{ config, lib, ... }:
let
  # finding all home-manager users that have helium enabled
  enabledUsers = lib.filterAttrs (_: user: user.programs.helium.enable or false) (
    config.home-manager.users or { }
  );

  # generate etc files per user to support multi-user systems
  policyFiles = lib.mapAttrs' (
    name: user:
    lib.nameValuePair "chromium/policies/managed/helium-${name}.json" {
      text = user.programs.helium.finalPolicyJson;
      mode = "0644";
    }
  ) enabledUsers;
in
{
  config = lib.mkIf (enabledUsers != { }) {
    environment.etc = policyFiles;
  };
}