1 files changed, 48 insertions, 0 deletions
diff --git a/nixpkgs/pkgs/tools/security/passff-host/default.nix b/nixpkgs/pkgs/tools/security/passff-host/default.nix
new file mode 100644
index 000000000000..4eb615b79032
--- /dev/null
+++ b/nixpkgs/pkgs/tools/security/passff-host/default.nix
@@ -0,0 +1,48 @@
+{ lib, stdenv, fetchFromGitHub, python3, pass }:
+
+stdenv.mkDerivation rec {
+  pname = "passff-host";
+  version = "1.2.3";
+
+  src = fetchFromGitHub {
+    owner = "passff";
+    repo = pname;
+    rev = version;
+    sha256 = "sha256-1JPToJF/ruu69TEZAAvV3Zl0qcTpEyMb2qQDAWWgKNw=";
+  };
+
+  buildInputs = [ python3 ];
+  makeFlags = [ "VERSION=${version}" ];
+
+  patchPhase = ''
+    sed -i 's#COMMAND = "pass"#COMMAND = "${pass}/bin/pass"#' src/passff.py
+  '';
+
+  installPhase = ''
+    substituteInPlace bin/${version}/passff.json \
+      --replace PLACEHOLDER $out/share/passff-host/passff.py
+
+    install -Dt $out/share/passff-host \
+      bin/${version}/passff.{py,json}
+
+    nativeMessagingPaths=(
+      /lib/mozilla/native-messaging-hosts
+      /etc/opt/chrome/native-messaging-hosts
+      /etc/chromium/native-messaging-hosts
+      /etc/vivaldi/native-messaging-hosts
+      /lib/librewolf/native-messaging-hosts
+    )
+
+    for manifestDir in "''${nativeMessagingPaths[@]}"; do
+      install -d $out$manifestDir
+      ln -s $out/share/passff-host/passff.json $out$manifestDir/
+    done
+  '';
+
+  meta = with lib; {
+    description = "Host app for the WebExtension PassFF";
+    homepage = "https://github.com/passff/passff-host";
+    license = licenses.gpl2;
+    maintainers = with maintainers; [ ];
+  };
+}