+        # - Locally:
+        #  nix run home-manager/master -- switch --flake .#arm64-plain
+        arm64-plain = home-manager.lib.homeManagerConfiguration {
+          pkgs = nixpkgs.legacyPackages.aarch64-linux;
+          modules = [
+            ./shared/home-manager/nogui.nix
+            {
+              home.username = "ajhalili2006";
+              home.homeDirectory = "/home/ajhalili2006";
+            }
+          ];
+        };
       };
-    };
 
-    # This is for external users who want to reproduce my configs as needed
-    exportedConfigs = {
-      meta = ./shared/meta.nix;
-      base = {
-        sshKeys = ./shared/ssh-keys.nix;
-        hostsFile = ./shared/hosts-file.nix;
-        systemd = ./shared/systemd.nix;
-        networking = ./shared/networking.nix;
-        locale = ./shared/locale.nix;
-        gnupg = ./shared/gnupg.nix;
-        metaConfigs = ./shared/meta-configs.nix;
-        shells = {
-          bash = ./shared/shells/bash.nix;
-          customPrompts = ./shared/shells/custom-prompts.nix;
+      # This is for external users who want to reproduce my configs as needed
+      exportedConfigs = {
+        meta = ./shared/meta.nix;
+        base = {
+          sshKeys = ./shared/ssh-keys.nix;
+          hostsFile = ./shared/hosts-file.nix;
+          systemd = ./shared/systemd.nix;
+          networking = ./shared/networking.nix;
+          locale = ./shared/locale.nix;
+          gnupg = ./shared/gnupg.nix;
+          metaConfigs = ./shared/meta-configs.nix;
+          shells = {
+            bash = ./shared/shells/bash.nix;
+            customPrompts = ./shared/shells/custom-prompts.nix;
+          };
+        };
+        desktop = {
+          kdePlasma = ./shared/desktop/kde-plasma.nix;
+          base = ./shared/desktop/base.nix;
+          flatpak = ./shared/desktop/flatpak.nix;
+          _1password = ./shared/desktop/1password.nix;
         };
-      };
-      desktop = {
-        kdePlasma = ./shared/desktop/kde-plasma.nix;
-        base = ./shared/desktop/base.nix;
-        flatpak = ./shared/desktop/flatpak.nix;
-        _1password = ./shared/desktop/1password.nix;
-      };
-      server = {
-        devenv = ./shared/server/devenv.nix;
-        ssh = ./shared/server/ssh.nix;
-        firewall = ./shared/server/firewall.nix;
-        tailscale = ./shared/server/tailscale.nix;
-        cockpit = ./shared/server/cockpit.nix;
+        server = {
+          devenv = ./shared/server/devenv.nix;
+          ssh = ./shared/server/ssh.nix;
+          firewall = ./shared/server/firewall.nix;
+          tailscale = ./shared/server/tailscale.nix;
+          cockpit = ./shared/server/cockpit.nix;
+        };
       };
     };
-  };
 }

shared/1password.nix

···
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 {
   programs._1password.enable = true;
   programs._1password-gui = {
     enable = true;
     # Certain features, including CLI integration and system authentication support,
     # require enabling PolKit integration on some desktop environments (e.g. Plasma).
-    polkitPolicyOwners = [ "gildedguy" "ajhalili2006" ];
+    polkitPolicyOwners = [
+      "gildedguy"
+      "ajhalili2006"
+    ];
   };
 
+  # HACK: Allow zen-browser to be used with 1Password
+  environment.etc = {
+    "1password/custom_allowed_browsers" = {
+      text = ''
+        zen
+      '';
+      mode = "0755";
+    };
+  };
   system.nixos.tags = [ "1password" ];
-}
+}

shared/desktop/firefox.nix

···
-{ pkgs, ... }:
+{ pkgs, zen-browser, ... }:
 
 {
-    programs.firefox = {
-        enable = true;
-        nativeMessagingHosts.packages = with pkgs; [
-            firefoxpwa
-        #    _1password-gui
-        #    gnupg
-        ];
-        package = pkgs.firefox;
-    };
+  programs.firefox = {
+    enable = true;
+    nativeMessagingHosts.packages = with pkgs; [
+      firefoxpwa
+      #    _1password-gui
+      #    gnupg
+    ];
+    package = pkgs.firefox;
+  };
+
+  environment.systemPackages = [
+    zen-browser.packages.${pkgs.system}.default
+  ];
 }