firefox policies: go wild

The logic here is hope that it will stop offering the addon if I am following their instructions and sending them the information. Oh and I added icons

.mikaela_install

@@ -27,6 +27,7 @@ cat conf/librewolf.overrides.cfg >~/.librewolf/librewolf.overrides.cfg
 cat conf/librewolf.overrides.cfg >~/.var/app/io.gitlab.librewolf-community/.librewolf/librewolf.overrides.cfg
 mkdir -p ~/.local/share/applications
 ln -sfv ~/.shell-things/local/share/applications ~/.local/share/applications/shell-things
+rm -fv ~/.shell-things/local/share/applications/applications
 if hash update-desktop-database 2>/dev/null; then
 	update-desktop-database ~/.local/share/applications
 fi

conf/librewolf.overrides.cfg

@@ -108,12 +108,14 @@ pref("network.IDN_show_punycode", true);
 pref("reader.parse-on-load.force-enabled", true);
 
 // TRR & ECH
-// Mode 2 allows fallback to system resolver, 3 is TTR-only
+// WARNING: policies.json lock enforces mode 2. However it won't matter
+// since the system resolver is encrypted, right?
+// Mode 2 allows fallback to system resolver, 3 is TTR-only.
 //pref("network.trr.mode", 2);
 defaultPref("network.trr.mode", 3);
 pref("network.trr.early-AAAA", true);
 //defaultPref("network.trr.uri", "https://dns0.eu/");
-defaultPref("network.trr.uri"), "https://dns11.quad9.net/dns-query");
+defaultPref("network.trr.uri", "https://dns11.quad9.net/dns-query");
 //defaultPref("network.trr.uri", "https://dns.adguard-dns.com/dns-query");
 // NOTE: ECH requires TRR, so mode 2 may not use it.
 defaultPref("network.trr.disable-ECS", false);

etc/firefox/policies/README.md

@@ -13,9 +13,12 @@ per whatever I am doing.
 <!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
 
 - [WARNING TO LIBREWOLF USERS](#warning-to-librewolf-users)
+- [WARNING TO TRR/ENCRYPTED DNS USERS!](#warning-to-trrencrypted-dns-users)
 - [Extensions](#extensions)
   - [Privacy Badger](#privacy-badger)
 - [Search engines](#search-engines)
+- [Useful looking things for the future](#useful-looking-things-for-the-future)
+  - [Certificate installations](#certificate-installations)
 
 <!-- END doctoc generated TOC please keep comment here to allow auto update -->
 
@@ -28,6 +31,11 @@ This file takes priority over
 `/usr/share/librewolf/distribution/policies.json` so don't apply this or
 a lot of LibreWolf specific customizations stops being in force.
 
+## WARNING TO TRR/ENCRYPTED DNS USERS!
+
+If `policies.json` locks DNS over HTTPS, `trr.mode` gets locked into `2` which
+means fallback to system resolver.
+
 ## Extensions
 
 They are mostly self-explanatory.
@@ -53,3 +61,15 @@ when testing this policy I won't have to see Google.
 
 Additionally it's a lie since at least Nightly reads it too without
 complaining.
+
+## Useful looking things for the future
+
+### Certificate installations
+
+In the `certificates` section
+
+```json
+{
+  "Install": ["my_certificate_here.pem"]
+}
+```

etc/firefox/policies/policies.json

@@ -67,9 +67,21 @@
         }
       }
     },
+    "Certificates": {
+      "ImportEnterpriseRoots": false
+    },
+    "Containers": {
+      "Default": [
+        {
+          "color": "red",
+          "icon": "fence",
+          "name": "DIY"
+        }
+      ]
+    },
     "DNSOverHTTPS": {
       "Enabled": true,
-      "Locked": false,
+      "Locked": true,
       "ProviderURL": "https://dns11.quad9.net/dns-query"
     },
     "DisableEncryptedClientHello": false,
@@ -78,6 +90,7 @@
     "DontCheckDefaultBrowser": true,
     "EnableTrackingProtection": {
       "Cryptomining": true,
+      "EmailTracking": true,
       "Exceptions": [
         "https://app.element.io",
         "https://staging.element.io",
@@ -99,6 +112,10 @@
       "Locked": false,
       "Value": true
     },
+    "EncryptedMediaExtensions": {
+      "Enabled": true,
+      "Locked": false
+    },
     "ExtensionSettings": {
       "addon@darkreader.org": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/darkreader/latest.xpi",
@@ -183,6 +200,17 @@
       "StartPage": "previous-session",
       "URL": "about:mozilla"
     },
+    "OverrideFirstRunPage": "about:mozilla",
+    "PDFjs": {
+      "EnablePermissions": false,
+      "Enabled": true
+    },
+    "Preferences": {
+      "pdfjs.enableScripting": {
+        "Status": "locked",
+        "Value": false
+      }
+    },
     "SearchEngines": {
       "Add": [
         {
@@ -199,25 +227,23 @@
           "Description": "DuckDuckGo Start page version",
           "Method": "GET",
           "Name": "DuckDuckGo Start",
-          "PostData": "q={searchTerms}",
           "SuggestURLTemplate": "https://start.duckduckgo.com/ac/?q={searchTerms}&type=list",
           "URLTemplate": "https://start.duckduckgo.com/?q={searchTerms}"
         },
         {
           "Alias": "e",
           "Description": "Ecosia Search Engine",
+          "IconURL": "https://cdn-static.ecosia.org/static/icons/favicon.ico",
           "Method": "GET",
           "Name": "Ecosia",
-          "PostData": "q={searchTerms}",
           "SuggestURLTemplate": "https://ac.ecosia.org/autocomplete?q={searchTerms}",
-          "URLTemplate": "https://www.ecosia.org/search?q={searchTerms}"
+          "URLTemplate": "https://www.ecosia.org/search?q={searchTerms}&addon=firefoxgpo"
         },
         {
           "Alias": "b",
           "Description": "Brave Search",
           "Method": "GET",
           "Name": "Brave Search",
-          "PostData": "q={searchTerms}",
           "SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}",
           "URLTemplate": "https://search.brave.com/search?q={searchTerms}"
         },
@@ -226,13 +252,18 @@
           "Description": "Brave Search Goggles",
           "Method": "GET",
           "Name": "Brave Search Goggles",
-          "PostData": "q={searchTerms}",
           "SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}",
           "URLTemplate": "https://search.brave.com/goggles?q={searchTerms}"
         }
       ],
       "Default": "Ecosia"
     },
-    "SearchSuggestEnabled": false
+    "SearchSuggestEnabled": false,
+    "SecurityDevices": {
+      "Add": {
+        "Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"
+      }
+    },
+    "ShowHomeButton": true
   }
 }

etc/opt/chromium/policies/recommended/ecosia.json

@@ -1,8 +1,9 @@
 {
   "DefaultSearchProviderEnabled": true,
+  "DefaultSearchProviderImageURL": "https://cdn-static.ecosia.org/static/icons/favicon.ico",
   "DefaultSearchProviderKeyword": "e",
   "DefaultSearchProviderName": "Ecosia",
-  "DefaultSearchProviderNewTabURL": "https://www.ecosia.org/newtab/",
+  "DefaultSearchProviderNewTabURL": "https://www.ecosia.org/newtab/?addon=chromegpo",
-  "DefaultSearchProviderSearchURL": "https://www.ecosia.org/search?q={searchTerms}",
+  "DefaultSearchProviderSearchURL": "https://www.ecosia.org/search?q={searchTerms}&addon=chromegpo",
   "DefaultSearchProviderSuggestURL": "https://ac.ecosia.org/autocomplete?q={searchTerms}"
 }