1 files changed, 52 insertions, 13 deletions
diff --git a/modules/web/chromium/extensions/default.nix b/modules/web/chromium/extensions/default.nix
index a73f5f2..6128d2b 100644
--- a/modules/web/chromium/extensions/default.nix
+++ b/modules/web/chromium/extensions/default.nix
@@ -2,24 +2,63 @@
   lib,
   pkgs,
   config,
-  checkForUpdates ? true,
+  ...
 }:
 let
+  cfg = config.web.chromium;
+
   extLib = import ./lib.nix {
-    inherit
-      lib
-      pkgs
-      config
-      checkForUpdates
-      ;
+    inherit lib pkgs config;
+    checkForUpdates = cfg.checkForUpdates;
   };
+
   mkExtension = path: import path { inherit lib pkgs extLib; };
+
+  extensionSubmodule = lib.types.submodule {
+    options = {
+      pname = lib.mkOption {
+        type = lib.types.str;
+        description = "Package name of the extension.";
+      };
+      version = lib.mkOption {
+        type = lib.types.str;
+        description = "Resolved/pinned version of the extension.";
+      };
+      id = lib.mkOption {
+        type = lib.types.nullOr lib.types.str;
+        description = "Chrome extension ID, derived from the pinned key. Null if the extension isn't key-pinned.";
+      };
+      drv = lib.mkOption {
+        type = lib.types.package;
+        description = "Unpacked extension derivation.";
+      };
+    };
+  };
 in
 {
-  aria2Explorer = mkExtension ./aria2-explorer.nix;
-  browserpass = mkExtension ./browserpass.nix;
-  darkMode = mkExtension ./dark-mode.nix;
-  searxngHome = mkExtension ./searxng-home.nix;
-  theme = mkExtension ./theme.nix;
-  ublockOrigin = mkExtension ./ublock-origin.nix;
+  imports = [
+    ./assertions.nix
+  ];
+
+  options.web.chromium.extensions = lib.mkOption {
+    type = lib.types.attrsOf extensionSubmodule;
+    internal = true;
+    default = { };
+    description = ''
+      Resolved chromium extension derivations, keyed by name. Computed
+      internally from ./extensions/*.nix — not user-settable. Read from
+      other modules via e.g. `config.web.chromium.extensions.browserpass.id`.
+    '';
+  };
+
+  # readOnly options get their actual value assigned here, in this same
+  # module's config — this is the one place allowed to set it.
+  config.web.chromium.extensions = {
+    aria2Explorer = mkExtension ./aria2-explorer.nix;
+    browserpass = mkExtension ./browserpass.nix;
+    darkMode = mkExtension ./dark-mode.nix;
+    searxngHome = mkExtension ./searxng-home.nix;
+    theme = mkExtension ./theme.nix;
+    ublockOrigin = mkExtension ./ublock-origin.nix;
+  };
 }