aboutsummaryrefslogtreecommitdiffstats
path: root/hm/soispha
diff options
context:
space:
mode:
authorSoispha <soispha@vhack.eu>2023-11-25 18:02:07 +0100
committerSoispha <soispha@vhack.eu>2023-11-25 18:02:07 +0100
commit000027f6717215350e487198cabb8014a4424704 (patch)
treee40afe95ba8add871861608f4364204d96acd392 /hm/soispha
parentfix(hm/conf/firefox/package): Readd policies to firefox (diff)
downloadnixos-config-000027f6717215350e487198cabb8014a4424704.zip
fix(hm/conf/firefox/policies): Use correct attr name
Diffstat (limited to 'hm/soispha')
-rw-r--r--hm/soispha/conf/firefox/config/policies/default.nix131
1 files changed, 66 insertions, 65 deletions
diff --git a/hm/soispha/conf/firefox/config/policies/default.nix b/hm/soispha/conf/firefox/config/policies/default.nix
index 55fd3cff..02c740f6 100644
--- a/hm/soispha/conf/firefox/config/policies/default.nix
+++ b/hm/soispha/conf/firefox/config/policies/default.nix
@@ -58,88 +58,89 @@
locals);
in {
# NOTE: See https://mozilla.github.io/policy-templates for documentation <2023-10-21>
+ policies = {
+ # NixOS manages this already
+ DisableAppUpdate = true;
- # NixOS manages this already
- DisableAppUpdate = true;
+ DisableFirefoxAccounts = true;
+ DisableFirefoxScreenshots = true;
- DisableFirefoxAccounts = true;
- DisableFirefoxScreenshots = true;
+ # KeepassXC does this for me
+ DisableMasterPasswordCreation = true;
- # KeepassXC does this for me
- DisableMasterPasswordCreation = true;
+ # I use a self-hosted services for that
+ DisablePocket = true;
- # I use a self-hosted services for that
- DisablePocket = true;
+ # I don't want to lose my data
+ DisableProfileRefresh = true;
- # I don't want to lose my data
- DisableProfileRefresh = true;
+ DisableDeveloperTools = false;
- DisableDeveloperTools = false;
+ DisplayBookmarksToolbar = "newtab";
+ DisplayMenuBar = "default-off";
- DisplayBookmarksToolbar = "newtab";
- DisplayMenuBar = "default-off";
+ DNSOverHTTPS = {
+ Enabled = true;
+ Locked = false;
+ };
+ # The concept of a "default browser" does not apply to my NixOS config
+ DontCheckDefaultBrowser = true;
- DNSOverHTTPS = {
- Enabled = true;
- Locked = false;
- };
- # The concept of a "default browser" does not apply to my NixOS config
- DontCheckDefaultBrowser = true;
+ EnableTrackingProtection = {
+ Value = true;
+ Locked = false;
+ Cryptomining = true;
+ Fingerprinting = true;
+ EmailTracking = true;
+ };
- EnableTrackingProtection = {
- Value = true;
- Locked = false;
- Cryptomining = true;
- Fingerprinting = true;
- EmailTracking = true;
- };
+ EncryptedMediaExtensions = {
+ # I want a _free_ config (and I can always just run another browser)
+ Enabled = false;
+ Locked = true;
+ };
- EncryptedMediaExtensions = {
- # I want a _free_ config (and I can always just run another browser)
- Enabled = false;
- Locked = true;
- };
+ ExtensionSettings =
+ {
+ "*" = {
+ # Blocking the extension install here, also blocks the 'about:debugging' page
- ExtensionSettings =
- {
- "*" = {
- # Blocking the extension install here, also blocks the 'about:debugging' page
+ # blocked_install_message = ''
+ # You can't install a extension manually,
+ # please specify it in your NixOS configuration
+ # '';
+ installation_mode = "allowed";
+ };
+ }
+ // allowedExtensions
+ // blockedExtensions
+ // language_packs;
- # blocked_install_message = ''
- # You can't install a extension manually,
- # please specify it in your NixOS configuration
- # '';
- installation_mode = "allowed";
- };
- }
- // allowedExtensions
- // blockedExtensions
- // language_packs;
+ ExtensionUpdate = false;
- ExtensionUpdate = false;
+ # TODO: Add handlers for the default file types <2023-10-21>
+ # Handlers = {
+ # };
- # TODO: Add handlers for the default file types <2023-10-21>
- # Handlers = {
- # };
+ HardwareAcceleration = true;
- HardwareAcceleration = true;
+ # Blocking the extension install here, also blocks the 'about:debugging' page
+ # InstallAddonsPermission = {
+ # Allowed = [];
+ # Default = false;
+ # };
- # Blocking the extension install here, also blocks the 'about:debugging' page
- # InstallAddonsPermission = {
- # Allowed = [];
- # Default = false;
- # };
+ # KeepassXC and such things
+ OfferToSaveLogins = false;
+ PasswordManagerEnabled = false;
- # KeepassXC and such things
- OfferToSaveLogins = false;
- PasswordManagerEnabled = false;
+ PDFjs = {
+ Enabled = true;
+ # Don't honor documents right to be un-copy-able
+ EnablePermissions = false;
+ };
- PDFjs = {
- Enabled = true;
- # Don't honor documents right to be un-copy-able
- EnablePermissions = false;
+ SearchBar = "unified";
+ RequestedLocales = locals;
};
-
- SearchBar = "unified";
- RequestedLocales = locals;
}