From 5014c0ed2160393fb787b585127bce8f27fda722 Mon Sep 17 00:00:00 2001
From: tilpner
Date: Fri, 6 Mar 2020 16:05:01 +0100
Subject: Separate policy into smaller modules

---
 profiles/restrict.nix | 26 ++++++++++++++++++++++++++
 1 file changed, 26 insertions(+)
 create mode 100644 profiles/restrict.nix

(limited to 'profiles/restrict.nix')

diff --git a/profiles/restrict.nix b/profiles/restrict.nix
new file mode 100644
index 0000000..d751022
--- /dev/null
+++ b/profiles/restrict.nix
@@ -0,0 +1,26 @@
+{ ffLib }: {
+  policies = {
+    DisableProfileImport = true;
+    DisableProfileRefresh = true;
+
+    DisableMasterPasswordCreation = true;
+    DisableFeedbackCommands = true;
+    DisableFirefoxAccounts = true;
+    DisableFormHistory = true;   
+    DisablePasswordReveal = true;
+
+    DontCheckDefaultBrowser = true;
+
+    DisableSecurityBypass = {
+      InvalidCertificate = true;
+      SafeBrowsing = false;
+    };
+
+    ExtensionSettings."*" = {
+      blocked_install_message = "Installation von Erweiterungen ist nicht zugelassen.";
+      install_sources = ["https://addons.mozilla.org/"];
+      installation_mode = "blocked";
+      allowed_types = ["extension"];
+    };
+  };
+}
-- 
cgit v1.2.3