{
	"policies": {
		"3rdparty": {
			"Extensions": {
				"jid1-MnnxcxisBPnSXQ@jetpack": {
					"checkForDNTPolicy": true,
					"disabledSites": [
						"www.ecosia.org",
						"pp-attester-turnstile.research.cloudflare.com"
					],
					"learnInIncognito": true,
					"learnLocally": true,
					"sendDNTSignal": true,
					"showCounter": true,
					"showIntroPage": false,
					"socialWidgetReplacementEnabled": true,
					"trackingDomains": [
						{
							"domain": "tunnus.almamedia.fi",
							"action": "cookieblock"
						},
						{
							"domain": "bitwarden.eu",
							"action": "allow"
						},
						{
							"domain": "google.com",
							"action": "block"
						},
						{
							"domain": "recaptcha.net",
							"action": "block"
						},
						{
							"domain": "vimeo.com",
							"action": "block"
						},
						{
							"domain": "vimeocdn.com",
							"action": "block"
						},
						{
							"domain": "youtube.com",
							"action": "block"
						},
						{
							"domain": "youtube-nocookie.com",
							"action": "block"
						}
					]
				},
				"jid1-ZAdIEUB7XOzOJw@jetpack": {
					"hasSeenPostInstall": true
				},
				"uBlock0@raymondhill.net": {
					"advancedSettings": [
						[
							"filterAuthorMode",
							"false"
						],
						[
							"trustedListPrefixes",
							"-"
						],
						[
							"uiPopupConfig",
							"+captions +logger"
						]
					],
					"toAdd": {
						"trustedSiteDirectives": [
							"accountscenter.facebook.com",
							"accountscenter.instagram.com",
							"accounts.google.com",
							"auth-prod.megical.com",
							"challenges.cloudflare.com",
							"chrome-extension-scheme",
							"kansalainen.kanta.fi",
							"kanta.fi",
							"moz-extension-scheme",
							"myaccount.google.com",
							"omakanta.kanta.fi",
							"oma.kela.fi",
							"omavero.vero.fi",
							"pp-attester-turnstile.research.cloudflare.com",
							"research.cloudflare.com",
							"suomi.fi",
							"tunnistautuminen.suomi.fi",
							"tunnistus.telia.fi",
							"www.ecosia.org",
							"www.npmjs.com",
							"www.suomi.fi"
						]
					},
					"toOverwrite": {
						"filterLists": [
							"adguard-spyware-url",
							"block-lan",
							"easylist",
							"easyprivacy",
							"FIN-0",
							"https://ads-for-open-source.readthedocs.io/en/latest/_static/lists/opensource-ads.txt",
							"https://badblock.celenity.dev/abp/ethical_whitelist.txt",
							"https://gitflic.ru/project/magnolia1234/bypass-paywalls-clean-filters/blob/raw?file=bpc-paywall-filter.txt",
							"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener-AffiliateTagAllowlist.txt",
							"https://raw.githubusercontent.com/DandelionSprout/adfilt/master/LegitimateURLShortener.txt",
							"https://raw.githubusercontent.com/Mikaela/gist/master/DNS/blocklist.txt",
							"https://secure.fanboy.co.nz/fanboy-annoyance.txt",
							"https://www.eff.org/files/effdntlist.txt",
							"plowe-0",
							"ublock-abuse",
							"ublock-annoyances",
							"ublock-badware",
							"ublock-cookies-adguard",
							"ublock-cookies-easylist",
							"ublock-filters",
							"ublock-privacy",
							"ublock-quick-fixes",
							"ublock-unbreak",
							"urlhaus-1",
							"user-filters"
						]
					},
					"userSettings": [
						[
							"advancedUserEnabled",
							"true"
						],
						[
							"cloudStorageEnabled",
							"true"
						],
						[
							"collapseBlocked",
							"true"
						],
						[
							"colorBlindFriendly",
							"false"
						],
						[
							"ignoreGenericCosmeticFilters",
							"true"
						],
						[
							"parseAllABPHideFilters",
							"true"
						],
						[
							"suspendUntilListsAreLoaded",
							"true"
						],
						[
							"prefetchingDisabled",
							"true"
						]
					]
				},
				"{446900e4-71c2-419f-a6a7-df9c091e268b}": {
					"environment": {
						"base": "https://vault.bitwarden.eu",
						"notifications": "https://notifications.bitwarden.eu"
					}
				}
			}
		},
		"AutofillAddressEnabled": false,
		"AutofillCreditCardEnabled": false,
		"BlockAboutAddons": false,
		"BlockAboutConfig": false,
		"BlockAboutProfiles": false,
		"BlockAboutSupport": false,
		"Certificates": {
			"ImportEnterpriseRoots": false
		},
		"Containers": {
			"Default": [
				{
					"name": "0",
					"color": "toolbar",
					"icon": "circle"
				}
			]
		},
		"Containers_color_comment": "blue, turquoise, green, yellow, orange, red, pink, purple, toolbar",
		"Containers_icons_comment": "fingerprint, briefcase, dollar, cart, vacation, gift, food, fruit, pet, tree, chill, circle, fence",
		"DNSOverHTTPS": {
			"Comment": "Cloudflare is nowadays the authority on most used domains at radar.cloudflare.com and this also affects everything using most visited domains and I am hoping to boost Finnish domains so PrivacyBadger training will recognise us existing and learn Finnish trackers by default for everyone. Maybe if there are enough Finnish Cloudflare users, this will work.",
			"Comment2": "On second thought, let's not use DoH. It bypasses encrypted system DNS and DNSSEC validation which the browser won't perform and the other end of DoH cannot be fully trusted. See for example https://notes.valdikss.org.ru/jabber.ru-mitm/",
			"Comment3": "Yet another concern is lack of private ECS meaning I won't benefit from edge nodes within my ISP resulting in longer paths for data to take and thus higher energy consumption (aminda.eu/n/dns).",
			"Enabled": false,
			"ExcludedDomains": [
				"http.badssl.com",
				"norwegianwifi.com"
			],
			"Fallback": true,
			"Locked": true,
			"ProviderURL": "https://security.cloudflare-dns.com/dns-query"
		},
		"DisableEncryptedClientHello": false,
		"DisableFirefoxAccounts": false,
		"DisableFirefoxScreenshots": false,
		"DisableFirefoxStudies": true,
		"DisableForgetButton": false,
		"DisablePocket": true,
		"DisableSecurityBypass": {
			"InvalidCertificate": true,
			"SafeBrowsing": false
		},
		"DisableTelemetry": false,
		"DisableTelemetry_comment": "Mozilla Anonym ad attribution is controlled by this policy (and dom.private-attribution.submission.enabled) and starting from 25-04-2025 the promise to never sell user data expires. And yet I am not convinced disabling telemetry is the right way to protest. https://blog.glyph.im/2023/03/telemetry-is-not-your-enemy.html",
		"DisplayBookmarksToolbar": "never",
		"DontCheckDefaultBrowser": true,
		"EnableTrackingProtection": {
			"Comment": "Strict mode enforced later in the policy.",
			"Exceptions": [
				"https://www.ecosia.org",
				"https://pp-attester-turnstile.research.cloudflare.com"
			],
			"Locked": false,
			"Value": true
		},
		"EncryptedMediaExtensions": {
			"Enabled": false,
			"Locked": false
		},
		"ExtensionSettings": {
			"@contain-facebook": {
				"blocked_install_message": "Facebook Container. Redundant with strict tracking protection and Privacy Badger",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/facebook-container/latest.xpi",
				"installation_mode": "blocked",
				"private_browsing": false
			},
			"ATBC@EasonWong": {
				"blocked_install_message": "Adaptive Tab Bar Colour",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/adaptive-tab-bar-colour/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true
			},
			"CanvasBlocker@kkapsner.de": {
				"blocked_install_message": "CanbasBlocker. Requested by LibreAwoo for those who don't have RFP/FPP, neither of which I can specify through this policy, while the description says it's compatible with the default one. However incompatible with JShelter (I think).",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/canvasblocker/latest.xpi",
				"installation_mode": "blocked",
				"private_browsing": true,
				"restricted_domains": []
			},
			"addon@darkreader.org": {
				"blocked_install_message": "DarkReader",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/darkreader/latest.xpi",
				"installation_mode": "allowed",
				"private_browsing": true
			},
			"chrome-mask@overengineer.dev": {
				"blocked_install_message": "Chrome Mask",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/chrome-mask/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": false
			},
			"goeuropean@example.com": {
				"blocked_install_message": "Go European",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/go-european/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": false
			},
			"gps-detect@allanwirth.com": {
				"blocked_install_message": "GPS Detect. Notify when viewed image has EXIF geolocation.",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/gpsdetect/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": false
			},
			"ipfs-firefox-addon@lidel.org": {
				"blocked_install_message": "IPFS Companion",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipfs-companion/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false
			},
			"ipvfoo@pmarks.net": {
				"blocked_install_message": "IPvFoo. Displays on URL bar, so the icon can be hidden to menupanel.",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipvfoo/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false,
				"restricted_domains": []
			},
			"jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack": {
				"blocked_install_message": "Terms of Service; Didn't Read",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/terms-of-service-didnt-read/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": false
			},
			"jid1-MnnxcxisBPnSXQ-eff@jetpack": {
				"blocked_install_message": "PrivacyBadger (eff.org). Already installed from AMO",
				"default_area": "navbar",
				"install_url": "https://www.eff.org/files/privacy-badger-latest.xpi",
				"installation_mode": "blocked",
				"private_browsing": true,
				"restricted_domains": []
			},
			"jid1-MnnxcxisBPnSXQ@jetpack": {
				"blocked_install_message": "PrivacyBadger (AMO). While this will not sync the changes specified in this policy, the core features of pre-training and widget replacements will.",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/privacy-badger17/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"jsr@javascriptrestrictor": {
				"blocked_install_message": "JS Shelter",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/javascript-restrictor/latest.xpi",
				"installation_mode": "allowed",
				"private_browsing": true
			},
			"offline-qr-code@rugk.github.io": {
				"blocked_install_message": "Offline QR Code generator",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/offline-qr-code-generator/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": false,
				"restricted_domains": []
			},
			"optout@google.com": {
				"blocked_install_message": "Google IBA opt-out",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/interest-advertising-opt-out/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"plasma-browser-integration@kde.org": {
				"blocked_install_message": "KDE Plasma Browser/Desktop Integration",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/plasma-integration/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"tab-counter@daawesomep.addons.mozilla.org": {
				"blocked_install_message": "Tab Counter",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/tab-counter-webext/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false
			},
			"uBOLite@raymondhill.net": {
				"blocked_install_message": "uBlock Origin Lite. Unmaintained on addons.mozilla.org",
				"default_area": "navbar",
				"installation_mode": "blocked",
				"private_browsing": true,
				"restricted_domains": []
			},
			"uBlock0@raymondhill.net": {
				"blocked_install_message": "uBlock Origin",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"wayback_machine@mozilla.org": {
				"blocked_install_message": "web.archive.org official extension",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/wayback-machine_new/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false,
				"restricted_domains": []
			},
			"zoompage-we@DW-dev": {
				"blocked_install_message": "Zoom Page. Remember to visit settings to enable automatic zoom by default. Suggested in Mozilla Accessibility blogpost",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/zoom-page-we/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"{157eb9f0-9814-4fcc-b0b7-586b3093c641}": {
				"blocked_install_message": "archive.softwareheritage.org extension",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/updateswh/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false,
				"restricted_domains": []
			},
			"{2f182d41-fd03-4a6d-938d-081419586c37}": {
				"blocked_install_message": "Third party Google Analyitcs opt-out extension. Likely unnecessary with integrated tracking protection, Privacy Badger, uBlock Origin and Google IBA opt-out",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/google-analytics-opt-out/latest.xpi",
				"installation_mode": "blocked",
				"private_browsing": true,
				"restricted_domains": []
			},
			"{446900e4-71c2-419f-a6a7-df9c091e268b}": {
				"blocked_install_message": "Bitwarden",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/bitwarden-password-manager/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"{48748554-4c01-49e8-94af-79662bf34d50}": {
				"blocked_install_message": "Silk Privacy Pass",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/privacy-pass/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"{5384767E-00D9-40E9-B72F-9CC39D655D6F}": {
				"blocked_install_message": "Epub Reader",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/epubreader/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false,
				"restricted_domains": []
			},
			"{6003eac6-4b07-4aaf-960b-92fa006cd444}": {
				"blocked_install_message": "Mozilla Orbit. AI hurts climate and the crawlers are DDoSing the internet. However the summary feature sometimes spares my mental health, so begrudgingly it's allowed and won't be normal_installed let alone force_installed.",
				"default_area": "navbar",
				"installation_mode": "allowed",
				"private_browsing": false,
				"restricted_domains": []
			},
			"{6a65273e-2b26-40f5-b66e-8eed317307da}": {
				"blocked_install_message": "New Tab Suspender. More useful than the Firefox integrated one, which this policy should also enable (if not, autoconfig does, I don't remember and not checking right now, TODO!)",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/new-tab-suspender/latest.xpi",
				"installation_mode": "force_installed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"{6a911b41-b1ee-4d0f-b23b-890229bff0ec}": {
				"blocked_install_message": "HTTP Indicator",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/http-indicator/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false,
				"restricted_domains": []
			},
			"{73a6fe31-595d-460b-a920-fcc0f8843232}": {
				"blocked_install_message": "NoScript. Too extreme for family to normal_install, and Anubis & co make it difficultish. Consider globally blocking third party JavaScript in uBlock Origin (thus medium mode).",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/noscript/latest.xpi",
				"installation_mode": "allowed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"{8620c15f-30dc-4dba-a131-7c5d20cf4a29}": {
				"blocked_install_message": "Firefox Nightly Tester Tools",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/nightly-tester-tools/latest.xpi",
				"installation_mode": "allowed",
				"private_browsing": true
			},
			"{8e41107d-2be2-454d-b4b8-c3d7e54d77de}": {
				"blocked_install_message": "IG Plus. Options to disable algorhitms and other annoyances while begrudgingly using instagram.com",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/igplus-extension/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false
			},
			"{90b8ecca-860a-4f1c-8476-e181df2cf635}": {
				"blocked_install_message": "Grayscale bro",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/grayscale-bro/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": true
			},
			"{b11bea1f-a888-4332-8d8a-cec2be7d24b9}": {
				"blocked_install_message": "Tor Snowflake proxy (for prividing the proxy for others)",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/torproject-snowflake/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false
			},
			"{b5501fd1-7084-45c5-9aa6-567c2fcf5dc6}": {
				"blocked_install_message": "Ruffle Flash Player Emulator. normal_install would cause additional fingerprinting.",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/ruffle_rs/latest.xpi",
				"installation_mode": "allowed",
				"private_browsing": false
			},
			"{b86e4813-687a-43e6-ab65-0bde4ab75758}": {
				"blocked_install_message": "LocalCDN",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/localcdn-fork-of-decentraleyes/latest.xpi",
				"installation_mode": "allowed",
				"private_browsing": true,
				"restricted_domains": []
			},
			"{c2ecdf60-7077-4bfa-b9c2-4892a8ded8c6}": {
				"blocked_install_message": "Bionic Reader",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/bionic-reader/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": true
			},
			"{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}": {
				"blocked_install_message": "Ecosia Search Engine. The policy to customize them is available only for ESR and Nightly, but both use the same name so ESR and Nightly can unload it without anything changing.",
				"default_area": "menupanel",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/ecosia-the-green-search/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false
			},
			"{ddc62400-f22d-4dd3-8b4a-05837de53c2e}": {
				"blocked_install_message": "Read Aloud. Suggested in Mozilla Firefox Accessibility blogpost. Compatible with Epub Reader above.",
				"default_area": "navbar",
				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/read-aloud/latest.xpi",
				"installation_mode": "normal_installed",
				"private_browsing": false
			}
		},
		"FirefoxHome": {
			"Highlights": false,
			"Locked": false,
			"Pocket": false,
			"Search": true,
			"Snippets": false,
			"SponsoredPocket": false,
			"SponsoredTopSites": false,
			"TopSites": false
		},
		"FirefoxSuggest": {
			"ImproveSuggest": false,
			"Locked": false,
			"SponsoredSuggestions": false,
			"WebSuggestions": false
		},
		"Homepage": {
			"Locked": false,
			"StartPage": "previous-session",
			"URL": "about:mozilla"
		},
		"LegacySameSiteCookieBehaviorEnabled": false,
		"NetworkPrediction": false,
		"NewTabPage": true,
		"OverrideFirstRunPage": "about:mozilla|https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-quick-guide|https://addons.mozilla.org/firefox/addon/noscript/",
		"PDFjs": {
			"EnablePermissions": false,
			"Enabled": true
		},
		"PasswordManagerEnabled": false,
		"Preferences": {
			"app.update.download.attempts": {
				"Comment": "If this is what it looks like, it will stop the prompts to download Firefox manually.",
				"Status": "clear"
			},
			"autoadmin.failover_to_cached": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"autoadmin.global_config_url": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "string",
				"Value": "https://codeberg.org/Aminda/shell-things/raw/branch/cxefa/conf/firefox-forbidden-policies.js"
			},
			"autoadmin.offline_failover": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"autoadmin.refresh_interval": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "number",
				"Value": 120
			},
			"browser.aboutConfig.showWarning": {
				"Status": "default",
				"Type": "boolean",
				"Value": false
			},
			"browser.cache.disk.enable": {
				"Status": "user",
				"Type": "boolean",
				"Value": false
			},
			"browser.cache.memory.enable": {
				"Status": "user",
				"Type": "boolean",
				"Value": true
			},
			"browser.contentblocking.category": {
				"Status": "locked",
				"Type": "string",
				"Value": "strict"
			},
			"browser.contentblocking.report.hide_vpn_banner": {
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"browser.contentblocking.report.lockwise.enabled": {
				"Status": "default",
				"Type": "boolean",
				"Value": false
			},
			"browser.contentblocking.report.show_mobile_app": {
				"Status": "default",
				"Type": "boolean",
				"Value": false
			},
			"browser.contentblocking.report.vpn.enabled": {
				"Status": "default",
				"Type": "boolean",
				"Value": false
			},
			"browser.crashReports.unsubmittedCheck.autoSubmit2": {
				"Comment": "Automatically sending crash reports, but letting the user say no.",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"browser.discovery.enabled": {
				"Comment": "This means personalized extension recommendations in extension management.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.display.use_document_fonts": {
				"Comment": "Are webpages allowed to set their own fonts by default? 0 forbids them. See also browser.display.use_document_fonts.icon_font_allowlist for what webpages are allowed to set. If changing this, see also fingerprinting overrides",
				"Status": "user",
				"Type": "number",
				"Value": 0
			},
			"browser.ml.chat.enabled": {
				"Status": "clear",
				"Type": "boolean",
				"Value": false
			},
			"browser.ml.chat.provider": {
				"Status": "default",
				"Type": "string",
				"Value": "https://chat.mistral.ai/chat"
			},
			"browser.preferences.moreFromMozilla": {
				"Status": "default",
				"Type": "boolean",
				"Value": false
			},
			"browser.quitShortcut.disabled ": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.safebrowsing.blockedURIs.enabled": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.safebrowsing.downloads.enabled": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.safebrowsing.malware.enabled": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.safebrowsing.phishing.enabled": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.safebrowsing.provider.google.gethashURL": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "string",
				"Value": ""
			},
			"browser.safebrowsing.provider.google.updateURL": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "string",
				"Value": ""
			},
			"browser.safebrowsing.provider.google4.gethashURL": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "string",
				"Value": ""
			},
			"browser.safebrowsing.provider.google4.updateURL": {
				"Comment": "Disable Google Safe Browsing via LibreAwoo. Handled by system DNS or uBlock Origin.",
				"Status": "locked",
				"Type": "string",
				"Value": ""
			},
			"browser.sessionstore.warnOnQuit": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.tabs.closeTabByDblclick": {
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"browser.tabs.closeWindowWithLastTab": {
				"Status": "default",
				"Type": "boolean",
				"Value": false
			},
			"browser.tabs.groups.enabled": {
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"browser.tabs.groups.smart.enabled": {
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"browser.tabs.inTitlebar_commented": {
				"Comment": "without _commented 0 enables system title bar and 2 is default.",
				"Status": "default",
				"Type": "number",
				"Value": 0
			},
			"browser.tabs.unloadOnLowMemory": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"browser.tabs.warnOnClose": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.tabs.warnOnCloseOtherTabs": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.taskbarTabs.enabled": {
				"Comment": "Rumoured PWA support",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"browser.translations.automaticallyPopup": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.translations.enable": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"browser.translations.neverTranslateLanguages": {
				"Status": "locked",
				"Type": "string",
				"Value": ""
			},
			"browser.translations.panelShown": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"browser.translations.select.enable": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"browser.uidensity": {
				"Status": "default",
				"Type": "number",
				"Value": 1
			},
			"browser.urlbar.trimHttps": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.urlbar.trimURL": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"browser.warnOnQuit": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"cookiebanners.bannerClicking.enabled": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"cookiebanners.service.mode": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "number",
				"Value": 2
			},
			"cookiebanners.service.mode.privateBrowsing": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "number",
				"Value": 2
			},
			"dom.block_download_insecure": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"dom.private-attribution.submission.enabled": {
				"Comment": "Mozilla Anonym so-called Privacy Preserving Advertisement Attribution",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"dom.security.https_only_mode": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"extensions.htmlaboutaddons.recommendations.enabled": {
				"Comment": "No personalized add-on recommendations.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"extensions.webextensions.restrictedDomains": {
				"Comment": "Don't protect Mozilla domains from privacy extensions. Always reset it to modified/empty so I can access the original value if I ever need it.",
				"Status": "user",
				"Type": "string",
				"Value": ""
			},
			"fission.autostart": {
				"Comment": "Enable fission, site separation per process, security. Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"general.config.obscure_value": {
				"Comment": "Required for autoconfig.",
				"Status": "locked",
				"Type": "number",
				"Value": 0
			},
			"geo.provider.network.url": {
				"Status": "locked",
				"Type": "string",
				"Value": "https://api.beacondb.net/v1/geolocate?force_ok=true"
			},
			"geo.provider.use_geoclue": {
				"Comment": "/etc/geolocation, gpsd and global WPS configuration.",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"geo.provider.use_gpsd": {
				"Comment": "My geoclue should be using gpsd already.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"gfx.webrender.all": {
				"Comment": "Enable fission, site separation per process, security",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"image.animation.mode": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "default",
				"Type": "string",
				"Value": "once"
			},
			"image.animation_mode": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "default",
				"Type": "string",
				"Value": "once"
			},
			"intl.accept_languages": {
				"Comment": "Cleared for Firefox default depending on locale. I am revealing timezone and as most users don't visit fingerprinting sites, this may result in fitting the local mass better.",
				"Status": "clear",
				"Type": "string",
				"Value": "en-US, en"
			},
			"intl.multilingual.downloadEnabled": {
				"Comment": "Allow downloading additional languages?",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"intl.multilingual.enabled": {
				"Comment": "Allow changing language from settings.",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"javascript.use_us_english_locale": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "user",
				"Type": "boolean",
				"Value": true
			},
			"layout.css.always_underline_links": {
				"Comment": "Underscore links by default, disabling allowed",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"layout.css.devPixelsPerPx": {
				"Comment": "ui.textScaleFactor 90 does practically the same with less side effects.",
				"Status": "clear",
				"Type": "string"
			},
			"layout.css.font-variant-emoji.enabled": {
				"Comment": "Experimental, disabled by default.",
				"Status": "default",
				"Value": true
			},
			"layout.css.prefers-color-scheme.content-override": {
				"Comment": "Clear ensures system color scheme (darkman)",
				"Status": "clear"
			},
			"layout.css.visited_links_enabled": {
				"Comment": "Don't display visited links with different colour. https://josephpetitti.com/blog/how-css-can-leak-your-browser-history",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"media.autoplay.blocking_policy": {
				"Comment": "2 - Click to play media",
				"Status": "default",
				"Type": "number",
				"Value": 2
			},
			"media.autoplay.default": {
				"Comment": "5 blocks autoplay entirely (unless allowed per site from the navbar menu). 2 should open the prompt by default.",
				"Status": "default",
				"Type": "number",
				"Value": 5
			},
			"media.eme.enabled": {
				"Comment": "Resets DRM to disabled on start.",
				"Status": "user",
				"Type": "boolean",
				"Value": false
			},
			"network.IDN_show_punycode": {
				"Comment": "Use punycode when displaying international domain names.",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.dns.echconfig.enabled": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.dns.http3_echconfig.enabled": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.dns.native_https_query": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.dns.native_https_query_in_automation": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.dns.preferIPv6": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.dns.use_https_rr_as_altsvc": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.trr.disable-ECS": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.trr.display_fallback_warning": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.trr.early-AAAA": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"network.trr.exclude-etc-hosts": {
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"network.trr.useGET": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"pdfjs.enableScripting": {
				"Comment": "I don't see a good reason for allowing scripts in pdf files in a web browser.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"pdfjs.forcePageColors": {
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"pdfjs.isEvalSupported": {
				"Comment": "CVE-2024-4367 and hardening. I don't think pdf files should be that clever.",
				"Status": "locked",
				"Type": "boolean",
				"Value": false
			},
			"pdfjs.pageColorsBackground": {
				"Status": "default",
				"Type": "string",
				"Value": "#000000"
			},
			"pdfjs.pageColorsForeground": {
				"Status": "default",
				"Type": "string",
				"Value": "#ffb700"
			},
			"privacy.fingerprintingProtection": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"privacy.fingerprintingProtection.overrides": {
				"Comment": "Preference not allowed for stability reasons. :( https://searchfox.org/mozilla-central/source/toolkit/components/resistfingerprinting/RFPTargets.inc - If you adjust this, see also use_document_fonts to not increase fingerprinting surface excessively",
				"Status": "locked",
				"Type": "string",
				"Value": "+AllTargets,-KeyboardEvents,-CSSPrefersColorScheme,-CSSPrefersReducedMotion,-JSDateTimeUTC,-FontVisibilityBaseSystem,-FontVisibilityRestrictGenerics"
			},
			"privacy.fingerprintingProtection.pbmode": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"privacy.globalprivacycontrol.enabled": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"privacy.resistFingerprinting.letterboxing": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"privacy.userContext.enabled": {
				"Comment": "Tab containers",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"privacy.userContext.ui.enabled": {
				"Comment": "Tab containers UI without extensions",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"reader.parse-on-load.force-enabled": {
				"Comment": "Preference not allowed for stability reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"security.OCSP.require": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"security.insecure_connection_text.enabled": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"security.insecure_connection_text.pbmode.enabled": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"security.ssl.enable_ocsp_must_staple": {
				"Comment": "Preference not allowed for security reasons. :(",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"security.ssl.enable_ocsp_stapling": {
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"security.tls.ech.grease_http3": {
				"Comment": "Seems to be required for http3. This defaults to true on Nightly 128 and false on 115.11.0esr. However again not allowed to be deployed here for security :()",
				"Status": "locked",
				"Type": "boolean",
				"Value": true
			},
			"sidebar.revamp": {
				"Comment": "Preference not allowed for stability reasons.",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"sidebar.verticalTabs": {
				"Comment": "Preference not allowed for stability reasons.",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"sidebar.visibility": {
				"Comment": "Preference not allowed for stability reasons.",
				"Status": "locked",
				"Type": "boolean",
				"Value": "always-show"
			},
			"toolkit.telemetry.dap_enabled": {
				"Comment": "Preference not allowed for stability reasons. Distributed Aggregation Protocol for making telemetry more private. https://github.com/ietf-wg-ppm/draft-ietf-ppm-dap",
				"Status": "default",
				"Type": "boolean",
				"Value": true
			},
			"ui.prefersReducedMotion": {
				"Comment": "0 for full animation, 1 for reduced motion",
				"Status": "locked",
				"Type": "number",
				"Value": 1
			},
			"ui.systemUsesDarkTheme": {
				"Comment": "Another theme option that should be let to system, thus clear.",
				"Status": "clear"
			},
			"ui.textScaleFactor": {
				"Comment": "Use this instead of layout.css.devPixelsPerPx. Then zoom 120 % seems great.",
				"Status": "default",
				"Type": "number",
				"Value": 90
			}
		},
		"PromptForDownloadLocation": true,
		"RequestedLocales": "en-US, en",
		"SearchEngines": {
			"Add": [
				{
					"Name": "DuckDuckGo Lite",
					"Alias": "dl",
					"Description": "Minimal, ad-free version of DuckDuckGo",
					"IconURL": "https://start.duckduckgo.com/static-assets/favicons/DDG-icon_256x256.png",
					"Method": "POST",
					"PostData": "q={searchTerms}",
					"SuggestURLTemplate": "https://start.duckduckgo.com/ac/?q={searchTerms}&type=list",
					"URLTemplate": "https://duckduckgo.com/lite/?q={searchTerms}"
				},
				{
					"Name": "DuckDuckGo Start",
					"Alias": "d",
					"Description": "DuckDuckGo Start page version",
					"IconURL": "https://start.duckduckgo.com/static-assets/favicons/DDG-icon_256x256.png",
					"Method": "GET",
					"SuggestURLTemplate": "https://start.duckduckgo.com/ac/?q={searchTerms}&type=list",
					"URLTemplate": "https://start.duckduckgo.com/?q={searchTerms}"
				},
				{
					"Name": "Ecosia search",
					"Alias": "e",
					"Description": "Ecosia Search Engine",
					"IconURL": "https://cdn-static.ecosia.org/static/icons/favicon.ico",
					"Method": "GET",
					"SuggestURLTemplate": "https://ac.ecosia.org/autocomplete?q={searchTerms}",
					"URLTemplate": "https://www.ecosia.org/search?q={searchTerms}&addon=firefoxgpo"
				},
				{
					"Name": "Mullvad Leta",
					"Alias": "ml",
					"Description": "A privacy focused search engine provided by Mullvad.",
					"IconURL": "https://mullvad.net/favicon.ico",
					"Method": "GET",
					"URLTemplate": "https://leta.mullvad.net/?q={searchTerms}&engine=brave"
				},
				{
					"Name": "Brave Search",
					"Alias": "b",
					"Description": "Brave Search",
					"IconURL": "https://cdn.search.brave.com/serp/v2/_app/immutable/assets/favicon.acxxetWH.ico",
					"Method": "GET",
					"SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}",
					"URLTemplate": "https://search.brave.com/search?q={searchTerms}"
				},
				{
					"Name": "Brave Search Goggles",
					"Alias": "bg",
					"Description": "Brave Search Goggles",
					"IconURL": "https://cdn.search.brave.com/serp/v2/_app/immutable/assets/favicon.acxxetWH.ico",
					"Method": "GET",
					"SuggestURLTemplate": "https://search.brave.com/api/suggest?q={searchTerms}",
					"URLTemplate": "https://search.brave.com/goggles?q={searchTerms}"
				}
			],
			"Default": "Ecosia search"
		},
		"SearchSuggestEnabled": false,
		"SecurityDevices": {
			"Add": {
				"Debian OpenSC onepin": "/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so",
				"Fedora OpenSC onepin": "/usr/lib64/onepin-opensc-pkcs11.so",
				"Fujitsu mPollux DigiSignApplication": "/usr/lib64/libcryptoki.so"
			}
		},
		"ShowHomeButton": true,
		"StartDownloadsInTempDirectory": true,
		"UserMessaging": {
			"ExtensionRecommendations": false,
			"FeatureRecommendations": false,
			"Locked": false,
			"MoreFromMozilla": false,
			"SkipOnboarding": false,
			"UrlbarInterventions": false
		},
		"WindowsSSO": true
	}
}