From 7a68117198e59a0e3ec4fa181cd9cda2c75c162e Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen+git@mikaela.info>
Date: Mon, 13 May 2024 21:54:05 +0300
Subject: [PATCH] firefox policies: go wild

---
 etc/firefox/policies/README.md     | 14 ++++++++++++
 etc/firefox/policies/policies.json | 36 +++++++++++++++++++++++++++++-
 2 files changed, 49 insertions(+), 1 deletion(-)

diff --git a/etc/firefox/policies/README.md b/etc/firefox/policies/README.md
index 1f137a62..c49245a0 100644
--- a/etc/firefox/policies/README.md
+++ b/etc/firefox/policies/README.md
@@ -17,6 +17,8 @@ per whatever I am doing.
 - [Extensions](#extensions)
   - [Privacy Badger](#privacy-badger)
 - [Search engines](#search-engines)
+- [Useful looking things for the future](#useful-looking-things-for-the-future)
+  - [Certificate installations](#certificate-installations)
 
 <!-- END doctoc generated TOC please keep comment here to allow auto update -->
 
@@ -59,3 +61,15 @@ when testing this policy I won't have to see Google.
 
 Additionally it's a lie since at least Nightly reads it too without
 complaining.
+
+## Useful looking things for the future
+
+### Certificate installations
+
+In the `certificates` section
+
+```json
+{
+  "Install": ["my_certificate_here.pem"]
+}
+```
diff --git a/etc/firefox/policies/policies.json b/etc/firefox/policies/policies.json
index f068f252..4cdfcf92 100644
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@@ -67,6 +67,18 @@
         }
       }
     },
+    "Certificates": {
+      "ImportEnterpriseRoots": false
+    },
+    "Containers": {
+      "Default": [
+        {
+          "color": "red",
+          "icon": "fence",
+          "name": "DIY"
+        }
+      ]
+    },
     "DNSOverHTTPS": {
       "Enabled": true,
       "Locked": true,
@@ -78,6 +90,7 @@
     "DontCheckDefaultBrowser": true,
     "EnableTrackingProtection": {
       "Cryptomining": true,
+      "EmailTracking": true,
       "Exceptions": [
         "https://app.element.io",
         "https://staging.element.io",
@@ -99,6 +112,10 @@
       "Locked": false,
       "Value": true
     },
+    "EncryptedMediaExtensions": {
+      "Enabled": true,
+      "Locked": false
+    },
     "ExtensionSettings": {
       "addon@darkreader.org": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/darkreader/latest.xpi",
@@ -183,6 +200,17 @@
       "StartPage": "previous-session",
       "URL": "about:mozilla"
     },
+    "OverrideFirstRunPage": "about:mozilla",
+    "PDFjs": {
+      "EnablePermissions": false,
+      "Enabled": true
+    },
+    "Preferences": {
+      "pdfjs.enableScripting": {
+        "Status": "locked",
+        "Value": false
+      }
+    },
     "SearchEngines": {
       "Add": [
         {
@@ -230,6 +258,12 @@
       ],
       "Default": "Ecosia"
     },
-    "SearchSuggestEnabled": false
+    "SearchSuggestEnabled": false,
+    "SecurityDevices": {
+      "Add": {
+        "Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"
+      }
+    },
+    "ShowHomeButton": true
   }
 }