refactor: merge etc2/ into etc/, add content hashes to run scripts

- etc2/ only existed because stow used symlinks and reflector refused
  them. Chezmoi copies files, so no reason to keep them separate.
- Run scripts are now .tmpl files with sha256sum hashes of deployed
  files. chezmoi only re-runs them when file content actually changes,
  avoiding unnecessary doas prompts on every apply.

1 files changed, 20 insertions, 0 deletions

diff --git a/run_onchange_after_deploy-firefox.sh.tmpl b/run_onchange_after_deploy-firefox.sh.tmpl
new file mode 100755
index 0000000..b8bf309
--- /dev/null
+++ b/run_onchange_after_deploy-firefox.sh.tmpl
@@ -0,0 +1,20 @@
+#!/bin/sh
+# Deploy Firefox/LibreWolf hardening overrides and custom CSS
+# chezmoi re-runs this script when any hash below changes.
+# {{ include "firefox/user-overrides.js" | sha256sum }}
+# {{ include "firefox/chrome/userChrome.css" | sha256sum }}
+set -eu
+
+PROFILES_DIR="$HOME/.librewolf"
+if [ -d "$PROFILES_DIR" ]; then
+    PROFILE=$(find "$PROFILES_DIR" -maxdepth 1 -mindepth 1 -type d -name '*.default-default' | head -1)
+    if [ -z "$PROFILE" ]; then
+        PROFILE=$(find "$PROFILES_DIR" -maxdepth 1 -mindepth 1 -type d | head -1)
+    fi
+
+    if [ -n "$PROFILE" ]; then
+        cp --remove-destination "$CHEZMOI_SOURCE_DIR/firefox/user-overrides.js" "$PROFILE/user-overrides.js"
+        mkdir -p "$PROFILE/chrome"
+        cp --remove-destination "$CHEZMOI_SOURCE_DIR/firefox/chrome/userChrome.css" "$PROFILE/chrome/userChrome.css"
+    fi
+fi