brave: fix /etc/hosts mapping

modules/programs/gui/brave/module.nix

@@ -167,6 +167,35 @@ in {
       # pages built into (such as "page not found"). Setting the policy to
       # False means Google Chrome never uses alternate error pages.
       AlternateErrorPagesEnabled = false;
+
+      "3rdparty" = {
+        extensions = {
+          # Ublock Origin
+          cjpalhdlnbpafiamejdnhcphjbkeiagm = {
+            toOverwrite = {
+              filterLists = [
+                # Default UBlock Origin filter lists
+                "user-filters"
+                "ublock-filters"
+                "ublock-badware"
+                "ublock-privacy"
+                "ublock-abuse"
+                "ublock-unbreak"
+                "easylist"
+                "easyprivacy"
+                "urlhaus-1"
+                "plowe-0"
+
+                "https://raw.githubusercontent.com/yokoffing/filterlists/refs/heads/main/privacy_essentials.txt"
+                "https://raw.githubusercontent.com/hagezi/dns-blocklists/refs/heads/main/adblock/pro.plus.mini.txt"
+                "https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/LegitimateURLShortener.txt"
+                "https://raw.githubusercontent.com/yokoffing/filterlists/refs/heads/main/annoyance_list.txt"
+                "https://raw.githubusercontent.com/DandelionSprout/adfilt/refs/heads/master/BrowseWebsitesWithoutLoggingIn.txt"
+              ];
+            };
+          };
+        };
+      };
     };
     extensions = [
       # NoScript
@@ -190,7 +219,7 @@ in {
 
   networking.extraHosts =
     concatStringsSep "\n"
-    <| map (addr: "${addr} localhost") [
+    <| map (addr: "localhost ${addr}") [
       "rewards.brave.com"
       "api.rewards.brave.com"
       "grant.rewards.brave.com"