nexoniarz/nexoniarz-config-nixos-laptop
Watch
1
0
Fork
You've already forked nexoniarz-config-nixos-laptop
 0
mirror of https://github.com/Nexoniarz/nexoniarz-config-nixos-laptop.git synced 2026-11-03 04:24:27 +00:00
Code Issues Projects Releases Packages Wiki Activity

Revert "Firefox: DNS-over-HTTPS through Quad9"

Browse source 
Back to trr.mode 5: systemd-resolved already encrypts DNS (DNS-over-TLS
to Cloudflare and Quad9), so Firefox doesn't need its own DoH.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Nexoniarz 2026-10-31 12:20:41 +01:00
commit 999b49800d
1 changed files with 3 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

10
configs/firefox/prefs.js
View file

@ -102,13 +102,9 @@ pref("browser.safebrowsing.downloads.remote.enabled", false);
/*** NETWORK ***/ /*** NETWORK ***/
// DNS-over-HTTPS through Quad9 (no logging, blocks known malware domains). // DNS: use the system resolver (systemd-resolved with DNS-over-TLS) and
// Mode 2: Quad9 first; if it fails, the system resolver (systemd-resolved, // never let Firefox switch itself to its own DNS-over-HTTPS provider.
// itself DNS-over-TLS), so lookups are encrypted either way and pages don't pref("network.trr.mode", 5);
// break when Quad9 has a bad moment. Mode 3 would allow Quad9 only.
pref("network.trr.mode", 2);
pref("network.trr.uri", "https://dns.quad9.net/dns-query");
pref("network.trr.custom_uri", "https://dns.quad9.net/dns-query");
// No preloading pages or DNS you didn't ask for. // No preloading pages or DNS you didn't ask for.
pref("network.dns.disablePrefetch", true); pref("network.dns.disablePrefetch", true);