diff --git a/modules/roles/desktop/default.nix b/modules/roles/desktop/default.nix
index e15e1f2..682da87 100644
--- a/modules/roles/desktop/default.nix
+++ b/modules/roles/desktop/default.nix
@@ -21,11 +21,9 @@ in {
chromium
element-desktop # A feature-rich client for Matrix.org
evince # document viewer
- firefox # A web browser built from Firefox source tree
gnome-tweaks # A tool to customize advanced GNOME 3 options
krita # A free and open source painting application
libreoffice-fresh # Comprehensive, professional-quality productivity suite
- librewolf # Firefox fork, focused on privacy, security and freedom
mplayer # A movie player that supports many video formats
nextcloud-client # Nextcloud desktop client
pavucontrol # PulseAudio Volume Control
@@ -104,6 +102,56 @@ in {
enable = true;
homepageLocation = "https://start.duckduckgo.com/";
};
+ firefox = {
+ enable = true;
+ package = pkgs.librewolf;
+ policies = {
+ DisableTelemetry = true;
+ DisableFirefoxStudies = true;
+ Preferences = {
+ "cookiebanners.service.mode" = 2; # Block cookie banners
+ "cookiebanners.service.mode.privateBrowsing" = 2; # Block cookie banners in private browsing
+ "privacy.donottrackheader.enabled" = true;
+ "privacy.fingerprintingProtection" = true;
+ "privacy.resistFingerprinting" = true;
+ "privacy.trackingprotection.emailtracking.enabled" = true;
+ "privacy.trackingprotection.enabled" = true;
+ "privacy.trackingprotection.fingerprinting.enabled" = true;
+ "privacy.trackingprotection.socialtracking.enabled" = true;
+ "webgl.disabled" = false;
+ };
+ ExtensionSettings = {
+ "CanvasBlocker@kkapsner.de" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/canvasblocker/latest.xpi";
+ installation_mode = "force_installed";
+ }; # prevents fingerprinting when webgl is enabled
+ "CookieAutoDelete@kennydo.com" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/cookie-autodelete/latest.xpi";
+ installation_mode = "force_installed";
+ }; # cookie deletion
+ "floccus@handmadeideas.org" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/floccus/latest.xpi";
+ installation_mode = "force_installed";
+ }; # bookmark sync
+ "jid1-MnnxcxisBPnSXQ@jetpack" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/privacy-badger17/latest.xpi";
+ installation_mode = "force_installed";
+ }; # privacy
+ "jid1-ZAdIEUB7XOzOJw@jetpack" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/duckduckgo-for-firefox/latest.xpi";
+ installation_mode = "force_installed";
+ }; # private search
+ "uBlock0@raymondhill.net" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi";
+ installation_mode = "force_installed";
+ }; # add blocking
+ "{446900e4-71c2-419f-a6a7-df9c091e268b}" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi";
+ installation_mode = "force_installed";
+ }; # password management
+ };
+ };
+ };
};
# Groups to add
diff --git a/modules/roles/desktopCraige/default.nix b/modules/roles/desktopCraige/default.nix
index e4bb2b3..c2e9dc9 100644
--- a/modules/roles/desktopCraige/default.nix
+++ b/modules/roles/desktopCraige/default.nix
@@ -35,5 +35,11 @@ in {
vcsh # Version Control System for $HOME
yt-dlp # Command-line tool to download videos
];
+ programs.firefox.policies.ExtensionSettings = {
+ "{eceab40b-230a-4560-98ed-185ad010633f}" = {
+ install_url = "https://addons.mozilla.org/firefox/downloads/latest/nixos-packages-search-engine/latest.xpi";
+ installation_mode = "force_installed";
+ }; # package search
+ };
};
}