nexoniarz/nexoniarz-config-nixos-laptop
Watch
1
0
Fork
You've already forked nexoniarz-config-nixos-laptop
 0
mirror of https://github.com/Nexoniarz/nexoniarz-config-nixos-laptop.git synced 2026-11-03 04:24:27 +00:00
Code Issues Projects Releases Packages Wiki Activity

Firefox: DNS-over-HTTPS through Quad9

Browse source 
network.trr.mode 2 with dns.quad9.net: DoH first, falling back to the
system resolver (systemd-resolved over DNS-over-TLS), so lookups stay
encrypted either way. Mode 5 had turned Firefox's DoH off entirely.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Nexoniarz 2026-10-31 12:19:13 +01:00
commit 466df890c4
1 changed files with 7 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
configs/firefox/prefs.js
View file

@ -102,9 +102,13 @@ pref("browser.safebrowsing.downloads.remote.enabled", false);
/*** NETWORK ***/
// DNS: use the system resolver (systemd-resolved with DNS-over-TLS) and
// never let Firefox switch itself to its own DNS-over-HTTPS provider.
pref("network.trr.mode", 5);
// DNS-over-HTTPS through Quad9 (no logging, blocks known malware domains).
// Mode 2: Quad9 first; if it fails, the system resolver (systemd-resolved,
// itself DNS-over-TLS), so lookups are encrypted either way and pages don't
// break when Quad9 has a bad moment. Mode 3 would allow Quad9 only.
pref("network.trr.mode", 2);
pref("network.trr.uri", "https://dns.quad9.net/dns-query");
pref("network.trr.custom_uri", "https://dns.quad9.net/dns-query");
// No preloading pages or DNS you didn't ask for.
pref("network.dns.disablePrefetch", true);