{ inputs, config, nixosConfig, lib, mylib, pkgs, ... }: with lib; with mylib.modules; let cfg = config.modules.firefox; in { options.modules.firefox = { enable = mkEnableOpt "Firefox"; wayland = mkBoolOpt false "Enable firefox wayland support"; vaapi = mkBoolOpt false "Enable firefox vaapi support"; disableTabBar = mkBoolOpt false "Disable the firefox tab bar (for TST)"; defaultBookmarks = mkBoolOpt false "Preset standard bookmarks and folders"; gnomeTheme = mkBoolOpt false "Use Firefox gnome theme (rafaelmardojai)"; }; config = mkIf cfg.enable { home.packages = with pkgs; builtins.concatLists [ # TODO: I don't think vaapi works yet (optionals cfg.vaapi [ libva libva-utils # nvidia-vaapi-driver # Nvidia is gone :) vulkan-tools ]) (optionals cfg.gnomeTheme [ firefox-gnome-theme ]) ]; home.sessionVariables = mkMerge [ { MOZ_USE_XINPUT2 = 1; } (optionalAttrs cfg.wayland { MOZ_ENABLE_WAYLAND = 1; EGL_PLATFORM = "wayland"; }) (optionalAttrs cfg.vaapi { LIBVA_DRIVER_NAME = "nvidia"; MOZ_DISABLE_RDD_SANDBOX = 1; }) ]; xdg.desktopEntries.firefox-private = { name = "Firefox (Incognito)"; genericName = "Private web browser"; icon = "firefox"; exec = "firefox --private-window %U"; terminal = false; categories = [ "Network" "WebBrowser" ]; }; programs.firefox = { enable = true; # firefox-unwrapped is the pure firefox browser, wrapFirefox adds configuration ontop package = pkgs.wrapFirefox pkgs.firefox-unwrapped { forceWayland = cfg.wayland; # About policies: https://github.com/mozilla/policy-templates#enterprisepoliciesenabled # NOTE: Some of these settings are duplicated in the about:config settings so they are # not strictly necessary extraPolicies = { # TODO: Make library function to allow easy bookmark creation and add my default bookmarks/folders Bookmarks = (optionalAttrs cfg.defaultBookmarks { }); CaptivePortal = false; DisableFirefoxAccounts = true; DisableFirefoxStudies = true; DisablePocket = true; DisableTelemetry = true; DisplayBookmarksToolbar = true; FirefoxHome = { Pocket = false; Snippets = false; }; HardwareAcceleration = true; NoDefaultBookmarks = true; OfferToSaveLogins = false; PictureInPicture = true; UserMessaging = { ExtensionRecommendations = false; SkipOnboarding = true; }; }; }; extensions = with pkgs.nur.repos.rycee.firefox-addons; [ augmented-steam betterttv bypass-paywalls-clean clearurls cookie-autodelete don-t-fuck-with-paste h264ify keepassxc-browser localcdn plasma-integration # TODO: Only when Plasma is used privacy-badger search-by-image single-file skip-redirect sponsorblock tab-session-manager to-deepl transparent-standalone-image tree-style-tab ublacklist ublock-origin # umatrix # Many pages need manual intervention unpaywall view-image vimium ]; profiles = { default = { id = 0; # 0 is default profile userChrome = concatStringsSep "\n" [ (optionalString cfg.gnomeTheme '' @import "${pkgs.firefox-gnome-theme}/share/firefox-gnome-theme/gnome-theme.css"; '') (optionalString cfg.disableTabBar '' #TabsToolbar { display: none; } '') ]; settings = mkMerge [ (optionalAttrs cfg.vaapi { # Firefox wayland hardware video acceleration # https://github.com/elFarto/nvidia-vaapi-driver/#firefox= "gfx.canvas.accelerated" = true; "gfx.webrender.enabled" = true; # Should be set on gnome anyway "gfx.x11-egl.force-enabled" = true; "layers.acceleration.force-enabled" = true; "media.av1.enabled" = false; "media.ffmpeg.vaapi.enabled" = true; "media.hardware-video-decoding.force-enabled" = true; "media.rdd-ffmpeg.enabled" = true; "widget.dmabuf.force-enabled" = true; "widget.wayland-dmabuf-vaapi.enabled" = true; }) (let # Note: This has to be updated when something is changed inside firefox... customizationState = ''{"placements":{"widget-overflow-fixed-list":["jid1-mnnxcxisbpnsxq_jetpack-browser-action","_74145f27-f039-47ce-a470-a662b129930a_-browser-action","_b86e4813-687a-43e6-ab65-0bde4ab75758_-browser-action","cookieautodelete_kennydo_com-browser-action","skipredirect_sblask-browser-action","_ublacklist-browser-action","umatrix_raymondhill_net-browser-action","_2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c_-browser-action","_287dcf75-bec6-4eec-b4f6-71948a2eea29_-browser-action","_d133e097-46d9-4ecc-9903-fa6a722a6e0e_-browser-action","_f209234a-76f0-4735-9920-eb62507a54cd_-browser-action","dontfuckwithpaste_raim_ist-browser-action","sponsorblocker_ajay_app-browser-action","mogultv_mogultv_org-browser-action","jid1-tsgsxbhncspbwq_jetpack-browser-action"],"nav-bar":["back-button","forward-button","downloads-button","urlbar-container","save-to-pocket-button","fxa-toolbar-menu-button","treestyletab_piro_sakura_ne_jp-browser-action","ublock0_raymondhill_net-browser-action","_531906d3-e22f-4a6c-a102-8057b88a1a63_-browser-action","tab-session-manager_sienori-browser-action","_d7742d87-e61d-4b78-b8a1-b469842139fa_-browser-action","keepassxc-browser_keepassxc_org-browser-action"],"toolbar-menubar":["menubar-items"],"TabsToolbar":["tabbrowser-tabs","new-tab-button","alltabs-button"],"PersonalToolbar":["personal-bookmarks"]},"seen":["developer-button","ublock0_raymondhill_net-browser-action","_287dcf75-bec6-4eec-b4f6-71948a2eea29_-browser-action","_2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c_-browser-action","_531906d3-e22f-4a6c-a102-8057b88a1a63_-browser-action","_74145f27-f039-47ce-a470-a662b129930a_-browser-action","_b86e4813-687a-43e6-ab65-0bde4ab75758_-browser-action","_d133e097-46d9-4ecc-9903-fa6a722a6e0e_-browser-action","_d7742d87-e61d-4b78-b8a1-b469842139fa_-browser-action","_f209234a-76f0-4735-9920-eb62507a54cd_-browser-action","_ublacklist-browser-action","cookieautodelete_kennydo_com-browser-action","dontfuckwithpaste_raim_ist-browser-action","jid1-mnnxcxisbpnsxq_jetpack-browser-action","keepassxc-browser_keepassxc_org-browser-action","skipredirect_sblask-browser-action","sponsorblocker_ajay_app-browser-action","tab-session-manager_sienori-browser-action","treestyletab_piro_sakura_ne_jp-browser-action","umatrix_raymondhill_net-browser-action","mogultv_mogultv_org-browser-action","jid1-tsgsxbhncspbwq_jetpack-browser-action"],"dirtyAreaCache":["nav-bar","PersonalToolbar","toolbar-menubar","TabsToolbar","widget-overflow-fixed-list"],"currentVersion":17,"newElementCount":5}''; in { "accessibility.force_disabled" = 1; "app.normandy.enabled" = false; # https://mozilla.github.io/normandy/ "app.normandy.api_url" = ""; "app.update.auto" = false; "app.shield.optoutstudies.enabled" = false; "beacon.enabled" = false; # https://developer.mozilla.org/en-US/docs/Web/API/navigator.sendBeacon "breakpad.reportURL" = ""; "browser.aboutConfig.showWarning" = false; # Warning when opening about:config "browser.contentblocking.category" = "standard"; "browser.crashReports.unsubmittedCheck.autoSubmit2" = false; # don't submit backlogged reports "browser.disableResetPrompt" = true; # "Looks like you haven't started Firefox in a while." "browser.discovery.enabled" = false; "browser.fixup.alternate.enabled" = false; # http://www-archive.mozilla.org/docs/end-user/domain-guessing.html "browser.formfill.enable" = false; "browser.newtabpage.enabled" = false; "browser.newtab.url" = "about:blank"; "browser.newtab.preload" = false; "browser.newtabpage.activity-stream.asrouter.userprefs.cfr" = false; "browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons" = false; "browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features" = false; "browser.newtabpage.activity-stream.enabled" = false; # https://wiki.mozilla.org/Firefox/Activity_Stream "browser.newtabpage.activity-stream.telemetry" = false; "browser.newtabpage.directory.ping" = ""; "browser.newtabpage.directory.source" = "data:text/plain,{}"; "browser.newtabpage.enhanced" = false; "browser.newtabpage.introShown" = true; "browser.onboarding.enabled" = false; # "New to Firefox? Let's get started!" tour "browser.ping-centre.telemetry" = false; "browser.send_pings" = false; # http://kb.mozillazine.org/Browser.send_pings "browser.sessionstore.interval" = "1800000"; # Reduce File IO / SSD abuse by increasing write interval "browser.shell.checkDefaultBrowser" = false; "browser.tabs.crashReporting.sendReport" = false; "browser.toolbars.bookmarks.visibility" = "always"; "browser.uiCustomization.state" = customizationState; "browser.urlbar.dnsResolveSingleWordsAfterSearch" = 0; # https://bugzilla.mozilla.org/1642623 "browser.urlbar.shortcuts.bookmarks" = false; # This is only the button to search in bookmarks, bookmark search works anyway if enabled "browser.urlbar.shortcuts.history" = false; "browser.urlbar.shortcuts.tabs" = false; "browser.urlbar.showSearchSuggestionsFirst" = false; "browser.urlbar.speculativeConnect.enabled" = false; "browser.urlbar.suggest.calculator" = true; "browser.urlbar.suggest.engines" = false; "browser.urlbar.suggest.openpage" = false; "browser.urlbar.suggest.searches" = true; "browser.urlbar.suggest.quicksuggest.nonsponsored" = false; "browser.urlbar.suggest.quicksuggest.sponsored" = false; "browser.urlbar.unitConversion.enabled" = true; "browser.urlbar.trimURLs" = false; "datareporting.healthreport.uploadEnabled" = false; "datareporting.healthreport.service.enabled" = false; "datareporting.policy.dataSubmissionEnabled" = false; "dom.battery.enabled" = false; "dom.forms.autocomplete.formautofill" = false; "dom.gamepad.enabled" = false; # Disable gamepad API to prevent USB device enumeration "dom.security.https_only_mode" = true; "experiments.enabled" = false; "experiments.manifest.uri" = ""; "experiments.supported" = false; "extensions.formautofill.addresses.enabled" = false; "extensions.formautofill.available" = "off"; "extensions.formautofill.creditCards.available" = false; "extensions.formautofill.creditCards.enabled" = false; "extensions.formautofill.heuristics.enabled" = false; "extensions.getAddons.showPane" = false; # uses Google Analytics "extensions.htmlaboutaddons.discover.enabled" = false; "extensions.htmlaboutaddons.recommendations.enabled" = false; "extensions.pocket.enabled" = false; "extensions.shield-recipe-client.enabled" = false; "general.autoScroll" = false; "general.smoothScroll" = true; "geo.provider.network.url" = "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%"; "geo.provider.use_gpsd" = false; "identity.fxaccounts.account.device.name" = nixosConfig.networking.hostName; "media.hardwaremediakeys.enabled" = false; # Do not interfere with spotify "media.videocontrols.picture-in-picture.video-toggle.enabled" = true; "narrate.enabled" = false; "privacy.donottrackheader.enabled" = true; "privacy.donottrackheader.value" = 1; "privacy.purge_trackers.enabled" = true; "privacy.webrtc.legacyGlobalIndicator" = false; "privacy.webrtc.hideGlobalIndicator" = true; "reader.parse-on-load.enabled" = false; # "reader view" "security.family_safety.mode" = 0; "security.pki.sha1_enforcement_level" = 1; # https://blog.mozilla.org/security/2016/10/18/phasing-out-sha-1-on-the-public-web/ "security.tls.enable_0rtt_data" = false; # https://github.com/tlswg/tls13-spec/issues/1001 "signon.autofillForms" = false; "signon.generateion.enabled" = false; "signon.rememberSignons" = false; "toolkit.coverage.opt-out" = true; "toolkit.coverage.endpoint.base" = ""; "toolkit.legacyUserProfileCustomizations.stylesheets" = cfg.gnomeTheme || cfg.disableTabBar; "toolkit.telemetry.unified" = false; "toolkit.telemetry.enabled" = false; "toolkit.telemetry.server" = "data:,"; "toolkit.telemetry.archive.enabled" = false; "toolkit.telemetry.coverage.opt-out" = true; "widget.use-xdg-desktop-portal" = true; }) ]; }; }; }; }; }