Finalize firefox conf for now

This commit is contained in:
Vili Sinervä 2024-07-31 22:39:03 +03:00
parent 64df97ca6f
commit bd5cb7d5b4
No known key found for this signature in database
GPG key ID: DF8FEAF54EFAC996

View file

@ -12,7 +12,13 @@ in
{
programs.firefox = {
enable = true;
preferencesStatus = "locked";
# AutoConfig used for preferences not supported via policies
autoConfig = ''
lockPref("full-screen-api.warning.timeout", 500)
lockPref("privacy.fingerprintingProtection", true)
lockPref("privacy.donottrackheader.enabled", true)
'';
# ---- POLICIES ----
# Check about:policies#documentation for options.
@ -34,6 +40,7 @@ in
DisableFirefoxStudies = true;
DisableFormHistory = true;
DisablePocket = true;
DisableSecurityBypass = false;
DisableTelemetry = true;
DisplayBookmarksToolbar = "never"; # alternatives: "always" or "newtab"
DisplayMenuBar = "default-off"; # alternatives: "always", "never" or "default-on"
@ -140,22 +147,26 @@ in
Value = "strict";
Status = "locked";
};
"browser.safebrowsing.downloads.enabled" = lock-true;
"browser.safebrowsing.downloads.remote.block_potentially_unwanted" = lock-true;
"browser.safebrowsing.downloads.remote.block_uncommon" = lock-true;
"browser.safebrowsing.malware.enabled" = lock-true;
"browser.safebrowsing.phishing.enabled" = lock-true;
"browser.crashReports.unsubmittedCheck.autoSubmit2" = lock-false;
"browser.topsites.contile.enabled" = lock-false;
"browser.translations.automaticallyPopup" = lock-false;
"media.ffmpeg.vaapi.enabled" = lock-true;
"full-screen-api.warning.timeout" = {
Value = 500;
"privacy.globalprivacycontrol.enabled" = lock-true;
"xpinstall.whitelist.required" = lock-true;
"network.trr.mode" = {
Value = 0;
Status = "locked";
};
"security.OCSP.enabled" = {
Value = 1;
Status = "locked";
};
"privacy.globalprivacycontrol.enabled" = lock-true;
};
};
preferences = {
"privacy.donottrackheader.enabled" = true;
"network.trr.mode" = 2;
"network.trr.custom_uri" = "192.168.0.1";
"network.trr.uri" = "192.168.0.1";
};
};
}