commit da37e52237aa92126cdc9508ac6f2902282f47fc · pyrox.dev/nix

-46

homes/x86_64-linux/pyrox/programs/firefox/default.nix

···

       1
       -
       {pkgs, ...}: {

     

       2
       -
         imports = [./extraPrefs.nix ./policies.nix];

     

       3
       -
         programs.firefox = {

     

       4
       -
           enable = true;

     

       5
       -
           package = pkgs.firefox.override {

     

       6
       -
             cfg = {

     

       7
       -
               smartcardSupport = true;

     

       8
       -
               pipewireSupport = true;

     

       9
       -
               ffmpegSupport = true;

     

       10
       -
             };

     

       11
       -
           };

     

       12
       -
           profiles = {

     

       13
       -
             default = {

     

       14
       -
               id = 0;

     

       15
       -
               isDefault = true;

     

       16
       -
               name = "Default";

     

       17
       -
               extensions = with pkgs.nur.repos.rycee.firefox-addons; [

     

       18
       -
                 augmented-steam

     

       19
       -
                 bitwarden

     

       20
       -
                 clearurls

     

       21
       -
                 consent-o-matic

     

       22
       -
                 cookie-autodelete

     

       23
       -
                 darkreader

     

       24
       -
                 don-t-fuck-with-paste

     

       25
       -
                 enhanced-github

     

       26
       -
                 facebook-container

     

       27
       -
                 header-editor

     

       28
       -
                 istilldontcareaboutcookies

     

       29
       -
                 kagi-search

     

       30
       -
                 libredirect

     

       31
       -
                 lovely-forks

     

       32
       -
                 multi-account-containers

     

       33
       -
                 privacy-pass

     

       34
       -
                 protondb-for-steam

     

       35
       -
                 pywalfox

     

       36
       -
                 reddit-moderator-toolbox

     

       37
       -
                 refined-github

     

       38
       -
                 sourcegraph

     

       39
       -
                 steam-database

     

       40
       -
                 stylus

     

       41
       -
                 ublock-origin

     

       42
       -
               ];

     

       43
       -
             };

     

       44
       -
           };

     

       45
       -
         };

     

       46
       -
       }

-171

homes/x86_64-linux/pyrox/programs/firefox/extraPrefs.nix

···

       1
       -
       {

     

       2
       -
         programs.firefox.profiles.default.extraConfig = ''

     

       3
       -
           user_pref("accessibility.typeaheadfind.flashBar", 0);

     

       4
       -
           user_pref("app.normandy.api_url", "");

     

       5
       -
           user_pref("app.normandy.enabled", false);

     

       6
       -
           user_pref("app.normandy.first_run", false);

     

       7
       -
           user_pref("app.shield.optoutstudies.enabled", false);

     

       8
       -
           user_pref("app.update.auto", false);

     

       9
       -
           user_pref("app.update.backgroundErrors", 1);

     

       10
       -
           user_pref("app.update.disable_button.showUpdateHistory", false);

     

       11
       -
           user_pref("beacon.enabled", false);

     

       12
       -
           user_pref("browser.aboutConfig.showWarning", false);

     

       13
       -
           user_pref("browser.bookmarks.addedImportButton", true);

     

       14
       -
           user_pref("browser.contentblocking.report.hide_vpn_banner", true);

     

       15
       -
           user_pref("browser.contentblocking.report.lockwise.enabled", false);

     

       16
       -
           user_pref("browser.contentblocking.report.show_mobile_app", false);

     

       17
       -
           user_pref("browser.contentblocking.report.social.url", "");

     

       18
       -
           user_pref("browser.formfill.enable", false);

     

       19
       -
           user_pref("browser.laterrun.bookkeeping.profileCreationTime", 0);

     

       20
       -
           user_pref("browser.laterrun.bookkeeping.sessionCount", 0);

     

       21
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.enabled", false);

     

       22
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.endpointSpocsClear", "");

     

       23
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.endpoints", "");

     

       24
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.personalization.enabled", false);

     

       25
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.readTime.enabled", false);

     

       26
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.rec.impressions", "{}");

     

       27
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.recentSaves.enabled", false);

     

       28
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.saveToPocketCard.enabled", false);

     

       29
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.sendToPocket.enabled", false);

     

       30
       -
           user_pref("browser.newtabpage.activity-stream.discoverystream.spoc.impressions", "{}");

     

       31
       -
           user_pref("browser.newtabpage.activity-stream.feeds.recommendationprovider", false);

     

       32
       -
           user_pref("browser.newtabpage.activity-stream.feeds.telemetry", false);

     

       33
       -
           user_pref("browser.newtabpage.activity-stream.impressionId", "{}");

     

       34
       -
           user_pref("browser.newtabpage.activity-stream.section.highlights.includePocket", false);

     

       35
       -
           user_pref("browser.newtabpage.activity-stream.telemetry", false);

     

       36
       -
           user_pref("browser.newtabpage.activity-stream.telemetry.structuredIngestion.endpoint", "");

     

       37
       -
           user_pref("browser.newtabpage.activity-stream.telemetry.ut.events", false);

     

       38
       -
           user_pref("browser.partnerlink.attributionURL", "");

     

       39
       -
           user_pref("browser.partnerlink.campaign.topsites", "");

     

       40
       -
           user_pref("browser.ping-centre.telemetry", false);

     

       41
       -
           user_pref("browser.places.importBookmarksHTML", false);

     

       42
       -
           user_pref("browser.pocket.enabled", false);

     

       43
       -
           user_pref("browser.safebrowsing.downloads.enabled", false);

     

       44
       -
           user_pref("browser.safebrowsing.downloads.remote.block_dangerous", false);

     

       45
       -
           user_pref("browser.safebrowsing.downloads.remote.block_dangerous_host", false);

     

       46
       -
           user_pref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false);

     

       47
       -
           user_pref("browser.safebrowsing.downloads.remote.block_uncommon", false);

     

       48
       -
           user_pref("browser.safebrowsing.downloads.remote.enabled", false);

     

       49
       -
           user_pref("browser.safebrowsing.downloads.remote.url", "");

     

       50
       -
           user_pref("browser.safebrowsing.malware.enabled", false);

     

       51
       -
           user_pref("browser.safebrowsing.phishing.enabled", false);

     

       52
       -
           user_pref("browser.safebrowsing.provider.google.advisoryURL", "");

     

       53
       -
           user_pref("browser.safebrowsing.provider.google.gethashURL", "");

     

       54
       -
           user_pref("browser.safebrowsing.provider.google.gethashURL", "");

     

       55
       -
           user_pref("browser.safebrowsing.provider.google.reportURL", "");

     

       56
       -
           user_pref("browser.safebrowsing.provider.google.updateURL", "");

     

       57
       -
           user_pref("browser.safebrowsing.provider.google4.advisoryURL", "");

     

       58
       -
           user_pref("browser.safebrowsing.provider.google4.dataSharingURL", "");

     

       59
       -
           user_pref("browser.safebrowsing.provider.google4.gethashURL", "");

     

       60
       -
           user_pref("browser.safebrowsing.provider.google4.lists", "");

     

       61
       -
           user_pref("browser.safebrowsing.provider.google4.reportURL", "");

     

       62
       -
           user_pref("browser.safebrowsing.provider.google4.updateURL", "");

     

       63
       -
           user_pref("browser.safebrowsing.provider.mozilla.gethashURL", "");

     

       64
       -
           user_pref("browser.safebrowsing.provider.mozilla.lastupdatetime", "");

     

       65
       -
           user_pref("browser.safebrowsing.provider.mozilla.lists", "");

     

       66
       -
           user_pref("browser.safebrowsing.provider.mozilla.lists.base", "");

     

       67
       -
           user_pref("browser.safebrowsing.provider.mozilla.lists.content", "");

     

       68
       -
           user_pref("browser.safebrowsing.provider.mozilla.nextupdatetime", "");

     

       69
       -
           user_pref("browser.safebrowsing.provider.mozilla.updateURL", "");

     

       70
       -
           user_pref("browser.search.serpEventTelemetry.enabled", false);

     

       71
       -
           user_pref("browser.send_pings", false);

     

       72
       -
           user_pref("browser.tabs.warnOnClose", true);

     

       73
       -
           user_pref("browser.urlbar.eventTelemetry.enabled", false);

     

       74
       -
           user_pref("browser.urlbar.quicksuggest.dataCollection.enabled", false);

     

       75
       -
           user_pref("browser.urlbar.suggest.addons", false);

     

       76
       -
           user_pref("browser.urlbar.suggest.bookmark", true);

     

       77
       -
           user_pref("browser.urlbar.suggest.calculator", true);

     

       78
       -
           user_pref("browser.urlbar.suggest.clipboard", false);

     

       79
       -
           user_pref("browser.urlbar.suggest.engines", false);

     

       80
       -
           user_pref("browser.urlbar.suggest.history", true);

     

       81
       -
           user_pref("browser.urlbar.suggest.mdn", false);

     

       82
       -
           user_pref("browser.urlbar.suggest.openpage", true);

     

       83
       -
           user_pref("browser.urlbar.suggest.pocket", false);

     

       84
       -
           user_pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false);

     

       85
       -
           user_pref("browser.urlbar.suggest.quicksuggest.sponsored", false);

     

       86
       -
           user_pref("browser.urlbar.suggest.topsites", false);

     

       87
       -
           user_pref("browser.urlbar.suggest.trending", false);

     

       88
       -
           user_pref("browser.urlbar.suggest.weather", false);

     

       89
       -
           user_pref("datareporting.healthreport.infoURL", "");

     

       90
       -
           user_pref("datareporting.policy.firstRunURL", "");

     

       91
       -
           user_pref("device.sensors.ambientLight.enabled", false);

     

       92
       -
           user_pref("device.sensors.enabled", false);

     

       93
       -
           user_pref("device.sensors.motion.enabled", false);

     

       94
       -
           user_pref("device.sensors.orientation.enabled", false);

     

       95
       -
           user_pref("device.sensors.proximity.enabled", false);

     

       96
       -
           user_pref("device.sensors.test.events", false);

     

       97
       -
           user_pref("devtools.chrome.enabled", true);

     

       98
       -
           user_pref("doh-rollout.uri", "");

     

       99
       -
           user_pref("dom.battery.enabled", false);

     

       100
       -
           user_pref("dom.event.clipboardevents.enabled", false);

     

       101
       -
           user_pref("dom.security.unexpected_system_load_telemetry_enabled", false);

     

       102
       -
           user_pref("dom.webgpu.enabled", true);

     

       103
       -
           user_pref("extensions.formautofill.addresses.enabled", false);

     

       104
       -
           user_pref("extensions.formautofill.creditCards.enabled", false);

     

       105
       -
           user_pref("extensions.htmlaboutaddons.recommendations.enabled", false);

     

       106
       -
           user_pref("extensions.pocket.enabled", false);

     

       107
       -
           user_pref("extensions.pocket.showHome", false);

     

       108
       -
           user_pref("extensions.pocket.site", "");

     

       109
       -
           user_pref("extensions.recommendations.privacyPolicyUrl", "");

     

       110
       -
           user_pref("extensions.recommendations.themeRecommendationUrl", "");

     

       111
       -
           user_pref("extensions.ui.dictionary.hidden", true);

     

       112
       -
           user_pref("extensions.update.autoUpdateDefault", false);

     

       113
       -
           user_pref("extensions.webextensions.restrictedDomains", "");

     

       114
       -
           user_pref("layers.acceleration.disabled", false);

     

       115
       -
           user_pref("network.predictor.enabled", false);

     

       116
       -
           user_pref("network.prefetch-next", false);

     

       117
       -
           user_pref("network.trr.confirmation_telemetry_enabled", false);

     

       118
       -
           user_pref("privacy.clearOnShutdown.downloads", true);

     

       119
       -
           user_pref("privacy.donottrackheader.enabled", false);

     

       120
       -
           user_pref("privacy.resistFingerprinting.block_mozAddonManager", true);

     

       121
       -
           user_pref("privacy.trackingprotection.origin_telemetry.enabled", false);

     

       122
       -
           user_pref("remote.prefs.recommended", false);

     

       123
       -
           user_pref("security.app_menu.recordEventTelemetry", false);

     

       124
       -
           user_pref("security.certerrors.recordEventTelemetry", false);

     

       125
       -
           user_pref("security.identitypopup.recordEventTelemetry", false);

     

       126
       -
           user_pref("security.protectionspopup.recordEventTelemetry", false);

     

       127
       -
           user_pref("services.settings.server", "");

     

       128
       -
           user_pref("signon.autofillForms", false);

     

       129
       -
           user_pref("signon.generation.enabled", false);

     

       130
       -
           user_pref("signon.management.page.breach-alerts.enabled", false);

     

       131
       -
           user_pref("toolkit.legacyUserProfileCustomizations.stylesheets", true);

     

       132
       -
           user_pref("toolkit.telemetry.bhrPing.enabled", false);

     

       133
       -
           user_pref("toolkit.telemetry.cachedClientID", "");

     

       134
       -
           user_pref("toolkit.telemetry.dap_enabled", false);

     

       135
       -
           user_pref("toolkit.telemetry.dap_helper", "");

     

       136
       -
           user_pref("toolkit.telemetry.dap_leader", "");

     

       137
       -
           user_pref("toolkit.telemetry.dap_task1_enabled", false);

     

       138
       -
           user_pref("toolkit.telemetry.debugSlowSql", false);

     

       139
       -
           user_pref("toolkit.telemetry.firstShutdownPing.enabled", false);

     

       140
       -
           user_pref("toolkit.telemetry.geckoview.streaming", false);

     

       141
       -
           user_pref("toolkit.telemetry.newProfilePing.enabled", false);

     

       142
       -
           user_pref("toolkit.telemetry.pioneer-new-studies-available", false);

     

       143
       -
           user_pref("toolkit.telemetry.previousBuildID", "");

     

       144
       -
           user_pref("toolkit.telemetry.reportingpolicy.firstRun", "");

     

       145
       -
           user_pref("toolkit.telemetry.server", "");

     

       146
       -
           user_pref("toolkit.telemetry.server_owner", "");

     

       147
       -
           user_pref("toolkit.telemetry.shutdownPingSender.backgroundtask.enabled", false);

     

       148
       -
           user_pref("toolkit.telemetry.shutdownPingSender.enabled", false);

     

       149
       -
           user_pref("toolkit.telemetry.shutdownPingSender.enabledFirstSession", false);

     

       150
       -
           user_pref("toolkit.telemetry.testing.overrideProductsCheck", false);

     

       151
       -
           user_pref("toolkit.telemetry.unified", false);

     

       152
       -
           user_pref("toolkit.telemetry.updatePing.enabled", "");

     

       153
       -
           user_pref("ui.systemUsesDarkTheme", 1);

     

       154
       -
           user_pref("webgl.force-enabled", true);

     

       155
       -
           user_pref("xpinstall.signatures.required", false);

     

       156
       -
         '' +

     

       157
       -
         # Fastfox tweaks

     

       158
       -
         ''

     

       159
       -
           user_pref("media.memory_cache_max_size", 65536);

     

       160
       -
           user_pref("browser.cache.jsbc_compression_level", 3);

     

       161
       -
           user_pref("image.mem.decode_bytes_at_a_time", 32768);

     

       162
       -
           user_pref("network.http.max-connections", 1800);

     

       163
       -
           user_pref("network.http.max-persistent-connections-per-server", 10);

     

       164
       -
           user_pref("network.http.max-urgent-start-excessive-connections-per-host", 5);

     

       165
       -
           user_pref("network.dns.max_high_priority_threads", 8);

     

       166
       -
           user_pref("network.ssl_tokens_cache_capacity", 10240);

     

       167
       -
           user_pref("network.dns.disablePrefetch", true);

     

       168
       -
           user_pref("browser.places.speculativeConnect.enabled", false);

     

       169
       -
           user_pref("browser.urlbar.speculativeConnect.enabled", false);

     

       170
       -
         '';

     

       171
       -
       }

-47

homes/x86_64-linux/pyrox/programs/firefox/policies.nix

···

       1
       -
       {

     

       2
       -
         programs.firefox.policies = {

     

       3
       -
           AppAutoUpdate = false;

     

       4
       -
           DisableAppUpdate = true;

     

       5
       -
           DisableFirefoxAccounts = true;

     

       6
       -
           DisableFirefoxStudies = true;

     

       7
       -
           DisableMasterPasswordCreation = true;

     

       8
       -
           DisablePocket = true;

     

       9
       -
           DisableTelemetry = true;

     

       10
       -
           DNSOverHTTPS = {

     

       11
       -
             Enabled = false;

     

       12
       -
             ProviderURL = "https://dns.nextdns.io/36e7f7";

     

       13
       -
             Locked = true;

     

       14
       -
           };

     

       15
       -
           ExtensionUpdate = false;

     

       16
       -
           FirefoxHome = {

     

       17
       -
             Search = true;

     

       18
       -
             TopSites = false;

     

       19
       -
             SponsoredTopSites = false;

     

       20
       -
             Highlights = false;

     

       21
       -
             Pocket = false;

     

       22
       -
             SponsoredPocket = false;

     

       23
       -
             Snippets = false;

     

       24
       -
             Locked = true;

     

       25
       -
           };

     

       26
       -
           Homepage = {

     

       27
       -
             URL = "https://dash.pyrox.dev";

     

       28
       -
             Locked = true;

     

       29
       -
             StartPage = "homepage-locked";

     

       30
       -
           };

     

       31
       -
           ManualAppUpdateOnly = true;

     

       32
       -
           OfferToSaveLogins = false;

     

       33
       -
           OfferToSaveLoginsDefault = false;

     

       34
       -
           OverrideFirstRunPage = "";

     

       35
       -
           OverridePostUpdatePage = "";

     

       36
       -
           PasswordManagerEnabled = false;

     

       37
       -
           SearchBar = "unified";

     

       38
       -
           ShowHomeButton = false;

     

       39
       -
           UserMessaging = {

     

       40
       -
             WhatsNew = false;

     

       41
       -
             ExtensionRecommendations = false;

     

       42
       -
             FeatureRecommendations = false;

     

       43
       -
             UrlbarInterventions = false;

     

       44
       -
             SkipOnboarding = false;

     

       45
       -
           };

     

       46
       -
         };

     

       47
       -
       }

+30

modules/nixos/programs/firefox/default.nix

···

       1
       +
       {

     

       2
       +
         inputs,

     

       3
       +
         config,

     

       4
       +
         lib,

     

       5
       +
         system,

     

       6
       +
         ...

     

       7
       +
       }:

     

       8
       +
       let

     

       9
       +
         cfg = config.py.programs.firefox;

     

       10
       +
         spkgs = inputs.stable.legacyPackages.${system};

     

       11
       +
       in

     

       12
       +
       {

     

       13
       +
         options.py.programs.firefox = {

     

       14
       +
           enable = lib.mkEnableOption "Firefox configuration";

     

       15
       +
         };

     

       16
       +
       

     

       17
       +
         config = lib.mkIf (cfg.enable || config.py.profiles.graphical.enable) {

     

       18
       +
           programs.firefox = {

     

       19
       +
             enable = true;

     

       20
       +
             package = spkgs.firefox;

     

       21
       +
             wrapperConfig.cfg = {

     

       22
       +
               smartcardSupport = true;

     

       23
       +
               pipewireSupport = true;

     

       24
       +
               ffmpegSupport = true;

     

       25
       +
             };

     

       26
       +
             policies = import ./policies.nix;

     

       27
       +
             preferences = import ./extraPrefs.nix;

     

       28
       +
           };

     

       29
       +
         };

     

       30
       +
       }

+68

modules/nixos/programs/firefox/extensions.nix

···

       1
       +
       let

     

       2
       +
         mkAMO = short: {

     

       3
       +
           installation_mode = "force_installed";

     

       4
       +
           install_url = "https://addons.mozilla.org/firefox/downloads/latest/${short}/latest.xpi";

     

       5
       +
         };

     

       6
       +
       in

     

       7
       +
       {

     

       8
       +
         # Addons from AMO

     

       9
       +
         "{1be309c5-3e4f-4b99-927d-bb500eb4fa88}" = mkAMO "augmented-steam";

     

       10
       +
         "{446900e4-71c2-419f-a6a7-df9c091e268b}" = mkAMO "bitwarden-password-manager" // {

     

       11
       +
           default_area = "navbar";

     

       12
       +
         };

     

       13
       +
         "{bbb880ce-43c9-47ae-b746-c3e0096c5b76}" = mkAMO "catppuccin-gh-file-explorer";

     

       14
       +
         "{74145f27-f039-47ce-a470-a662b129930a}" = mkAMO "clearurls";

     

       15
       +
         "gdpr@cavi.au.dk" = mkAMO "consent-o-matic";

     

       16
       +
         "{5cce4ab5-3d47-41b9-af5e-8203eea05245}" = mkAMO "control-panel-for-twitter";

     

       17
       +
         "CookieAutoDelete@kennydo.com" = mkAMO "cookie-autodelete";

     

       18
       +
         "addon@darkreader.org" = mkAMO "darkreader" // {

     

       19
       +
           default_area = "navbar";

     

       20
       +
         };

     

       21
       +
         "DontFuckWithPaste@raim.ist" = mkAMO "don-t-fuck-with-paste";

     

       22
       +
         "{72bd91c9-3dc5-40a8-9b10-dec633c0873f}" = mkAMO "enhanced-github";

     

       23
       +
         "headereditor-amo@addon.firefoxcn.net" = mkAMO "header-editor";

     

       24
       +
         "idcac-pub@guus.ninja" = mkAMO "istilldontcareaboutcookies";

     

       25
       +
         "search@kagi.com" = mkAMO "kagi-search-for-firefox";

     

       26
       +
         "7esoorv3@alefvanoon.anonaddy.me" = mkAMO "libredirect" // {

     

       27
       +
           default_area = "navbar";

     

       28
       +
         };

     

       29
       +
         "github-forks-addon@musicallyut.in" = mkAMO "lovely-forks";

     

       30
       +
         "firefox-addon@pronoundb.org" = mkAMO "pronoundb";

     

       31
       +
         "{30280527-c46c-4e03-bb16-2e3ed94fa57c}" = mkAMO "protondb-for-steam";

     

       32
       +
         "redirector@einaregilsson.com" = mkAMO "redirector";

     

       33
       +
         "{a4c4eda4-fb84-4a84-b4a1-f7c1cbf2a1ad}" = mkAMO "refined-github-";

     

       34
       +
         "{762f9885-5a13-4abd-9c77-433dcd38b8fd}" = mkAMO "return-youtube-dislikes";

     

       35
       +
         "{48748554-4c01-49e8-94af-79662bf34d50}" = mkAMO "privacy-pass";

     

       36
       +
         "sponsorBlocker@ajay.app" = mkAMO "sponsorblock";

     

       37
       +
         "firefox-extension@steamdb.info" = mkAMO "steam-database";

     

       38
       +
         "{7a7a4a92-a2a0-41d1-9fd7-1e92480d612d}" = mkAMO "styl-us" // {

     

       39
       +
           default_area = "navbar";

     

       40
       +
         };

     

       41
       +
         "jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack" = mkAMO "terms-of-service-didnt-read";

     

       42
       +
         "{76ef94a4-e3d0-4c6f-961a-d38a429a332b}" = mkAMO "ttv-lol-pro";

     

       43
       +
         "uBlock0@raymondhill.net" = mkAMO "ublock-origin" // {

     

       44
       +
           default_area = "navbar";

     

       45
       +
         };

     

       46
       +
         "{799c0914-748b-41df-a25c-22d008f9e83f}" = mkAMO "web-scrobbler" // {

     

       47
       +
           default_area = "navbar";

     

       48
       +
         };

     

       49
       +
         # Official Mozilla Extensions

     

       50
       +
         # Still downloaded from AMO

     

       51
       +
         "@contain-facebook" = mkAMO "facebook-container";

     

       52
       +
         "FirefoxColor@mozilla.com" = mkAMO "firefox-color";

     

       53
       +
         "firefox-translations-addon@mozilla.org" = mkAMO "firefox-translations";

     

       54
       +
         "@testpilot-containers" = mkAMO "multi-account-containers";

     

       55
       +
         # External Addons

     

       56
       +
         "frankerfacez@frankerfacez.com" = {

     

       57
       +
           installation_mode = "force_installed";

     

       58
       +
           install_url = "https://cdn.frankerfacez.com/script/frankerfacez-4.0-an+fx.xpi";

     

       59
       +
         };

     

       60
       +
         "magnolia@12.34" = {

     

       61
       +
           installation_mode = "force_installed";

     

       62
       +
           install_url = "https://github.com/bpc-clone/bpc_updates/releases/download/latest/bypass_paywalls_clean-latest.xpi";

     

       63
       +
         };

     

       64
       +
         "zotero@chnm.gmu.edu" = {

     

       65
       +
           installation_mode = "force_installed";

     

       66
       +
           install_url = "https://www.zotero.org/download/connector/dl?browser=firefox";

     

       67
       +
         };

     

       68
       +
       }

+169

modules/nixos/programs/firefox/extraPrefs.nix

···

       1
       +
       {

     

       2
       +
         "accessibility.typeaheadfind.flashBar" = 0;

     

       3
       +
         "app.normandy.api_url" = "";

     

       4
       +
         "app.normandy.enabled" = false;

     

       5
       +
         "app.normandy.first_run" = false;

     

       6
       +
         "app.shield.optoutstudies.enabled" = false;

     

       7
       +
         "app.update.auto" = false;

     

       8
       +
         "app.update.backgroundErrors" = 1;

     

       9
       +
         "app.update.disable_button.showUpdateHistory" = false;

     

       10
       +
         "beacon.enabled" = false;

     

       11
       +
         "browser.aboutConfig.showWarning" = false;

     

       12
       +
         "browser.bookmarks.addedImportButton" = true;

     

       13
       +
         "browser.contentblocking.report.hide_vpn_banner" = true;

     

       14
       +
         "browser.contentblocking.report.lockwise.enabled" = false;

     

       15
       +
         "browser.contentblocking.report.show_mobile_app" = false;

     

       16
       +
         "browser.contentblocking.report.social.url" = "";

     

       17
       +
         "browser.formfill.enable" = false;

     

       18
       +
         "browser.laterrun.bookkeeping.profileCreationTime" = 0;

     

       19
       +
         "browser.laterrun.bookkeeping.sessionCount" = 0;

     

       20
       +
         "browser.newtabpage.activity-stream.discoverystream.enabled" = false;

     

       21
       +
         "browser.newtabpage.activity-stream.discoverystream.endpointSpocsClear" = "";

     

       22
       +
         "browser.newtabpage.activity-stream.discoverystream.endpoints" = "";

     

       23
       +
         "browser.newtabpage.activity-stream.discoverystream.personalization.enabled" = false;

     

       24
       +
         "browser.newtabpage.activity-stream.discoverystream.readTime.enabled" = false;

     

       25
       +
         "browser.newtabpage.activity-stream.discoverystream.rec.impressions" = "{}";

     

       26
       +
         "browser.newtabpage.activity-stream.discoverystream.recentSaves.enabled" = false;

     

       27
       +
         "browser.newtabpage.activity-stream.discoverystream.saveToPocketCard.enabled" = false;

     

       28
       +
         "browser.newtabpage.activity-stream.discoverystream.sendToPocket.enabled" = false;

     

       29
       +
         "browser.newtabpage.activity-stream.discoverystream.spoc.impressions" = "{}";

     

       30
       +
         "browser.newtabpage.activity-stream.feeds.recommendationprovider" = false;

     

       31
       +
         "browser.newtabpage.activity-stream.feeds.telemetry" = false;

     

       32
       +
         "browser.newtabpage.activity-stream.impressionId" = "{}";

     

       33
       +
         "browser.newtabpage.activity-stream.section.highlights.includePocket" = false;

     

       34
       +
         "browser.newtabpage.activity-stream.telemetry" = false;

     

       35
       +
         "browser.newtabpage.activity-stream.telemetry.structuredIngestion.endpoint" = "";

     

       36
       +
         "browser.newtabpage.activity-stream.telemetry.ut.events" = false;

     

       37
       +
         "browser.partnerlink.attributionURL" = "";

     

       38
       +
         "browser.partnerlink.campaign.topsites" = "";

     

       39
       +
         "browser.ping-centre.telemetry" = false;

     

       40
       +
         "browser.places.importBookmarksHTML" = false;

     

       41
       +
         "browser.pocket.enabled" = false;

     

       42
       +
         "browser.safebrowsing.downloads.enabled" = false;

     

       43
       +
         "browser.safebrowsing.downloads.remote.block_dangerous" = false;

     

       44
       +
         "browser.safebrowsing.downloads.remote.block_dangerous_host" = false;

     

       45
       +
         "browser.safebrowsing.downloads.remote.block_potentially_unwanted" = false;

     

       46
       +
         "browser.safebrowsing.downloads.remote.block_uncommon" = false;

     

       47
       +
         "browser.safebrowsing.downloads.remote.enabled" = false;

     

       48
       +
         "browser.safebrowsing.downloads.remote.url" = "";

     

       49
       +
         "browser.safebrowsing.malware.enabled" = false;

     

       50
       +
         "browser.safebrowsing.phishing.enabled" = false;

     

       51
       +
         # Disable safebrowsing shit

     

       52
       +
         "browser.safebrowsing.provider.google.advisoryURL" = "";

     

       53
       +
         "browser.safebrowsing.provider.google.gethashURL" = "";

     

       54
       +
         "browser.safebrowsing.provider.google.reportURL" = "";

     

       55
       +
         "browser.safebrowsing.provider.google.updateURL" = "";

     

       56
       +
         "browser.safebrowsing.provider.google4.advisoryURL" = "";

     

       57
       +
         "browser.safebrowsing.provider.google4.dataSharingURL" = "";

     

       58
       +
         "browser.safebrowsing.provider.google4.gethashURL" = "";

     

       59
       +
         "browser.safebrowsing.provider.google4.lists" = "";

     

       60
       +
         "browser.safebrowsing.provider.google4.reportURL" = "";

     

       61
       +
         "browser.safebrowsing.provider.google4.updateURL" = "";

     

       62
       +
         "browser.safebrowsing.provider.mozilla.gethashURL" = "";

     

       63
       +
         "browser.safebrowsing.provider.mozilla.lastupdatetime" = "";

     

       64
       +
         "browser.safebrowsing.provider.mozilla.lists" = "";

     

       65
       +
         "browser.safebrowsing.provider.mozilla.lists.base" = "";

     

       66
       +
         "browser.safebrowsing.provider.mozilla.lists.content" = "";

     

       67
       +
         "browser.safebrowsing.provider.mozilla.nextupdatetime" = "";

     

       68
       +
         "browser.safebrowsing.provider.mozilla.updateURL" = "";

     

       69
       +
         "browser.search.serpEventTelemetry.enabled" = false;

     

       70
       +
         "browser.send_pings" = false;

     

       71
       +
         "browser.tabs.warnOnClose" = true;

     

       72
       +
         # Disable useless suggestions

     

       73
       +
         "browser.urlbar.suggest.addons" = false;

     

       74
       +
         "browser.urlbar.suggest.bookmark" = true;

     

       75
       +
         "browser.urlbar.suggest.calculator" = true;

     

       76
       +
         "browser.urlbar.suggest.clipboard" = false;

     

       77
       +
         "browser.urlbar.suggest.engines" = false;

     

       78
       +
         "browser.urlbar.suggest.history" = true;

     

       79
       +
         "browser.urlbar.suggest.mdn" = false;

     

       80
       +
         "browser.urlbar.suggest.openpage" = true;

     

       81
       +
         "browser.urlbar.suggest.pocket" = false;

     

       82
       +
         "browser.urlbar.suggest.quicksuggest.nonsponsored" = false;

     

       83
       +
         "browser.urlbar.suggest.quicksuggest.sponsored" = false;

     

       84
       +
         "browser.urlbar.suggest.topsites" = false;

     

       85
       +
         "browser.urlbar.suggest.trending" = false;

     

       86
       +
         "browser.urlbar.suggest.weather" = false;

     

       87
       +
         # Disable sensors

     

       88
       +
         "device.sensors.ambientLight.enabled" = false;

     

       89
       +
         "device.sensors.enabled" = false;

     

       90
       +
         "device.sensors.motion.enabled" = false;

     

       91
       +
         "device.sensors.orientation.enabled" = false;

     

       92
       +
         "device.sensors.proximity.enabled" = false;

     

       93
       +
         "device.sensors.test.events" = false;

     

       94
       +
         "devtools.chrome.enabled" = true;

     

       95
       +
         "doh-rollout.uri" = "";

     

       96
       +
         "dom.battery.enabled" = false;

     

       97
       +
         "dom.event.clipboardevents.enabled" = false;

     

       98
       +
         "dom.security.unexpected_system_load_telemetry_enabled" = false;

     

       99
       +
         "dom.webgpu.enabled" = true;

     

       100
       +
         "extensions.formautofill.addresses.enabled" = false;

     

       101
       +
         "extensions.formautofill.creditCards.enabled" = false;

     

       102
       +
         "extensions.htmlaboutaddons.recommendations.enabled" = false;

     

       103
       +
         # Disable Pocket

     

       104
       +
         "extensions.pocket.enabled" = false;

     

       105
       +
         "extensions.pocket.showHome" = false;

     

       106
       +
         "extensions.pocket.site" = "";

     

       107
       +
         "extensions.recommendations.privacyPolicyUrl" = "";

     

       108
       +
         "extensions.recommendations.themeRecommendationUrl" = "";

     

       109
       +
         "extensions.ui.dictionary.hidden" = true;

     

       110
       +
         "extensions.update.autoUpdateDefault" = false;

     

       111
       +
         "extensions.webextensions.restrictedDomains" = "";

     

       112
       +
         "privacy.clearOnShutdown.downloads" = true;

     

       113
       +
         "privacy.donottrackheader.enabled" = false;

     

       114
       +
         "privacy.resistFingerprinting.block_mozAddonManager" = true;

     

       115
       +
         "remote.prefs.recommended" = false;

     

       116
       +
         "services.settings.server" = "";

     

       117
       +
         "signon.autofillForms" = false;

     

       118
       +
         "signon.generation.enabled" = false;

     

       119
       +
         "signon.management.page.breach-alerts.enabled" = false;

     

       120
       +
         "toolkit.legacyUserProfileCustomizations.stylesheets" = true;

     

       121
       +
         "ui.systemUsesDarkTheme" = 1;

     

       122
       +
         "webgl.force-enabled" = true;

     

       123
       +
         "xpinstall.signatures.required" = false;

     

       124
       +
         # Disable telemetry stuff

     

       125
       +
         # Already disabled in policies, but better safe than sorry.

     

       126
       +
         "browser.urlbar.eventTelemetry.enabled" = false;

     

       127
       +
         "browser.urlbar.quicksuggest.dataCollection.enabled" = false;

     

       128
       +
         "datareporting.healthreport.infoURL" = "";

     

       129
       +
         "datareporting.policy.firstRunURL" = "";

     

       130
       +
         "security.app_menu.recordEventTelemetry" = false;

     

       131
       +
         "security.certerrors.recordEventTelemetry" = false;

     

       132
       +
         "security.identitypopup.recordEventTelemetry" = false;

     

       133
       +
         "security.protectionspopup.recordEventTelemetry" = false;

     

       134
       +
         "network.trr.confirmation_telemetry_enabled" = false;

     

       135
       +
         "privacy.trackingprotection.origin_telemetry.enabled" = false;

     

       136
       +
         "toolkit.telemetry.bhrPing.enabled" = false;

     

       137
       +
         "toolkit.telemetry.cachedClientID" = "";

     

       138
       +
         "toolkit.telemetry.dap_enabled" = false;

     

       139
       +
         "toolkit.telemetry.dap_helper" = "";

     

       140
       +
         "toolkit.telemetry.dap_leader" = "";

     

       141
       +
         "toolkit.telemetry.dap_task1_enabled" = false;

     

       142
       +
         "toolkit.telemetry.debugSlowSql" = false;

     

       143
       +
         "toolkit.telemetry.firstShutdownPing.enabled" = false;

     

       144
       +
         "toolkit.telemetry.geckoview.streaming" = false;

     

       145
       +
         "toolkit.telemetry.newProfilePing.enabled" = false;

     

       146
       +
         "toolkit.telemetry.pioneer-new-studies-available" = false;

     

       147
       +
         "toolkit.telemetry.previousBuildID" = "";

     

       148
       +
         "toolkit.telemetry.reportingpolicy.firstRun" = "";

     

       149
       +
         "toolkit.telemetry.server" = "";

     

       150
       +
         "toolkit.telemetry.server_owner" = "";

     

       151
       +
         "toolkit.telemetry.shutdownPingSender.backgroundtask.enabled" = false;

     

       152
       +
         "toolkit.telemetry.shutdownPingSender.enabled" = false;

     

       153
       +
         "toolkit.telemetry.shutdownPingSender.enabledFirstSession" = false;

     

       154
       +
         "toolkit.telemetry.testing.overrideProductsCheck" = false;

     

       155
       +
         "toolkit.telemetry.unified" = false;

     

       156
       +
         "toolkit.telemetry.updatePing.enabled" = "";

     

       157
       +
         # FastFox

     

       158
       +
         "media.memory_cache_max_size" = 65536;

     

       159
       +
         "browser.cache.jsbc_compression_level" = 3;

     

       160
       +
         "image.mem.decode_bytes_at_a_time" = 32768;

     

       161
       +
         "network.http.max-connections" = 1800;

     

       162
       +
         "network.http.max-persistent-connections-per-server" = 10;

     

       163
       +
         "network.http.max-urgent-start-excessive-connections-per-host" = 5;

     

       164
       +
         "network.dns.max_high_priority_threads" = 8;

     

       165
       +
         "network.ssl_tokens_cache_capacity" = 10240;

     

       166
       +
         "network.dns.disablePrefetch" = true;

     

       167
       +
         "browser.places.speculativeConnect.enabled" = false;

     

       168
       +
         "browser.urlbar.speculativeConnect.enabled" = false;

     

       169
       +
       }

+66

modules/nixos/programs/firefox/policies.nix

···

       1
       +
       {

     

       2
       +
         AppAutoUpdate = false;

     

       3
       +
         AutofillAddressEnabled = false;

     

       4
       +
         AutofillCreditCardEnabled = false;

     

       5
       +
         BackgroundAppUpdate = false;

     

       6
       +
         DisableAppUpdate = true;

     

       7
       +
         DisableBuiltinPDFViewer = false;

     

       8
       +
         DisableFirefoxAccounts = true;

     

       9
       +
         DisableFirefoxStudies = true;

     

       10
       +
         DisableMasterPasswordCreation = true;

     

       11
       +
         DisablePocket = true;

     

       12
       +
         DisableSetDesktopBackground = true;

     

       13
       +
         DisableTelemetry = true;

     

       14
       +
         DNSOverHTTPS = {

     

       15
       +
           Enabled = false;

     

       16
       +
           ProviderURL = "https://dns.nextdns.io/36e7f7";

     

       17
       +
           Locked = true;

     

       18
       +
         };

     

       19
       +
         DontCheckDefaultBrowser = true;

     

       20
       +
         ExtensionSettings = import ./extensions.nix;

     

       21
       +
         ExtensionUpdate = true;

     

       22
       +
         FirefoxHome = {

     

       23
       +
           Search = true;

     

       24
       +
           TopSites = false;

     

       25
       +
           SponsoredTopSites = false;

     

       26
       +
           Highlights = false;

     

       27
       +
           Pocket = false;

     

       28
       +
           SponsoredPocket = false;

     

       29
       +
           Snippets = false;

     

       30
       +
           Locked = true;

     

       31
       +
         };

     

       32
       +
         FirefoxSuggest = {

     

       33
       +
           WebSuggestions = false;

     

       34
       +
           SponsoredSuggestions = false;

     

       35
       +
           ImproveSuggest = false;

     

       36
       +
           Locked = true;

     

       37
       +
         };

     

       38
       +
         HardwareAcceleration = true;

     

       39
       +
         Homepage = {

     

       40
       +
           URL = "about:blank";

     

       41
       +
           Locked = true;

     

       42
       +
           StartPage = "previous-session";

     

       43
       +
         };

     

       44
       +
         ManualAppUpdateOnly = true;

     

       45
       +
         OfferToSaveLogins = false;

     

       46
       +
         OfferToSaveLoginsDefault = false;

     

       47
       +
         OverrideFirstRunPage = "";

     

       48
       +
         OverridePostUpdatePage = "";

     

       49
       +
         PasswordManagerEnabled = false;

     

       50
       +
         PDFjs = {

     

       51
       +
           Enabled = true;

     

       52
       +
           EnablePermissions = false;

     

       53
       +
         };

     

       54
       +
         PrintingEnabled = true;

     

       55
       +
         SearchBar = "unified";

     

       56
       +
         ShowHomeButton = false;

     

       57
       +
         UserMessaging = {

     

       58
       +
           WhatsNew = false;

     

       59
       +
           ExtensionRecommendations = false;

     

       60
       +
           FeatureRecommendations = false;

     

       61
       +
           UrlbarInterventions = false;

     

       62
       +
           SkipOnboarding = false;

     

       63
       +
           MoreFromMozilla = false;

     

       64
       +
           Locked = true;

     

       65
       +
         };

     

       66
       +
       }