{
  pkgs,
  lib,
  ...
}: let
  chromiumFlags = import ./_chromium-flags.nix;
  chromiumWrapped = pkgs.symlinkJoin {
    name = "ungoogled-chromium-wrapped";
    paths = [pkgs.ungoogled-chromium];
    buildInputs = [pkgs.makeWrapper];
    postBuild = ''
      wrapProgram $out/bin/chromium \
        ${lib.concatMapStringsSep " \\\n        " (flag: "--add-flags \"${flag}\"") chromiumFlags.flags}
    '';
  };
in {
  users.users.someone.packages = [chromiumWrapped];
  environment.sessionVariables = chromiumFlags.sessionVariables;
}