From 23bcc0e9087298c101dff7d8fd5db78f9bbb0330 Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen+git@mikaela.info>
Date: Wed, 31 Jan 2024 13:43:10 +0200
Subject: [PATCH] test managed chrome profilies

---
 etc/opt/.gitignore                            |  1 +
 etc/opt/chrome                                |  1 +
 etc/opt/chromium/policies/managed/README.md   | 49 +++++++++++++++++++
 .../policies/managed/aminda-extensions.json   | 24 +++++++++
 etc/opt/chromium/policies/managed/dns0.json   |  4 ++
 5 files changed, 79 insertions(+)
 create mode 100644 etc/opt/.gitignore
 create mode 120000 etc/opt/chrome
 create mode 100644 etc/opt/chromium/policies/managed/README.md
 create mode 100644 etc/opt/chromium/policies/managed/aminda-extensions.json
 create mode 100644 etc/opt/chromium/policies/managed/dns0.json

diff --git a/etc/opt/.gitignore b/etc/opt/.gitignore
new file mode 100644
index 00000000..bb868be8
--- /dev/null
+++ b/etc/opt/.gitignore
@@ -0,0 +1 @@
+chrome
diff --git a/etc/opt/chrome b/etc/opt/chrome
new file mode 120000
index 00000000..4994c67d
--- /dev/null
+++ b/etc/opt/chrome
@@ -0,0 +1 @@
+chromium
\ No newline at end of file
diff --git a/etc/opt/chromium/policies/managed/README.md b/etc/opt/chromium/policies/managed/README.md
new file mode 100644
index 00000000..677cbdb7
--- /dev/null
+++ b/etc/opt/chromium/policies/managed/README.md
@@ -0,0 +1,49 @@
+# Chromium policies
+
+<!-- editorconfig-checker-disable -->
+<!-- prettier-ignore-start -->
+
+<!-- START doctoc generated TOC please keep comment here to allow auto update -->
+<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
+
+- [`aminda-extensions.json`](#aminda-extensionsjson)
+  - [Privacy Badger](#privacy-badger)
+  - [Fedora User Agent](#fedora-user-agent)
+- [`dns0.json`](#dns0json)
+
+<!-- END doctoc generated TOC please keep comment here to allow auto update -->
+
+<!-- prettier-ignore-end -->
+<!-- editorconfig-checker-enable -->
+
+## `aminda-extensions.json`
+
+As I cannot separate the keys to multiple files I am forced to keep them in
+one and separate by what the file does, `aminda-extensions.json` is unlikely
+to overlap with someone else.
+
+Changing `normal_installed` to `force_installed` would also prevent
+uninstallation.
+
+### Privacy Badger
+
+- `pkehgijcmpdhfbdbbnkijodmdjhbjlgp`
+
+Configured to learn locally and also in incognito as opposed to only relying
+on vendor list. Also not display the "Welcome to Privacy Badger screen".
+
+See also:
+
+- https://github.com/EFForg/privacybadger/blob/master/doc/admin-deployment.md
+- https://github.com/EFForg/privacybadger/blob/master/src/data/schema.json
+
+### Fedora User Agent
+
+Communicates websites that Ubuntu isn't the only Linux distribution and makes
+some offer rpm packages directly.
+
+- `hojggiaghnldpcknpbciehjcaoafceil`
+
+## `dns0.json`
+
+Simply enables DNS-over-HTTPS with DNS0.eu
diff --git a/etc/opt/chromium/policies/managed/aminda-extensions.json b/etc/opt/chromium/policies/managed/aminda-extensions.json
new file mode 100644
index 00000000..10f828cb
--- /dev/null
+++ b/etc/opt/chromium/policies/managed/aminda-extensions.json
@@ -0,0 +1,24 @@
+{
+  "3rdparty": {
+    "extensions": {
+      "pkehgijcmpdhfbdbbnkijodmdjhbjlgp": {
+        "learnInIncognito": true,
+        "learnLocally": true,
+        "showIntroPage": false
+      }
+    }
+  },
+  "ExtensionSettings": {
+    "hojggiaghnldpcknpbciehjcaoafceil": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
+    "pkehgijcmpdhfbdbbnkijodmdjhbjlgp": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "force_pinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    }
+  }
+}
diff --git a/etc/opt/chromium/policies/managed/dns0.json b/etc/opt/chromium/policies/managed/dns0.json
new file mode 100644
index 00000000..5f1e4ed0
--- /dev/null
+++ b/etc/opt/chromium/policies/managed/dns0.json
@@ -0,0 +1,4 @@
+{
+  "DnsOverHttpsMode": "secure",
+  "DnsOverHttpsTemplates": "https://dns0.eu"
+}