From fcafb03c9b1030dea399d44dda52f62e9117ad96 Mon Sep 17 00:00:00 2001
From: sommerfeld <sommerfeld@sommerfeld.dev>
Date: Tue, 21 Apr 2026 01:23:19 +0100
Subject: refactor: merge etc2/ into etc/, add content hashes to run scripts

- etc2/ only existed because stow used symlinks and reflector refused
  them. Chezmoi copies files, so no reason to keep them separate.
- Run scripts are now .tmpl files with sha256sum hashes of deployed
  files. chezmoi only re-runs them when file content actually changes,
  avoiding unnecessary doas prompts on every apply.
---
 run_onchange_after_deploy-firefox.sh.tmpl | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100755 run_onchange_after_deploy-firefox.sh.tmpl

(limited to 'run_onchange_after_deploy-firefox.sh.tmpl')

diff --git a/run_onchange_after_deploy-firefox.sh.tmpl b/run_onchange_after_deploy-firefox.sh.tmpl
new file mode 100755
index 0000000..b8bf309
--- /dev/null
+++ b/run_onchange_after_deploy-firefox.sh.tmpl
@@ -0,0 +1,20 @@
+#!/bin/sh
+# Deploy Firefox/LibreWolf hardening overrides and custom CSS
+# chezmoi re-runs this script when any hash below changes.
+# {{ include "firefox/user-overrides.js" | sha256sum }}
+# {{ include "firefox/chrome/userChrome.css" | sha256sum }}
+set -eu
+
+PROFILES_DIR="$HOME/.librewolf"
+if [ -d "$PROFILES_DIR" ]; then
+    PROFILE=$(find "$PROFILES_DIR" -maxdepth 1 -mindepth 1 -type d -name '*.default-default' | head -1)
+    if [ -z "$PROFILE" ]; then
+        PROFILE=$(find "$PROFILES_DIR" -maxdepth 1 -mindepth 1 -type d | head -1)
+    fi
+
+    if [ -n "$PROFILE" ]; then
+        cp --remove-destination "$CHEZMOI_SOURCE_DIR/firefox/user-overrides.js" "$PROFILE/user-overrides.js"
+        mkdir -p "$PROFILE/chrome"
+        cp --remove-destination "$CHEZMOI_SOURCE_DIR/firefox/chrome/userChrome.css" "$PROFILE/chrome/userChrome.css"
+    fi
+fi
-- 
cgit v1.2.3-70-g09d2