shell-things/etc/firefox/policies/policies.json

{
  "policies": {
    "3rdparty": {
      "Extensions": {
        "adnauseam@rednoise.org": {
          "toAdd": {
            "trustedSiteDirectives": [""]
          },
          "toOverwrite": {
            "filterLists": [
              "easylist",
              "adnauseam-filters",
              "eff-dnt-whitelist"
            ]
          }
        },
        "jid1-MnnxcxisBPnSXQ@jetpack": {
          "checkForDNTPolicy": true,
          "disabledSites": ["cloudflare.com", "ecosia.org", "keyoxide.org"],
          "learnInIncognito": true,
          "learnLocally": true,
          "sendDNTSignal": true,
          "showCounter": true,
          "showIntroPage": false,
          "socialWidgetReplacementEnabled": true
        },
        "jid1-ZAdIEUB7XOzOJw@jetpack": {
          "hasSeenPostInstall": true
        },
        "uBlock0@raymondhill.net": {
          "toAdd": {
            "trustedSiteDirectives": [
              "bittimittari.fi",
              "chrome-extension-scheme",
              "cloudflare.com",
              "disroot.org",
              "duckduckgo.com",
              "ecosia.org",
              "element.io",
              "google",
              "google.com",
              "keyoxide.org",
              "live.com",
              "matrix.org",
              "microsoft.com",
              "moz-extension-scheme",
              "one.one",
              "pikaviestin.fi"
            ]
          },
          "toOverwrite": {
            "filterLists": [
              "user-filters",
              "ublock-filters",
              "ublock-badware",
              "ublock-privacy",
              "ublock-abuse",
              "ublock-unbreak",
              "easylist",
              "easyprivacy",
              "urlhaus-1",
              "plowe-0",
              "https://www.eff.org/files/effdntlist.txt",
              "https://gitea.blesmrt.net/mikaela/gist/raw/branch/master/DNS/blocklist.txt",
              "ublock-quick-fixes",
              "FIN-0",
              "RUS-0",
              "BGR-0",
              "CZE-0",
              "EST-0",
              "SPA-0",
              "NOR-0",
              "SWE-1",
              "https://big.oisd.nl",
              "adguard-mobile-app-banners",
              "fanboy-cookiemonster",
              "ublock-cookies-easylist",
              "adguard-cookies",
              "ublock-cookies-adguard",
              "https://raw.githubusercontent.com/liamengland1/miscfilters/master/antipaywall.txt"
            ]
          }
        }
      }
    },
    "BlockAboutAddons": false,
    "BlockAboutConfig": false,
    "BlockAboutProfiles": false,
    "BlockAboutSupport": false,
    "Certificates": {
      "ImportEnterpriseRoots": false
    },
    "Containers": {
      "Default": [
        {
          "color": "red",
          "icon": "fence",
          "name": "DIY"
        }
      ]
    },
    "DNSOverHTTPS": {
      "Enabled": false,
      "ExcludedDomains": ["http.badssl.com", "norwegianwifi.com"],
      "Fallback": true,
      "Locked": true,
      "ProviderURL": "https://dns0.eu/",
      "ProviderURL_outside_europe_aminda_comment": "Swap to https://unfiltered.adguard-dns.com/dns-query if device is expected to cross continents from Europe?",
      "ProviderURL_with_ECS_comment": "If changing this to something with non-private ECS, remember to disable ECS in preferences of TRR!"
    },
    "DisableEncryptedClientHello": false,
    "DisableFirefoxAccounts": false,
    "DisableFirefoxScreenshots": false,
    "DisablePocket": true,
    "DisplayBookmarksToolbar": "never",
    "DontCheckDefaultBrowser": true,
    "EnableTrackingProtection": {
      "Cryptomining": true,
      "EmailTracking": true,
      "Exceptions": [
        "https://ac.ecosia.org",
        "https://app.element.io",
        "https://bittimittari.fi",
        "https://challenges.cloudflare.com",
        "https://chat.pikaviestin.fi",
        "https://develop.element.io",
        "https://glowing-bear.org",
        "https://keyoxide.org",
        "https://latest.glowing-bear.org",
        "https://learn.microsoft.com",
        "https://one.one.one.one",
        "https://pp-attester-turnstile.research.cloudflare.com",
        "https://staging.element.io",
        "https://teams.microsoft.com",
        "https://webchat.disroot.org",
        "https://www.ecosia.org"
      ],
      "Fingerprinting": true,
      "Locked": false,
      "Value": true
    },
    "EncryptedMediaExtensions": {
      "Enabled": true,
      "Locked": false
    },
    "ExtensionSettings": {
      "adnauseam@rednoise.org": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/adnauseam/latest.xpi",
        "installation_mode": "blocked"
      },
      "ipvfoobar@napr.eu": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipvfoobar/latest.xpi",
        "installation_mode": "normal_installed"
      },
      "jid1-MnnxcxisBPnSXQ-eff@jetpack": {
        "blocked_install_message": "Kaksoiskappale samasta lisäosasta.",
        "installation_mode": "blocked"
      },
      "jid1-MnnxcxisBPnSXQ@jetpack": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/privacy-badger17/latest.xpi",
        "installation_mode": "force_installed"
      },
      "peertube-companion@booteille": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/peertube-companion/latest.xpi",
        "installation_mode": "default_installed"
      },
      "plasma-browser-integration@kde.org": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/plasma-integration/latest.xpi",
        "installation_mode": "force_installed"
      },
      "uBlock0@raymondhill.net": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi",
        "installation_mode": "force_installed"
      },
      "uMatrix@raymondhill.net": {
        "blocked_install_message": "uMatrixin kehitys on päättynyt ja samat ominaisuudet löytyvät uBlock Originista (ja AdNauseamista).",
        "installation_mode": "blocked"
      },
      "wayback_machine@mozilla.org": {
        "blocked_install_message": "https://bugzilla.mozilla.org/show_bug.cgi?id=1497075 hermostuttaa Amindaa.",
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/wayback-machine_new/latest.xpi",
        "installation_mode": "blocked"
      },
      "{3c078156-979c-498b-8990-85f7987dd929}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/sidebery/latest.xpi",
        "installation_mode": "force_installed"
      },
      "@contain-facebook": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/facebook-container/latest.xpi",
        "installation_mode": "normal_installed"
      },
      "{446900e4-71c2-419f-a6a7-df9c091e268b}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi",
        "installation_mode": "force_installed"
      },
      "{48748554-4c01-49e8-94af-79662bf34d50}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/privacy-pass/latest.xpi",
        "installation_mode": "force_installed"
      },
      "{6a65273e-2b26-40f5-b66e-8eed317307da}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/new-tab-suspender/latest.xpi",
        "installation_mode": "force_installed"
      },
      "{6a911b41-b1ee-4d0f-b23b-890229bff0ec}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/http-indicator/latest.xpi",
        "installation_mode": "normal_installed"
      },
      "{a6c4a591-f1b2-4f03-b3ff-767e5bedf4e7}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/user-agent-string-switcher/latest.xpi",
        "installation_mode": "normal_installed"
      },
      "{b5501fd1-7084-45c5-9aa6-567c2fcf5dc6}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ruffle_rs/latest.xpi",
        "installation_mode": "normal_installed"
      },
      "{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search/latest.xpi",
        "installation_mode": "normal_installed"
      }
    },
    "FirefoxHome": {
      "Highlights": false,
      "Locked": false,
      "Pocket": false,
      "Search": true,
      "Snippets": false,
      "SponsoredPocket": false,
      "SponsoredTopSites": false,
      "TopSites": false
    },
    "FirefoxSuggest": {
      "ImproveSuggest": false,
      "Locked": false,
      "SponsoredSuggestions": false,
      "WebSuggestions": false
    },
    "Homepage": {
      "Locked": false,
      "StartPage": "previous-session",
      "URL": "about:mozilla"
    },
    "NetworkPrediction": true,
    "NewTabPage": false,
    "OverrideFirstRunPage": "about:mozilla",
    "PDFjs": {
      "EnablePermissions": false,
      "Enabled": true
    },
    "Preferences": {
      "autoadmin.failover_to_cached": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "autoadmin.global_config_url": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "string",
        "Value": "https://gitea.blesmrt.net/mikaela/shell-things/raw/branch/master/conf/firefox-forbidden-policies.js"
      },
      "autoadmin.offline_failover": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "autoadmin.refresh_interval": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "number",
        "Value": 120
      },
      "browser.aboutConfig.showWarning": {
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },
      "browser.contentblocking.category": {
        "Status": "locked",
        "Type": "string",
        "Value": "strict"
      },
      "browser.contentblocking.report.hide_vpn_banner": {
        "Status": "default",
        "Type": "boolean",
        "Value": true
      },
      "browser.contentblocking.report.lockwise.enabled": {
        "Status": "default",
        "Type": "boolean",
        "Value": false
      },
      "browser.contentblocking.report.show_mobile_app": {
        "Status": "default",
        "Type": "boolean",
        "Value": false
      },
      "browser.contentblocking.report.vpn.enabled": {
        "Status": "default",
        "Type": "boolean",
        "Value": false
      },
      "browser.translation.neverForLanguages": {
        "Status": "default",
        "Type": "string",
        "Value": "en, fi"
      },
      "browser.translations.neverTranslateLanguages": {
        "Status": "default",
        "Type": "string",
        "Value": "en, fi"
      },
      "browser.discovery.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },
      "extensions.htmlaboutaddons.recommendations.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },

      "browser.crashReports.unsubmittedCheck.autoSubmit2": {
        "Status": "default",
        "Type": "boolean",
        "Value": true
      },
      "cookiebanners.bannerClicking.enabled": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "cookiebanners.service.mode": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "number",
        "Value": 2
      },
      "cookiebanners.service.mode.privateBrowsing": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "number",
        "Value": 2
      },
      "dom.block_download_insecure": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "dom.security.https_only_mode": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "extensions.webextensions.restrictedDomains": {
        "Status": "locked",
        "Type": "string",
        "Value": ""
      },
      "general.config.obscure_value": {
        "Status": "locked",
        "Type": "number",
        "Value": 0
      },
      "geo.provider.network.url": {
        "Comment": "This might point to discontinued Mozilla Location Services, so better to restore it to default.",
        "Status": "clear"
      },
      "image.animation.mode": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "default",
        "Type": "string",
        "Value": "once"
      },
      "intl.accept_languages": {
        "Status": "locked",
        "Type": "string",
        "Value": "fi, fi-FI, en, en-FI, en-EU, en-IE, en-US, ru, ru-RU"
      },
      "javascript.use_us_english_locale": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "default",
        "Type": "boolean",
        "Value": true
      },
      "layout.css.devPixelsPerPx": {
        "Status": "default",
        "Type": "string",
        "Value": "1.5"
      },
      "layout.css.prefers-color-scheme.content-override": {
        "Status": "default",
        "Type": "number",
        "Value": 0
      },
      "media.autoplay.default": {
        "Status": "default",
        "Type": "number",
        "Value": 5
      },
      "network.IDN_show_punycode": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.dns.echconfig.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.dns.http3_echconfig.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.dns.native_https_query": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.dns.native_https_query_in_automation": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.dns.native_https_query_win10": {
        "Comment": "This is here just as a reminder that it exists. I don't have a Windows 10 and it will likely switch to true when it exists.",
        "Status": "clear"
      },
      "network.dns.preferIPv6": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.dns.use_https_rr_as_altsvc": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.http.referer.XOriginTrimmingPolicy": {
        "Status": "default",
        "Type": "number",
        "Value": 2
      },
      "network.http.referer.defaultPolicy": {
        "Status": "default",
        "Type": "number",
        "Value": 1
      },
      "network.http.speculative-parallel-limit": {
        "Status": "clear"
      },
      "network.predictor.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.prefetch-next": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.trr.disable-ECS": {
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },
      "network.trr.display_fallback_warning": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.trr.early-AAAA": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "network.trr.exclude-etc-hosts": {
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },
      "pdfjs.enableScripting": {
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },
      "pdfjs.forcePageColors": {
        "Status": "default",
        "Type": "boolean",
        "Value": true
      },
      "pdfjs.pageColorsBackground": {
        "Status": "default",
        "Type": "string",
        "Value": "#000000"
      },
      "pdfjs.pageColorsForeground": {
        "Status": "default",
        "Type": "string",
        "Value": "#ffb700"
      },
      "privacy.donottrackheader.enabled": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "privacy.donottrackheader.value": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "number",
        "Value": 1
      },
      "privacy.fingerprintingProtection": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "privacy.fingerprintingProtection.overrides": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "string",
        "Value": "+AllTargets,-KeyboardEvents,-SpeechSynthesis,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-NavigatorPlatform,-NavigatorUserAgent,-JSDateTimeUTC,-HttpUserAgent,-FontVisibilityRestrictGenerics,-FontVisibilityBaseSystem,-FontVisibilityLangPack"
      },
      "privacy.fingerprintingProtection.pbmode": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "privacy.globalprivacycontrol.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "privacy.resistFingerprinting": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },
      "privacy.resistFingerprinting.block_mozAddonManage": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "privacy.resistFingerprinting.letterboxing": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "privacy.resistFingerprinting.pbmode": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": false
      },
      "privacy.userContext.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "privacy.userContext.ui.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "reader.parse-on-load.force-enabled": {
        "Comment": "Preference not allowed for stability reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "security.OCSP.require": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "security.insecure_connection_text.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "security.insecure_connection_text.pbmode.enabled": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "security.ssl.enable_ocsp_must_staple": {
        "Comment": "Preference not allowed for security reasons. :(",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "security.ssl.enable_ocsp_stapling": {
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "security.tls.ech.grease_http3": {
        "Comment": "Seems to be required for http3. This defaults to true on Nightly 128 and false on 115.11.0esr. However again not allowed to be deployed here for security :()",
        "Status": "locked",
        "Type": "boolean",
        "Value": true
      },
      "ui.systemUsesDarkTheme": {
        "Status": "default",
        "Type": "number",
        "Value": 1
      }
    },
    "SearchEngines": {
      "Add": [
        {
          "Alias": "dl",
          "Description": "Minimal, ad-free version of DuckDuckGo",
          "IconURL": "https://start.duckduckgo.com/static-assets/favicons/DDG-icon_256x256.png",
          "Method": "POST",
          "Name": "DuckDuckGo Lite",
          "PostData": "q={searchTerms}",
          "SuggestURLTemplate": "https://start.duckduckgo.com/ac/?q={searchTerms}&type=list",
          "URLTemplate": "https://duckduckgo.com/lite/?q={searchTerms}"
        },
        {
          "Alias": "d",
          "Description": "DuckDuckGo Start page version",
          "IconURL": "https://start.duckduckgo.com/static-assets/favicons/DDG-icon_256x256.png",
          "Method": "GET",
          "Name": "DuckDuckGo Start",
          "SuggestURLTemplate": "https://start.duckduckgo.com/ac/?q={searchTerms}&type=list",
          "URLTemplate": "https://start.duckduckgo.com/?q={searchTerms}"
        },
        {
          "Alias": "e",
          "Description": "Ecosia Search Engine",
          "IconURL": "https://cdn-static.ecosia.org/static/icons/favicon.ico",
          "Method": "GET",
          "Name": "Ecosia",
          "SuggestURLTemplate": "https://ac.ecosia.org/autocomplete?q={searchTerms}",
          "URLTemplate": "https://www.ecosia.org/search?q={searchTerms}&addon=firefoxgpo"
        },
        {
          "Alias": "b",
          "Description": "Brave Search",
          "IconURL": "https://cdn.search.brave.com/serp/v2/_app/immutable/assets/favicon.acxxetWH.ico",
          "Method": "GET",
          "Name": "Brave Search",
          "SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}",
          "URLTemplate": "https://search.brave.com/search?q={searchTerms}"
        },
        {
          "Alias": "bg",
          "Description": "Brave Search Goggles",
          "IconURL": "https://cdn.search.brave.com/serp/v2/_app/immutable/assets/favicon.acxxetWH.ico",
          "Method": "GET",
          "Name": "Brave Search Goggles",
          "SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}",
          "URLTemplate": "https://search.brave.com/goggles?q={searchTerms}"
        }
      ],
      "Default": "Ecosia"
    },
    "SearchSuggestEnabled": false,
    "SecurityDevices": {
      "Add": {
        "Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"
      }
    },
    "ShowHomeButton": true
  }
}