From e8855f4befb91df25ac1d0c835864735ef91965a Mon Sep 17 00:00:00 2001
From: Florian Klink <flokli@flokli.de>
Date: Sat, 7 May 2022 21:06:07 +0200
Subject: [PATCH] feat(ops/modules/open_eid.nix): document firefox

Firefox users can add p11-kit-proxy (or other SecurityDevices)
system-wide, by making use of the extraPolicies functionality.

Change-Id: Id58b6cab425199fb0e09e846db2a86d302c0de0d
Reviewed-on: https://cl.tvl.fyi/c/depot/+/5534
Reviewed-by: tazjin <tazjin@tvl.su>
Tested-by: BuildkiteCI
Autosubmit: flokli <flokli@flokli.de>
---
 ops/modules/open_eid.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ops/modules/open_eid.nix b/ops/modules/open_eid.nix
index b073790d5..9fd325933 100644
--- a/ops/modules/open_eid.nix
+++ b/ops/modules/open_eid.nix
@@ -9,6 +9,9 @@ let
   #
   # https://bugs.chromium.org/p/chromium/issues/detail?id=16387
   #
+  # Firefox users can just set
+  # extraPolicies.SecurityDevices.p11-kit-proxy "${pkgs.p11-kit}/lib/p11-kit-proxy.so";
+  # when overriding the firefox derivation.
   setup-browser-eid = pkgs.writeShellScriptBin "setup-browser-eid" ''
     NSSDB="''${HOME}/.pki/nssdb"
     mkdir -p ''${NSSDB}