Enabling `zen-browser` and `1password` on `nix-darwin`

[mattstruble]

I have my configuration set up according to the documentation:

#darwin.nix 
environment.etc = {
   "1password/custom_allowed_browsers" = {
         text = '' 
            zen 
            zen-twilight
         '';
    };
};

programs = { 
   _1password.enable = true; 
   _1password-gui.enable = true;
};

#home.nix 
imports = [ inputs.zen-browser.homeModules.twilight ]; 
programs.zen-browser = { 
    enable = true; 
    policies = { ... }; 
};

But when opening up 1password zen isn't in the approved browsers, and when trying to manually add /Users/<user>/Applications/Home Manager Apps/Zen Browser (Twilight).app I am presented with the error: The selected application was signed in an unsupported way or may be missing a required identifier.

The official 1password page says that on MacOS the applications need to be signed by apple. Is it possible to get the signed apps via nix-darwin (with custom policies and extensions), maybe via nix-homebrew, or is it just not possible?

[e2r2fx]

The only way I got this to work was to install zen with with homebrew:

{self, config, ...}:{
    config.homebrew.casks = ["zen"];

    config.home-manager.users.${self.userName} = {
      imports = [self.inputs.zen-browser.homeModules.beta];

      home.sessionVariables = {
        MOZ_LEGACY_PROFILES = "1";
      };

    programs.zen-browser.darwinDefaultsId = "org.mozilla.firefox.plist";

    home.file."Library/Application Support/Zen/Profiles/default" = {
      force = true;
      recursive = true;
      source = ./Profile;
    };

    home.file."Library/Application Support/Zen/profiles.ini".text = ''
      [General]
      StartWithLastProfile=1

      [Profile0]
      Default=1
      IsRelative=1
      Name=default
      Path=Profiles/default
    '';
     
    programs.zen-browser = {
      # INFO: installing via zen-browser-flake causes issues with 1password integration
      # so I've disabled it, and installed via homebrew instead
      enable = false;
      profiles."default" = {
        id = 
        # ..............
  };
}

Do keep in mind this is temporary, I created the current profile with the zen flake, so currently I have my containers, spaces, policies and extensions working because of that. But at least in the meantime I have 1password :)

[naeramarth7]

Instead of having to re-enable this on changes, you can simply set null as package on darwin. This prevents installation of a package, but still applies the configuration.

  programs.zen-browser.enable = true;
  programs.zen-browser.package =
    if pkgs.stdenv.isDarwin then
      null
    else
      inputs.zen-browser.packages.${pkgs.stdenv.hostPlatform.system}.default;