From 3fbcad900d853d6fb1af2fbf483fbb01c1be88e1 Mon Sep 17 00:00:00 2001
From: Nico <nico@astolfo.org>
Date: Sat, 3 May 2025 16:15:59 +1000
Subject: [PATCH] firefox: enable more privacy settings such as
 resistFingerprinting

---
 modules/firefox.nix | 27 ++++++++++++++++++++++++++-
 1 file changed, 26 insertions(+), 1 deletion(-)

diff --git a/modules/firefox.nix b/modules/firefox.nix
index 357072c..6098505 100644
--- a/modules/firefox.nix
+++ b/modules/firefox.nix
@@ -107,9 +107,34 @@
   };
 
   programs.firefox.autoConfig = ''
+    // appearance
     lockPref("sidebar.revamp", true);
     lockPref("sidebar.verticalTabs", true);
-    lockPref("media.videocontrols.picture-in-picture.enable-when-switching-tabs.enabled", true);
+    lockPref("extensions.activeThemeID", "firefox-compact-dark@mozilla.org");
+    lockPref("browser.toolbars.bookmarks.visibility", "newtab");
+
+    // safe autoscroll
+    lockPref("middlemouse.paste", false);
     lockPref("general.autoScroll", true);
+
+    // auto picture in picture when switch tabs
+    lockPref("media.videocontrols.picture-in-picture.enable-when-switching-tabs.enabled", true);
+
+    // use same search engine (duckduckgo) for private browsing
+    lockPref("browser.search.separatePrivateDefault", false);
+
+    // enable letterboxing & resist fingerprinting
+    lockPref("privacy.resistFingerprinting.letterboxing", true);
+    lockPref("privacy.resistFingerprinting", true);
+
+    // stop extensions connecting to the internet
+    lockPref(
+      "extensions.webextensions.base-content-security-policy",
+      "default-src 'none'; script-src 'none'; object-src 'none';"
+    );
+    lockPref(
+      "extensions.webextensions.base-content-security-policy.v3",
+      "default-src 'none'; script-src 'none'; object-src 'none';"
+    );
   '';
 }