114 lines
4.0 KiB
Nix
114 lines
4.0 KiB
Nix
{ config, pkgs, ... }:
|
|
{
|
|
environment.systemPackages = with pkgs; [
|
|
# New system packages
|
|
];
|
|
|
|
programs.firefox = {
|
|
enable = true;
|
|
policies = {
|
|
AppAutoUpdate = false;
|
|
AllowFileSelectionDialogs = true;
|
|
AutofillAddressEnabled = true;
|
|
AutofillCreditCardEnabled = false;
|
|
CaptivePortal = true;
|
|
DisableFirefoxAccounts = true;
|
|
DisableSecurityBypass = {
|
|
InvalidCertificate = false;
|
|
SafeBrowsing = false;
|
|
};
|
|
DisableSetDesktopBackground = true;
|
|
DisableTelemetry = true;
|
|
ExtensionUpdate = true;
|
|
FirefoxHome = {
|
|
Search = true;
|
|
TopSites = true;
|
|
SponsoredTopSites = false;
|
|
Highlights = true;
|
|
Pocket = false;
|
|
Stories = false;
|
|
SponsoredPocket = false;
|
|
SponsoredStories = false;
|
|
Snippets = true;
|
|
Locked = true;
|
|
};
|
|
PictureInPicture = {
|
|
Enabled = true;
|
|
Locked = false;
|
|
};
|
|
ExtensionSettings = {
|
|
"nextcloud-passwords@nextcloud.com" = {
|
|
installation_mode = "force_installed";
|
|
install_url = "https://addons.mozilla.org/firefox/downloads/latest/nextcloud-passwords/latest.xpi";
|
|
};
|
|
|
|
"instapaper@instapaper.com" = {
|
|
installation_mode = "force_installed";
|
|
install_url = "https://addons.mozilla.org/firefox/downloads/latest/instapaper-official/latest.xpi";
|
|
};
|
|
|
|
"weh@mozilla.org" = {
|
|
installation_mode = "force_installed";
|
|
install_url = "https://addons.mozilla.org/firefox/downloads/latest/video-downloadhelper/latest.xpi";
|
|
};
|
|
};
|
|
Preferences = {
|
|
# Tracking Protection
|
|
"browser.contentblocking.category" = "strict";
|
|
"privacy.trackingprotection.enabled" = true;
|
|
"privacy.trackingprotection.socialtracking.enabled" = true;
|
|
|
|
# Cookies
|
|
"network.cookie.cookieBehavior" = 1; # block third-party cookies
|
|
|
|
# Fingerprinting Protection
|
|
"privacy.resistFingerprinting" = true;
|
|
"privacy.resistFingerprinting.block_mozAddonManager" = true;
|
|
|
|
# WebRTC IP Leak verhindern
|
|
"media.peerconnection.enabled" = false;
|
|
|
|
# Telemetrie vollständig deaktivieren
|
|
"toolkit.telemetry.enabled" = false;
|
|
"toolkit.telemetry.unified" = false;
|
|
"toolkit.telemetry.archive.enabled" = false;
|
|
"datareporting.healthreport.uploadEnabled" = false;
|
|
"app.shield.optoutstudies.enabled" = false;
|
|
|
|
# SafeBrowsing (lokal behalten, aber keine unnötige Kommunikation)
|
|
"browser.safebrowsing.downloads.remote.enabled" = false;
|
|
|
|
# HTTPS-Only Mode
|
|
"dom.security.https_only_mode" = true;
|
|
|
|
# DNS over HTTPS Fallback deaktivieren
|
|
"network.trr.mode" = 3;
|
|
"network.trr.uri" = "https://dns.quad9.net/dns-query";
|
|
|
|
# Referrer reduzieren
|
|
"network.http.referer.XOriginPolicy" = 2;
|
|
|
|
# Clipboard API nur bei User Interaction
|
|
"dom.events.asyncClipboard.readText" = false;
|
|
|
|
# WebGL einschränken
|
|
"webgl.disabled" = true;
|
|
};
|
|
SearchEngines = {
|
|
Default = "Ecosia";
|
|
|
|
Add = [
|
|
{
|
|
Name = "Ecosia";
|
|
URLTemplate = "https://www.ecosia.org/search?q={searchTerms}";
|
|
Method = "GET";
|
|
}
|
|
];
|
|
|
|
Remove = [ "Google" "Bing" "Amazon.com" "eBay" ];
|
|
};
|
|
|
|
};
|
|
};
|
|
}
|