profiles/restrict.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

{ ffLib }: {
  meta.description = ''
    This module assumes the user means to misconfigure the browser, and tries to prevent that.
    It also attempts to keep the user from giving us any sensitive information in the first place.
    This does not primarily improve the users security or privacy.
  '';

  policies = {
    DisableProfileImport = true;
    DisableProfileRefresh = true;

    DisableMasterPasswordCreation = true;
    DisableFeedbackCommands = true;
    DisableFirefoxAccounts = true;
    DisableFormHistory = true;
    DisablePasswordReveal = true;

    DontCheckDefaultBrowser = true;

    DisableSecurityBypass = {
      InvalidCertificate = true;
      SafeBrowsing = false;
    };

    ExtensionSettings."*" = {
      blocked_install_message = "Installation von Erweiterungen ist nicht zugelassen.";
      install_sources = ["https://addons.mozilla.org/"];
      installation_mode = "blocked";
      allowed_types = ["extension"];
    };
  };
}