diff --git a/.mikaela_install b/.mikaela_install
index 4f507d94..e9c47af4 100755
--- a/.mikaela_install
+++ b/.mikaela_install
@@ -15,6 +15,9 @@ mkdir -p ~/.ssh
 cat .mikaela/keys/authorized_keys >~/.ssh/authorized_keys
 cat etc/ssh/ssh_config >~/.ssh/config
 cat .editorconfig >~/.editorconfig
+mkdir -p ~/.librewolf/ ~/.var/app/io.gitlab.librewolf-community/.librewolf/
+cat conf/librewolf.overrides.cfg.js >~/.librewolf/librewolf.overrides.cfg
+cat conf/librewolf.overrides.cfg.js >~/.var/app/io.gitlab.librewolf-community/.librewolf/librewolf.overrides.cfg
 touch ~/.MIKAELA_GREP
 set +x
 # vim : set ft=sh :
diff --git a/conf/.gitignore b/conf/.gitignore
new file mode 100644
index 00000000..e5503d68
--- /dev/null
+++ b/conf/.gitignore
@@ -0,0 +1 @@
+librewolf.overrides.cfg
diff --git a/conf/librewolf.overrides.cfg b/conf/librewolf.overrides.cfg
new file mode 120000
index 00000000..610daca2
--- /dev/null
+++ b/conf/librewolf.overrides.cfg
@@ -0,0 +1 @@
+librewolf.overrides.cfg.js
\ No newline at end of file
diff --git a/conf/librewolf.overrides.cfg.js b/conf/librewolf.overrides.cfg.js
new file mode 100644
index 00000000..5fe451c0
--- /dev/null
+++ b/conf/librewolf.overrides.cfg.js
@@ -0,0 +1,52 @@
+// LibreWolf override configuration, begins with samples from
+// https://librewolf.net/docs/settings/
+// Also incorporates some of https://aminda.eu/browser-extensions#firefox-aboutconfig
+
+// Enable letterboxing
+defaultPref("privacy.resistFingerprinting.letterboxing", true);
+
+// Stricter cross-origin policy
+defaultPref("network.http.referer.XOriginPolicy", 2);
+
+// Enable WebGL
+//defaultPref("webgl.disabled", false);
+
+// Enable Firefox accounts
+defaultPref("identity.fxaccounts.enabled", true);
+
+// Keep history and downloads
+defaultPref("privacy.clearOnShutdown.history", false);
+defaultPref("privacy.clearOnShutdown.downloads", false);
+
+// Don't resume from crash (SSD)
+defaultPref("browser.sessionstore.resume_from_crash", false);
+
+// Stricter autoplay
+defaultPref("media.autoplay.blocking_policy", 2);
+
+// No corporate CA MITM
+defaultPref("security.certerrors.mitm.auto_enable_enterprise_roots", false);
+
+// Decrease animations
+defaultPref("image.animation_mode", "once");
+
+// Punycode
+defaultPref("network.IDN_show_punycode", true);
+
+// Enforce reader mode enabling?
+defaultPref("reader.parse-on-load.force-enabled", true);
+
+// TRR & ECH
+defaultPref("network.trr.mode", 3);
+defaultPref("network.trr.early-AAAA", true);
+defaultPref("network.trr.uri", "https://dns11.quad9.net/dns-query");
+defaultPref("network.trr.disable-ECS", false);
+defaultPref("network.dns.echconfig.enabled", true);
+defaultPref("network.dns.use_https_rr_as_altsvc", true);
+defaultPref(
+	"network.trr.excluded-domains",
+	"http.badssl.com,norwegianwifi.com",
+);
+
+// Default UI scale
+defaultPref("layout.css.devPixelsPerPx", "1.5");