Add configuration for Librewolf and Zen browser with privacy-focused policies

- Created Librewolf configuration in `home/programs/librewolf/system.nix` with telemetry disabled, enhanced security settings, and enforced extensions. - Added Zen browser configuration in `home/programs/zen/default.nix` and `home/programs/zen/system.nix`, including similar privacy policies and default search engine settings. - Introduced `hosts/home-pc/configuration.nix` for system-wide settings, including USBGuard rules and firewall configurations. - Established `hosts/home-pc/flake.nix` to manage NixOS modules and configurations. - Generated `hosts/home-pc/hardware-configuration.nix` for hardware-specific settings. - Created `hosts/home-pc/home.nix` to import various user-specific applications and settings. - Added profile picture in `hosts/home-pc/profile_picture.jpg`. - Implemented secrets management in `hosts/home-pc/secrets/default.nix` and `hosts/home-pc/secrets/secrets.yaml` using SOPS for encryption. - Defined user-specific variables in `hosts/home-pc/variables.nix`, including hostname, username, and locale settings. - Added profile picture for laptop in `hosts/laptop/profile_picture.jpg`.
2026-06-22 23:11:52 +02:00
parent a45e7a2c9b
commit 7ea20554a6
24 changed files with 2305 additions and 8 deletions
@@ -0,0 +1,75 @@
+{ ... }: {
+
+  programs.librewolf = {
+    enable = true;
+
+    policies = {
+      # -----------------------
+      # Privacy / telemetry
+      # -----------------------
+      DisableTelemetry = true;
+      DisableFirefoxStudies = true;
+      DisablePocket = true;
+
+      # -----------------------
+      # Accounts / sync
+      # -----------------------
+      OfferToSaveLogins = false;
+      PasswordManagerEnabled = false;
+      SyncDisabled = true;
+
+      # -----------------------
+      # Security baseline
+      # -----------------------
+      DefaultCookiesSetting = 1;
+      DefaultGeolocationSetting = 2;
+      DefaultNotificationsSetting = 2;
+      DefaultPopupsSetting = 2;
+
+      # -----------------------
+      # DNS over HTTPS
+      # -----------------------
+      DNSOverHTTPS = {
+        Enabled = true;
+        ProviderURL = "https://dns.quad9.net/dns-query";
+        Locked = true;
+      };
+
+      # -----------------------
+      # Search engine
+      # -----------------------
+      SearchEngines = {
+        Default = "Startpage";
+        PreventInstalls = true;
+      };
+
+      # -----------------------
+      # UI restrictions
+      # -----------------------
+      Homepage = {
+        URL = "https://duckduckgo.com";
+        StartPage = "homepage";
+      };
+
+      ShowHomeButton = false;
+      BookmarkBar = false;
+
+      # -----------------------
+      # Extensions (optional enforcement)
+      # -----------------------
+      ExtensionSettings = {
+        "uBlock0@raymondhill.net" = {
+          installation_mode = "force_installed";
+        };
+
+        "multi-account-containers@mozilla.org" = {
+          installation_mode = "force_installed";
+        };
+
+        "{73a6fe31-595d-460b-a920-fcc0f8843232}" = {
+          installation_mode = "force_installed"; # NoScript
+        };
+      };
+    };
+  };
+}