system/modules/nixos/programs/browsers/mullvad-browser.nix

{ config, pkgs, lib, inputs, ... }:

let
  cfg = config.local.programs.browsers.mullvad-browser;

  policiesJson = pkgs.callPackage ./policies.nix {
    firefoxAddons = inputs.firefox-addons.packages."${pkgs.system}";
    withRedirectorAddon = true;
    withSidebarTabsAddon = true;
    withAllSearchEngines = true;
  };

  finalMullvadBrowser = cfg.package.overrideAttrs (attrs: {
    postInstall = ''
      rm $out/share/mullvad-browser/distribution/policies.json

      install -Dvm644 ${policiesJson} $out/share/mullvad-browser/distribution/policies.json
    '';
  });
in
{
  options.local.programs.browsers.mullvad-browser = with lib; {
    enable = mkEnableOption "mullvad-browser";
    package = mkPackageOption pkgs "mullvad-browser" {};
    finalPackage = mkOption {
      type = types.package;
      readOnly = true;
      default = finalMullvadBrowser;
    };
  };
}