Chromium: restrict DuckDuckGo to itself and google.com

etc/opt/chromium/policies/managed/README.md

@@ -59,7 +59,11 @@ To intentionally trigger it and what should be allowed in NoScript:
 
 - `bkdgflcldnnnapblkhphbgpggdiikppg`
 
-Installed by default so Google won't be the default search engine.
+Installed by default so Google won't be the default search engine, or that
+would be the idea, but Chromium doesn't seem to allow that.
+
+Additionally it's restricted only to `google.com` and `duckduckgo.com` domains
+so it won't interfere with other extensions.
 
 ### [NoScript](https://chrome.google.com/webstore/detail/doojmbjmlfjjnbmnoijecmcbfeoakpjm)
 

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -18,7 +18,15 @@
     "bkdgflcldnnnapblkhphbgpggdiikppg": {
       "installation_mode": "normal_installed",
       "override_update_url": true,
-      "toolbar_pin": "force_pinned",
+      "runtime_allowed_hosts": [
+        "*://*.duckduckgo.com",
+        "*://duckdukgo.com",
+        "*://google.com"
+      ],
+      "runtime_blocked_hosts": [
+        "<all_urls>"
+      ],
+      "toolbar_pin": "default_unpinned",
       "update_url": "https://clients2.google.com/service/update2/crx"
     },
     "doojmbjmlfjjnbmnoijecmcbfeoakpjm": {