@ -13,7 +13,7 @@
} ;
in {
home-manager . sharedModules = [
./firefox- home.nix
./home.nix
] ;
programs = {
@ -59,25 +59,20 @@ in {
name = uuid ;
value = {
install_url = " h t t p s : / / a d d o n s . m o z i l l a . o r g / e n - U S / f i r e f o x / d o w n l o a d s / l a t e s t / ${ shortId } / l a t e s t . x p i " ;
installation_mode = " n o r m a l _ i n s t a l l e d " ;
installation_mode = " f o r c e _ i n s t a l l e d " ;
} ;
} ;
in
listToAttrs [
#(extension "{name in url}" "{about:support Add-ons on }")
( extension " u b l o c k - o r i g i n " " u B l o c k 0 @ r a y m o n d h i l l . n e t " )
( extension " b i t w a r d e n - p a s s w o r d - m a n a g e r " " { 4 4 6 9 0 0 e 4 - 7 1 c 2 - 4 1 9 f - a 6 a 7 - d f 9 c 0 9 1 e 2 6 8 b } " )
#(extension "2fas-two-factor-authentication" "admin@2fas.com")
( extension " s p o n s o r b l o c k " " s p o n s o r B l o c k e r @ a j a y . a p p " )
#(extension "dearrow" "deArrow@ajay.app")
#(extension "enhancer-for-youtube" "enhancerforyoutube@maximerf.addons.mozilla.org")
#(extension "tabliss" "extension@tabliss.io")
#(extension "don-t-fuck-with-paste" "DontFuckWithPaste@raim.ist")
#(extension "clearurls" "{74145f27-f039-47ce-a470-a662b129930a}")
#(extension "react-devtools" "@react-devtools")
( extension " k e e p a " " a m p t r a @ k e e p a . c o m " )
( extension " r e d d i t U n t r a n s l a t e " " r e d d i t - u r l - r e d i r e c t o r @ k i c h k o u p i . c o m " )
( extension " d a r k r e a d e r " " a d d o n @ d a r k r e a d e r . o r g " )
( extension " y o u t u b e - s h o r t s - b l o c k " " { 3 4 d a e b 5 0 - c 2 d 2 - 4 f 1 4 - 8 8 6 a - 7 1 6 0 b 2 4 d 6 6 a 4 } " )
( extension " c l e a r u r l s " " { 7 4 1 4 5 f 2 7 - f 0 3 9 - 4 7 c e - a 4 7 0 - a 6 6 2 b 1 2 9 9 3 0 a } " )
] ;
/*
@ -86,26 +81,89 @@ in {
# Check about:config for options.
Preferences = {
" b r o w s e r . c o n t e n t b l o c k i n g . c a t e g o r y " = {
Value = " s t r i c t " ;
Value = " s t r i c t " ; # strictest tracker/ad blocking mode
Status = " l o c k e d " ;
} ;
" e x t e n s i o n s . p o c k e t . e n a b l e d " = lock-false ;
" e x t e n s i o n s . s c r e e n s h o t s . d i s a b l e d " = lock-true ;
" b r o w s e r . t o p s i t e s . c o n t i l e . e n a b l e d " = lock-false ;
#"browser.formfill.enable" = lock-false;
#"browser.search.suggest.enabled" = lock-false;
#"browser.search.suggest.enabled.private" = lock-false;
#"browser.urlbar.suggest.searches" = lock-false;
" b r o w s e r . u r l b a r . s h o w S e a r c h S u g g e s t i o n s F i r s t " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . f e e d s . s e c t i o n . t o p s t o r i e s " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . f e e d s . s n i p p e t s " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e P o c k e t " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e B o o k m a r k s " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e D o w n l o a d s " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e V i s i t e d " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s h o w S p o n s o r e d " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s y s t e m . s h o w S p o n s o r e d " = lock-false ;
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s h o w S p o n s o r e d T o p S i t e s " = lock-false ;
" e x t e n s i o n s . p o c k e t . e n a b l e d " = lock-false ; # disables Pocket integration
" e x t e n s i o n s . s c r e e n s h o t s . d i s a b l e d " = lock-true ; # disables Firefox Screenshots
" b r o w s e r . t o p s i t e s . c o n t i l e . e n a b l e d " = lock-false ; # disables sponsored tiles on newtab
" b r o w s e r . f o r m f i l l . e n a b l e " = lock-false ; # disables form autofill (prevents local data leakage)
" b r o w s e r . s e a r c h . s u g g e s t . e n a b l e d " = lock-false ; # disables search suggestions in normal mode
" b r o w s e r . s e a r c h . s u g g e s t . e n a b l e d . p r i v a t e " = lock-false ; # disables search suggestions in private mode
" b r o w s e r . u r l b a r . s u g g e s t . s e a r c h e s " = lock-false ; # disables search suggestions in address bar dropdown
" b r o w s e r . u r l b a r . s h o w S e a r c h S u g g e s t i o n s F i r s t " = lock-false ; # hides search suggestions in address bar
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . f e e d s . s e c t i o n . t o p s t o r i e s " = lock-false ; # disables sponsored stories on newtab
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . f e e d s . s n i p p e t s " = lock-false ; # disables news snippets on newtab
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e P o c k e t " = lock-false ; # removes Pocket from highlights
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e B o o k m a r k s " = lock-false ; # removes bookmarks from highlights
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e D o w n l o a d s " = lock-false ; # removes downloads from highlights
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s e c t i o n . h i g h l i g h t s . i n c l u d e V i s i t e d " = lock-false ; # removes visited sites from highlights
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s h o w S p o n s o r e d " = lock-false ; # disables all sponsored content
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s y s t e m . s h o w S p o n s o r e d " = lock-false ; # disables system-level sponsored content
" b r o w s e r . n e w t a b p a g e . a c t i v i t y - s t r e a m . s h o w S p o n s o r e d T o p S i t e s " = lock-false ; # disables sponsored top sites
" p r i v a c y . r e s i s t F i n g e r p r i n t i n g " = lock-true ; # spoofs/normalizes fingerprinting signals (screen, timezone, fonts)
" p r i v a c y . f i r s t p a r t y . i s o l a t e " = lock-true ; # isolates cookies/storage per top-level domain (breaks cross-site tracking)
" n e t w o r k . d n s . d i s a b l e P r e f e t c h " = lock-true ; # stops speculative DNS lookups for unclicked links
" n e t w o r k . p r e d i c t o r . e n a b l e d " = lock-false ; # disables ML-based prefetch predictions
" n e t w o r k . p r e f e t c h - n e x t " = lock-false ; # disables link-hover prefetching
" t o o l k i t . t e l e m e t r y . e n a b l e d " = lock-false ; # disables core telemetry reporting
" t o o l k i t . t e l e m e t r y . u n i f i e d " = lock-false ; # disables unified telemetry pipeline
" d a t a r e p o r t i n g . h e a l t h r e p o r t . u p l o a d E n a b l e d " = lock-false ; # disables Firefox Health Report uploads
" d o m . b a t t e r y . e n a b l e d " = lock-false ; # blocks Battery Status API fingerprinting
" d o m . g a m e p a d . e n a b l e d " = lock-false ; # blocks Gamepad API fingerprinting
" b r o w s e r . s t a r t u p . h o m e p a g e " = {
Value = " a b o u t : b l a n k " ;
Status = " l o c k e d " ;
} ;
" b r o w s e r . s t a r t u p . p a g e " = {
Value = 0 ;
Status = " l o c k e d " ;
} ; # 0=blank, 3=homepage
" b r o w s e r . s t a r t u p . h o m e p a g e _ o v e r r i d e . m s t o n e " = {
Value = " i g n o r e " ;
Status = " l o c k e d " ;
} ;
# HTTPS‑ ‑
" d o m . s e c u r i t y . h t t p s _ o n l y _ m o d e " = {
Value = true ;
Status = " l o c k e d " ;
} ;
" d o m . s e c u r i t y . h t t p s _ o n l y _ m o d e _ e v e r _ e n a b l e d " = {
Value = true ;
Status = " l o c k e d " ;
} ;
# Referrer / headers tightening
" n e t w o r k . h t t p . r e f e r e r . X O r i g i n P o l i c y " = {
Value = 2 ;
Status = " l o c k e d " ;
} ; # strict cross‑
" n e t w o r k . h t t p . r e f e r e r . X O r i g i n T r i m m i n g P o l i c y " = {
Value = 2 ;
Status = " l o c k e d " ;
} ;
# DNS‑ ‑
" n e t w o r k . t r r . m o d e " = {
Value = 2 ;
Status = " l o c k e d " ;
} ; # 2=prefer TRR
" n e t w o r k . t r r . c u s t o m _ u r i " = {
Value = " h t t p s : / / d n s . q u a d 9 . n e t / d n s - q u e r y " ;
Status = " l o c k e d " ;
} ;
# Disable various Web APIs that can leak or be abused
" d o m . w e b n o t i f i c a t i o n s . e n a b l e d " = lock-false ; # disable desktop notifications
" m e d i a . n a v i g a t o r . e n a b l e d " = lock-false ; # disable getUserMedia permission prompts
" m e d i a . w e b r t c . l e g a c y _ g l o b a l _ c a l l b a c k " = lock-false ;
# Disable geolocation / sensors
" g e o . e n a b l e d " = lock-false ;
" d e v i c e . s e n s o r s . e n a b l e d " = lock-false ;
} ;
} ;
} ;
