nix-da/modules/programs/firefox.nix
2025-03-20 19:08:34 +01:00

148 lines
5.2 KiB
Nix

# References:
# https://discourse.nixos.org/t/declare-firefox-extensions-and-settings/36265
# https://github.com/gvolpe/nix-config/blob/6feb7e4f47e74a8e3befd2efb423d9232f522ccd/home/programs/browsers/firefox.nix
# https://brainfucksec.github.io/firefox-hardening-guide
{
pkgs,
lib,
config,
...
}:
lib.mkIf config.programs.firefox.enable {
programs.firefox = {
package = pkgs.firefox-beta;
languagePacks = [
"de"
"en-GB"
"fr"
];
preferencesStatus = "locked";
preferences = {
"browser.bookmarks.restore_default_bookmarks" = false;
"browser.toolbars.bookmarks.visibility" = "never";
"browser.urlbar.quicksuggest.enabled" = false;
"browser.urlbar.sponsoredTopSites" = false;
"browser.urlbar.suggest.recentsearches" = false;
"browser.urlbar.suggest.addons" = false;
"browser.urlbar.suggest.trending" = false;
"browser.urlbar.suggest.weather" = false;
"browser.urlbar.suggest.yelp" = false;
"browser.urlbar.suggest.bookmark" = true;
"browser.urlbar.suggest.engines" = false;
"browser.urlbar.suggest.history" = true;
"browser.urlbar.suggest.topsites" = false;
"browser.urlbar.suggest.calculator" = true;
"browser.urlbar.trimHttps" = false;
"browser.sessionstore.restore_tabs_lazily" = true;
"browser.uitour.enabled" = false;
"browser.dataFeatureRecommendations.enabled" = false;
"browser.translations.automaticallyPopup" = false;
"browser.translations.enable" = true;
"browser.preferences.moreFromMozilla" = false;
"browser.newtabpage.activity-stream.showSearch" = false;
"browser.newtabpage.activity-stream.feeds.topsites" = false;
"browser.newtabpage.activity-stream.feeds.section.highlights" = false;
"browser.tabs.groups.enabled" = true;
# Add-ons
"extensions.pocket.enabled" = false;
"extensions.postDownloadThirdPartyPrompt" = false; # Prompt for install before download
"extensions.htmlaboutaddons.recommendations.enabled" = false;
"extensions.getAddons.showPane" = false; # Hides the recommendations tab at about:addons
"dom.security.https_only_mode" = true;
"browser.shell.checkDefaultBrowser" = false;
#"privacy.clearOnShutdown.offlineApps" = true;
"layout.spellcheckDefault" = 1;
"browser.startup.page" = 3; # Restore session
"browser.search.suggest.enabled" = false;
"browser.discovery.enabled" = false;
"browser.ping-centre.telemetry" = false;
# Disable Studies
"app.shield.optoutstudies.enabled" = false;
"app.normandy.enabled" = false;
"app.normandy.api_url" = "";
# Headers
"network.http.referer.XOriginPolicy" = 2; # If host matches
"network.http.referer.XOriginTrimmingPolicy" = 2; # only send scheme+host+port
# Downloads
"browser.download.manager.addToRecentDocs" = false; # don't add downloaded files to "recent"
"browser.download.useDownloadDir" = false; # always ask where to download
# Fingerprinting
"privacy.resistFingerprinting.block_mozAddonManager" = true;
# Allow styling through userChrome.css
"toolkit.legacyUserProfileCustomizations.stylesheets" = true;
"sidebar.verticalTabs" = true;
};
policies = {
PasswordManagerEnabled = false;
AutofillCreditCardEnabled = false;
AutofillAddressEnabled = false;
# Check about:support for extension/add-on ID strings.
ExtensionSettings =
let
extension = shortId: uuid: {
name = uuid;
value = {
install_url = "https://addons.mozilla.org/en-US/firefox/downloads/latest/${shortId}/latest.xpi";
installation_mode = "force_installed";
};
};
in
builtins.listToAttrs [
(extension "ublock-origin" "uBlock0@raymondhill.net")
(extension "firefox-translations" "firefox-translations-addon@mozilla.org")
(extension "decentraleyes" "jid1-BoFifL9Vbdl2zQ@jetpack")
(extension "keepassxc-browser" "keepassxc-browser@keepassxc.org")
(extension "simplelogin" "addon@simplelogin")
];
FirefoxHome = {
Search = true;
TopSites = false;
SponsoredTopSites = false;
Highlights = false;
Pocket = false;
SponsoredPocket = false;
Snippets = false;
};
DisableFormHistory = true;
DisableTelemetry = true;
DisplayMenuBar = "default-off";
OfferToSaveLogins = false;
PopupBlocking = {
Default = true;
Locked = true;
};
StartDownloadsInTempDirectory = true;
SearchBar = "unified";
ShowHomeButton = false;
Permissions = {
Location = {
BlockNewRequests = true;
};
VirtualReality = {
BlockNewRequests = true;
};
Notifications = {
BlockNewRequests = true;
};
};
FirefoxSuggest = {
WebSuggestions = false;
SponsoredSuggestions = false;
ImproveSuggest = false;
Locked = true;
};
NoDefaultBookmarks = true;
EnableTrackingProtection = {
Value = true;
Locked = true;
Cryptomining = true;
Fingerprinting = true;
EmailTracking = true;
};
};
};
}