]> Git — Sourcephile - julm/julm-nix.git/blob - home-manager/profiles/firefox.nix
firefox: hardening
[julm/julm-nix.git] / home-manager / profiles / firefox.nix
1 { config, pkgs, lib, ... }:
2 {
3 home.packages = lib.mkIf config.programs.firefox.enable [
4 pkgs.tor-browser-bundle-bin
5 ];
6 programs.firefox = {
7 enable = lib.mkDefault true;
8 /*
9 extensions =
10 with pkgs.nur.repos.rycee.firefox-addons; [
11 https-everywhere
12 privacy-badger
13 ];
14 */
15 package = pkgs.wrapFirefox pkgs.firefox-unwrapped {
16 /*
17 nixExtensions = [
18 (pkgs.fetchFirefoxAddon {
19 name = "ublock";
20 url = "https://addons.mozilla.org/firefox/downloads/file/3679754/ublock_origin-latest-an+fx.xpi";
21 sha256 = "0000000000000000000000000000000000000000000000000000";
22 })
23 (pkgs.fetchFirefoxAddon {
24 name = "decentraleyes";
25 url = "https://addons.mozilla.org/firefox/downloads/file/1671300/decentraleyes-latest-an+fx.xpi";
26 sha256 = "0000000000000000000000000000000000000000000000000000";
27 })
28 ];
29 */
30
31 /* about:policies#documentation */
32 extraPolicies = {
33 CaptivePortal = false;
34 DNSOverHTTPS = { Enabled = false; Locked = true; };
35 DisableAppUpdate = true;
36 DisableFirefoxAccounts = true;
37 DisableFirefoxStudies = true;
38 DisablePocket = true;
39 DisableTelemetry = true;
40 DontCheckDefaultBrowser = true;
41 FirefoxHome = { Pocket = false; Snippets = false; };
42 NetworkPrediction = false;
43 PromptForDownloadLocation = true;
44 SearchEngines = { PreventInstalls = true; };
45 SearchSuggestEnabled = false;
46 UserMessaging = { ExtensionRecommendations = false; SkipOnboarding = true; };
47 };
48 };
49 };
50 }