split-up firefox configuration

Ensure we install the bin package, so that we can use the 1password
extension (we need a signed binary for that).

1 files changed, 31 insertions, 0 deletions

diff --git a/home/programs/firefox/policies.nix b/home/programs/firefox/policies.nix
new file mode 100644
index 0000000..4fba91b
--- /dev/null
+++ b/home/programs/firefox/policies.nix
@@ -0,0 +1,31 @@
+{
+  DisablePocket = true;
+  DisableFirefoxStudies = true;
+  AppAutoUpdate = false; # Disable automatic application update
+  ManualAppUpdateOnly = true; # No update prompts
+  DontCheckDefaultBrowser = true;
+
+  DisableTelemetry = true;
+  EnableTrackingProtection = {
+    Value = true;
+    Cryptomining = true;
+    Fingerprinting = true;
+    EmailTracking = true;
+  };
+  DisableSetDesktopBackground = true;
+  OfferToSaveLogins = false;
+  OfferToSaveLoginsDefault = false;
+
+  NoDefaultBookmarks = true;
+
+  PasswordManagerEnabled = false; # we use 1password
+
+  FirefoxHome = {
+    TopSites = false;
+    SponsoredTopSites = false;
+    Highlights = false;
+    Pocket = false;
+    SponsoredPocket = false;
+    Snippets = false;
+  };
+}