Add Helium browser with Proton Pass and disabled password manager

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/helium.nix

@@ -0,0 +1,22 @@
+#./apps/helium.nix
+{ inputs, pkgs, lib, config, ... }:
+{
+  config = lib.mkIf (lib.elem config.networking.hostName [ "FredOS-Gaming" "FredOS-Macbook" ]) {
+    environment.systemPackages = [
+      inputs.helium.packages.${pkgs.stdenv.hostPlatform.system}.default
+    ];
+
+    # Chromium policies for Helium (Chromium-based)
+    programs.chromium = {
+      enable = true;
+      extensions = [
+        "ghmbeldphafepmbegfdlkpapadhbakde" # Proton Pass
+      ];
+      extraOpts = {
+        PasswordManagerEnabled = false;
+        AutofillCreditCardEnabled = false;
+        AutofillAddressEnabled = false;
+      };
+    };
+  };
+}

common.nix

@@ -15,6 +15,7 @@
     ./settings/users.nix
     ./settings/shell.nix
     ./apps/zen.nix
+    ./apps/helium.nix
 
     # Services #
     ./services/server-permissions.nix

flake.nix

@@ -15,8 +15,12 @@
     };
   
     nix-cachyos-kernel.url = "github:xddxdd/nix-cachyos-kernel/release";
+    helium = {
+      url = "github:schembriaiden/helium-browser-nix-flake";
+      inputs.nixpkgs.follows = "nixpkgs";
     };
-  outputs = { self, nixpkgs, home-manager, zen-browser, nix-cachyos-kernel, ... } @ inputs:
+  };
+  outputs = { self, nixpkgs, home-manager, zen-browser, nix-cachyos-kernel, helium, ... } @ inputs:
   let
     system = "x86_64-linux";
     mkHost = hostname: nixpkgs.lib.nixosSystem {