feat(desktop): add zen-browser flake.

modules/linux/home-manager/default.nix

@@ -20,6 +20,7 @@
     ./pipewire.nix
     ./secrets.nix
     ./emacs.nix
+    ./zen-browser.nix
   ];
 
   crony.river.enable = lib.mkDefault false;
@@ -42,4 +43,5 @@
   crony.pipewire.enable = lib.mkDefault true;
   crony.home-secrets.enable = lib.mkDefault false;
   crony.emacs.enable = lib.mkDefault false;
+  crony.zen-browser.enable = lib.mkDefault false;
 }

modules/linux/home-manager/zen-browser.nix

@@ -0,0 +1,42 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  options = {
+    crony.zen-browser.enable = lib.mkEnableOption "Enable and setup zen browser";
+  };
+
+  config = lib.mkIf config.crony.zen-browser.enable {
+    programs.zen-browser = {
+      enable = true;
+      profiles = {
+        main = {};
+      };
+      policies = {
+        AutofillAddressEnabled = true;
+        AutofillCreditCardEnabled = false;
+        DisableAppUpdate = true;
+        DisableFeedbackCommands = true;
+        DisableFirefoxStudies = true;
+        DisablePocket = true;
+        DisableTelemetry = true;
+        DontCheckDefaultBrowser = false;
+        NoDefaultBookmarks = true;
+        OfferToSaveLogins = false;
+        EnableTrackingProtection = {
+          Value = true;
+          Locked = true;
+          Cryptomining = true;
+          Fingerprinting = true;
+        };
+      };
+      nativeMessagingHosts = with pkgs; [
+        keepassxc
+      ];
+    };
+
+    stylix.targets.zen-browser.profileNames = ["main"];
+  };
+}