vendor librewolf addons instead of fetching them on first run

this obviously speeds up startup, it's hopefully also less likely to
break surprisingly, and i hope it's the path to me shipping forks of
official extensions.

flake.lock

@@ -120,10 +120,27 @@
         "mobile-nixos": "mobile-nixos",
         "nixpkgs": "nixpkgs",
         "nixpkgs-stable": "nixpkgs-stable",
+        "rycee": "rycee",
         "sops-nix": "sops-nix",
         "uninsane": "uninsane"
       }
     },
+    "rycee": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1666843362,
+        "narHash": "sha256-xn2bW9/MT0u8Ptlk+f323p46Q/ktZkzMp7oj5SlYDxU=",
+        "owner": "rycee",
+        "repo": "nur-expressions",
+        "rev": "43d3a363c126968db46585b88b8eb97dd32634ad",
+        "type": "gitlab"
+      },
+      "original": {
+        "owner": "rycee",
+        "repo": "nur-expressions",
+        "type": "gitlab"
+      }
+    },
     "sops-nix": {
       "inputs": {
         "nixpkgs": [

flake.nix

@@ -14,6 +14,10 @@
       url = "github:nix-community/home-manager/release-22.05";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    rycee = {
+      url = "gitlab:rycee/nur-expressions";
+      flake = false;
+    };
     sops-nix = {
       url = "github:Mic92/sops-nix";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -25,8 +29,17 @@
     };
   };
 
-  outputs = { self, nixpkgs, nixpkgs-stable, mobile-nixos, home-manager, sops-nix, impermanence, uninsane }:
-  let
+  outputs = {
+    self,
+    nixpkgs,
+    nixpkgs-stable,
+    mobile-nixos,
+    home-manager,
+    rycee,
+    sops-nix,
+    impermanence,
+    uninsane
+  }: let
     patchedPkgs = system: nixpkgs.legacyPackages.${system}.applyPatches {
       name = "nixpkgs-patched-uninsane";
       src = nixpkgs;
@@ -53,6 +66,7 @@
         {
           nixpkgs.overlays = [
             (import "${mobile-nixos}/overlay/overlay.nix")
+            (import "${rycee}/overlay.nix")
             uninsane.overlay
             (import ./pkgs/overlay.nix)
             (next: prev: rec {
@@ -101,19 +115,14 @@
     nixosConfigurations = builtins.mapAttrs (name: value: value.nixosConfiguration) machines;
     imgs = builtins.mapAttrs (name: value: value.img) machines;
     packages = let
-      custom-x86_64 = customPackagesFor "x86_64-linux" "x86_64-linux";
-      custom-aarch64 = customPackagesFor "aarch64-linux" "aarch64-linux";
-      nixpkgs-x86_64 = nixpkgsFor "x86_64-linux" "x86_64-linux";
-      nixpkgs-aarch64 = nixpkgsFor "aarch64-linux" "aarch64-linux";
+      allPkgsFor = sys: (customPackagesFor sys sys) // {
+        nixpkgs = nixpkgsFor sys sys;
+        uninsane = uninsane.packages."${sys}";
+        rycee = (import "${rycee}/default.nix" { pkgs = nixpkgsFor sys sys; });
+      };
     in {
-      x86_64-linux = custom-x86_64 // {
-        nixpkgs = nixpkgs-x86_64;
-        uninsane = uninsane.packages.x86_64-linux;
-      };
-      aarch64-linux = custom-aarch64 // {
-        nixpkgs = nixpkgs-aarch64;
-        uninsane = uninsane.packages.aarch64-linux;
-      };
+      x86_64-linux = allPkgsFor "x86_64-linux";
+      aarch64-linux = allPkgsFor "aarch64-linux";
     };
   };
 }

modules/universal/home-manager/librewolf.nix

@@ -33,14 +33,19 @@ let
       DisablePocket = true;
       DisableSetDesktopBackground = false;
       Extensions = {
-        Install = [
-          "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"
-          "https://addons.mozilla.org/firefox/downloads/latest/sponsorblock/latest.xpi"
-          "https://addons.mozilla.org/firefox/downloads/latest/bypass-paywalls-clean/latest.xpi"
-          "https://addons.mozilla.org/firefox/downloads/latest/sidebery/latest.xpi"
-          "https://addons.mozilla.org/firefox/downloads/latest/browserpass-ce/latest.xpi"
+        Install = let
+          addon = pkg: addonId: "${pkg}/share/mozilla/extensions/{ec8030f7-c20a-464f-9b0e-13a3a9e97384}/${addonId}.xpi";
+        in with pkgs.firefox-addons; [
+          # the extension key is found by building and checking the output: `nix build '.#rycee.firefox-addons.<foo>'`
+          # or by taking the `addonId` input to `buildFirefoxXpiAddon` in rycee's firefox-addons repo
+          (addon ublock-origin "uBlock0@raymondhill.net")
+          (addon sponsorblock "sponsorBlocker@ajay.app")
+          (addon bypass-paywalls-clean "{d133e097-46d9-4ecc-9903-fa6a722a6e0e}")
+          (addon sidebery "{3c078156-979c-498b-8990-85f7987dd929}")
+          (addon browserpass "browserpass@maximbaz.com")
+          (addon metamask "webextension@metamask.io")
+          # extensions can alternatively be installed by URL, in which case they are fetched (and cached) on first run.
           # "https://addons.mozilla.org/firefox/downloads/latest/gopass-bridge/latest.xpi"
-          "https://addons.mozilla.org/firefox/downloads/latest/ether-metamask/latest.xpi"
         ];
         # remove many default search providers
         Uninstall = [