nixos with home-manager does some of this. my browser config points to a few repos which package an assortment of browser plugins and my `~/.mozilla` folder get

nixos with home-manager does some of this. my browser config points to a few repos which package an assortment of browser plugins and my `~/.mozilla` folder gets populated statically/read-only from the subset of plugins i choose from this list. there's loads of UX improvements to be made. i update the plugins with `nix flake update` and `nixos-rebuild switch` and that process tells me which repos have new commits, but getting to a changelog for the relevant plugins is manual enough that i skip it. but it very much seems like a good direction to me.