forked from KptltD00M/nixy
Add configuration for Librewolf and Zen browser with privacy-focused policies
- Created Librewolf configuration in `home/programs/librewolf/system.nix` with telemetry disabled, enhanced security settings, and enforced extensions. - Added Zen browser configuration in `home/programs/zen/default.nix` and `home/programs/zen/system.nix`, including similar privacy policies and default search engine settings. - Introduced `hosts/home-pc/configuration.nix` for system-wide settings, including USBGuard rules and firewall configurations. - Established `hosts/home-pc/flake.nix` to manage NixOS modules and configurations. - Generated `hosts/home-pc/hardware-configuration.nix` for hardware-specific settings. - Created `hosts/home-pc/home.nix` to import various user-specific applications and settings. - Added profile picture in `hosts/home-pc/profile_picture.jpg`. - Implemented secrets management in `hosts/home-pc/secrets/default.nix` and `hosts/home-pc/secrets/secrets.yaml` using SOPS for encryption. - Defined user-specific variables in `hosts/home-pc/variables.nix`, including hostname, username, and locale settings. - Added profile picture for laptop in `hosts/laptop/profile_picture.jpg`.
This commit is contained in:
@@ -4,7 +4,7 @@
|
||||
}:
|
||||
(with pkgs; [
|
||||
go
|
||||
claude-code
|
||||
#claude-code
|
||||
])
|
||||
++ (with pkgs-stable; [
|
||||
nodejs
|
||||
|
||||
@@ -0,0 +1,51 @@
|
||||
{ config, pkgs, lib, ... }:
|
||||
|
||||
let
|
||||
librewolfPkg = pkgs.librewolf;
|
||||
|
||||
in {
|
||||
programs.librewolf = {
|
||||
enable = true;
|
||||
package = librewolfPkg;
|
||||
|
||||
profiles.default = {
|
||||
isDefault = true;
|
||||
|
||||
settings = {
|
||||
# UI / behavior
|
||||
"browser.startup.homepage" = "https://duckduckgo.com";
|
||||
"browser.newtabpage.enabled" = false;
|
||||
|
||||
# Privacy baseline (LibreWolf already hardens most of this)
|
||||
"privacy.resistFingerprinting" = true;
|
||||
"privacy.trackingprotection.enabled" = true;
|
||||
|
||||
# Disable telemetry completely
|
||||
"toolkit.telemetry.enabled" = false;
|
||||
"toolkit.telemetry.unified" = false;
|
||||
|
||||
# Network / DNS (optional redundancy with policies)
|
||||
"network.trr.mode" = 3;
|
||||
"network.trr.uri" = "https://dns.quad9.net/dns-query";
|
||||
|
||||
# UI behavior
|
||||
"browser.tabs.warnOnClose" = false;
|
||||
"browser.quitShortcut.disabled" = true;
|
||||
|
||||
# Security tightening
|
||||
"dom.event.clipboardevents.enabled" = false;
|
||||
"geo.enabled" = false;
|
||||
"media.autoplay.default" = 5;
|
||||
};
|
||||
|
||||
extensions.packages = with pkgs.nur.repos.rycee.firefox-addons; [
|
||||
ublock-origin
|
||||
firefox-multi-account-containers
|
||||
noscript
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
# Make LibreWolf default browser
|
||||
home.sessionVariables.BROWSER = "${librewolfPkg}/bin/librewolf";
|
||||
}
|
||||
@@ -0,0 +1,75 @@
|
||||
{ ... }: {
|
||||
|
||||
programs.librewolf = {
|
||||
enable = true;
|
||||
|
||||
policies = {
|
||||
# -----------------------
|
||||
# Privacy / telemetry
|
||||
# -----------------------
|
||||
DisableTelemetry = true;
|
||||
DisableFirefoxStudies = true;
|
||||
DisablePocket = true;
|
||||
|
||||
# -----------------------
|
||||
# Accounts / sync
|
||||
# -----------------------
|
||||
OfferToSaveLogins = false;
|
||||
PasswordManagerEnabled = false;
|
||||
SyncDisabled = true;
|
||||
|
||||
# -----------------------
|
||||
# Security baseline
|
||||
# -----------------------
|
||||
DefaultCookiesSetting = 1;
|
||||
DefaultGeolocationSetting = 2;
|
||||
DefaultNotificationsSetting = 2;
|
||||
DefaultPopupsSetting = 2;
|
||||
|
||||
# -----------------------
|
||||
# DNS over HTTPS
|
||||
# -----------------------
|
||||
DNSOverHTTPS = {
|
||||
Enabled = true;
|
||||
ProviderURL = "https://dns.quad9.net/dns-query";
|
||||
Locked = true;
|
||||
};
|
||||
|
||||
# -----------------------
|
||||
# Search engine
|
||||
# -----------------------
|
||||
SearchEngines = {
|
||||
Default = "Startpage";
|
||||
PreventInstalls = true;
|
||||
};
|
||||
|
||||
# -----------------------
|
||||
# UI restrictions
|
||||
# -----------------------
|
||||
Homepage = {
|
||||
URL = "https://duckduckgo.com";
|
||||
StartPage = "homepage";
|
||||
};
|
||||
|
||||
ShowHomeButton = false;
|
||||
BookmarkBar = false;
|
||||
|
||||
# -----------------------
|
||||
# Extensions (optional enforcement)
|
||||
# -----------------------
|
||||
ExtensionSettings = {
|
||||
"uBlock0@raymondhill.net" = {
|
||||
installation_mode = "force_installed";
|
||||
};
|
||||
|
||||
"multi-account-containers@mozilla.org" = {
|
||||
installation_mode = "force_installed";
|
||||
};
|
||||
|
||||
"{73a6fe31-595d-460b-a920-fcc0f8843232}" = {
|
||||
installation_mode = "force_installed"; # NoScript
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
@@ -0,0 +1,62 @@
|
||||
{
|
||||
pkgs,
|
||||
lib,
|
||||
config,
|
||||
...
|
||||
}:
|
||||
{
|
||||
programs.zen-browser = {
|
||||
enable = true;
|
||||
|
||||
policies = {
|
||||
DisableTelemetry = true;
|
||||
DisableFirefoxStudies = true;
|
||||
DisablePocket = true;
|
||||
|
||||
OfferToSaveLogins = false;
|
||||
PasswordManagerEnabled = false;
|
||||
|
||||
AutofillAddressEnabled = false;
|
||||
AutofillCreditCardEnabled = false;
|
||||
|
||||
DontCheckDefaultBrowser = true;
|
||||
|
||||
DNSOverHTTPS = {
|
||||
Enabled = true;
|
||||
ProviderURL = "https://dns.quad9.net/dns-query";
|
||||
Locked = true;
|
||||
};
|
||||
};
|
||||
|
||||
profiles.default = {
|
||||
search = {
|
||||
force = true;
|
||||
default = "Startpage";
|
||||
};
|
||||
|
||||
settings = {
|
||||
"browser.startup.homepage" = "https://duckduckgo.com";
|
||||
|
||||
"browser.newtabpage.enabled" = false;
|
||||
|
||||
"privacy.resistFingerprinting" = true;
|
||||
"privacy.trackingprotection.enabled" = true;
|
||||
|
||||
"geo.enabled" = false;
|
||||
"dom.webnotifications.enabled" = false;
|
||||
|
||||
"signon.rememberSignons" = false;
|
||||
|
||||
"toolkit.telemetry.enabled" = false;
|
||||
};
|
||||
|
||||
extensions.packages = with pkgs.nur.repos.rycee.firefox-addons; [
|
||||
ublock-origin
|
||||
firefox-multi-account-containers
|
||||
noscript
|
||||
];
|
||||
};
|
||||
};
|
||||
|
||||
home.sessionVariables.BROWSER = "zen";
|
||||
}
|
||||
@@ -0,0 +1,24 @@
|
||||
{
|
||||
programs.zen-browser = {
|
||||
enable = true;
|
||||
|
||||
policies = {
|
||||
DisableTelemetry = true;
|
||||
DisableFirefoxStudies = true;
|
||||
|
||||
OfferToSaveLogins = false;
|
||||
PasswordManagerEnabled = false;
|
||||
|
||||
DNSOverHTTPS = {
|
||||
Enabled = true;
|
||||
ProviderURL = "https://dns.quad9.net/dns-query";
|
||||
Locked = true;
|
||||
};
|
||||
|
||||
Homepage = {
|
||||
URL = "https://duckduckgo.com";
|
||||
StartPage = "homepage";
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
Reference in New Issue
Block a user