update firefox policies

2 files changed, 32 insertions, 3 deletions

diff --git a/home/browsers/firefox/default.nix b/home/browsers/firefox/default.nix
index 608d4c5..2f7475e 100644
--- a/home/browsers/firefox/default.nix
+++ b/home/browsers/firefox/default.nix
@@ -21,7 +21,7 @@ in {
       package = my-firefox;
 
       # import configuration
-      policies = import ./policies.nix;
+      policies = import ./policies.nix {inherit config;};
 
       # create profile for me :3
       profiles.${config.user} = {
diff --git a/home/browsers/firefox/policies.nix b/home/browsers/firefox/policies.nix
index 243cd9a..b8e8623 100644
--- a/home/browsers/firefox/policies.nix
+++ b/home/browsers/firefox/policies.nix
@@ -1,4 +1,4 @@
-{
+{config, ...}: {
   # policies to be set in firefox
   # see: https://mozilla.github.io/policy-templates/
 
@@ -11,6 +11,9 @@
     Cryptomining = true;
     Fingerprinting = true;
     EmailTracking = true;
+    SuspectedFingerprinting = true;
+    BaselineExceptions = false;
+    ConvenienceExceptions = false;
   };
 
   # Certificates
@@ -50,7 +53,7 @@
     UrlbarInterventions = false;
     SkipOnboarding = true;
     MoreFromMozilla = false;
-    Labs = false;
+    FirefoxLabs = false;
     Locked = true;
   };
 
@@ -77,7 +80,9 @@
     SponsoredTopSites = false;
     Highlights = false;
     Pocket = false;
+    Stories = false;
     SponsoredPocket = false;
+    SponsoredStories = false;
     Snippets = false;
     Locked = true;
   };
@@ -91,6 +96,15 @@
     Locked = true;
   };
 
+  # Fuck AI
+  GenerativeAI = {
+    Enabled = false;
+    Chatbot = false;
+    LinkPreviews = false;
+    TabGroups = false;
+    Locked = true;
+  };
+
   # Save All on Shutdown
   SanitizeOnShutdown = false;
 
@@ -118,10 +132,25 @@
   DisplayBookmarksToolbar = "newtab";
   NoDefaultBookmarks = true;
 
+  # Search Engines
+  SearchEngines = {
+    Default = "DuckDuckGo";
+    Remove = [
+      "Google"
+      "Amazon.com"
+      "Bing"
+      "eBay"
+      "Wikipedia (en)"
+      "Perplexity"
+    ];
+  };
+
   # Miscellaneous
   HttpsOnlyMode = "force_enabled";
   HardwareAcceleration = true;
   DontCheckDefaultBrowser = true;
   PromptForDownloadLocation = false;
+  DefaultDownloadDirectory = "${config.homePath}/downloads";
   PrivateBrowsingModeAvailability = 0;
+  SkipTermsOfUse = true;
 }