mirror of
https://github.com/Nexoniarz/nexoniarz-config-nixos-laptop.git
synced 2026-11-03 04:24:27 +00:00
863abb4fd3
Same modules and settings as nexoniarz-config-nixos; only hardware.nix differs. Pantheon/LightDM -> Plasma 6/SDDM, systemd-boot -> Limine, system.nix/drivers.nix split into focused modules, Firefox prefs and fastfetch config in configs/. Laptop hardware kept: AMD 680M + RTX 4050 PRIME offload (bus IDs unchanged), NVIDIA suspend fix, asusd + supergfxd, tablet driver, DualSense ERTM fix, laptop scripts (brightness, hotspot, telemetry, weather). Dropped: GoPro v4l2loopback webcam, blueman. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
121 lines
5.1 KiB
JavaScript
121 lines
5.1 KiB
JavaScript
// Nexoniarz's Firefox prefs (Firefox 157, "Nova" design)
|
|
//
|
|
// Loaded by NixOS (modules/firefox.nix) into Firefox's autoconfig. pref()
|
|
// sets the value on every Firefox start but doesn't lock it: you can still
|
|
// change things in Settings/about:config, they just reset on next start.
|
|
// To change a setting permanently, edit it here and nixos-rebuild.
|
|
// To stop managing a setting, delete its line (Firefox then keeps
|
|
// whatever value it last had).
|
|
//
|
|
// GPU video decoding also needs env vars set in modules/hardware.nix:
|
|
// LIBVA_DRIVER_NAME=nvidia NVD_BACKEND=direct MOZ_DISABLE_RDD_SANDBOX=1
|
|
|
|
/*** PRIVACY: tracking & fingerprinting ***/
|
|
|
|
// Strict Enhanced Tracking Protection: blocks trackers, cryptominers and
|
|
// known fingerprinters, isolates cookies per site (Total Cookie Protection),
|
|
// strips tracking parameters from URLs, and turns on fingerprintingProtection
|
|
// (randomized canvas, fewer exposed hardware details).
|
|
// If a site breaks: click the shield in the address bar and turn it off
|
|
// for that site only.
|
|
pref("browser.contentblocking.category", "strict");
|
|
|
|
// resistFingerprinting replaced by the fingerprintingProtection above. RFP
|
|
// forced light mode, UTC time and English pages on every site.
|
|
pref("privacy.resistFingerprinting", false);
|
|
pref("privacy.spoof_english", 0);
|
|
// First-party isolation stays ON. Every existing cookie in this profile was
|
|
// saved with a first-party tag; turning this off makes Firefox ignore them
|
|
// all (logged out everywhere). Works alongside Strict mode.
|
|
pref("privacy.firstparty.isolate", true);
|
|
|
|
// Cross-site requests only send the origin (https://site.com/), not the
|
|
// full page URL you came from.
|
|
pref("network.http.referer.XOriginTrimmingPolicy", 2);
|
|
|
|
// Tell sites not to sell/share your data (legally binding in some places).
|
|
pref("privacy.globalprivacycontrol.enabled", true);
|
|
|
|
// No WebRTC: stops IP leaks. Web video calls (Meet, Discord in-browser)
|
|
// need this set to true.
|
|
pref("media.peerconnection.enabled", false);
|
|
|
|
/*** PRIVACY: Mozilla data collection ***/
|
|
|
|
pref("datareporting.healthreport.uploadEnabled", false);
|
|
pref("datareporting.policy.dataSubmissionEnabled", false);
|
|
pref("datareporting.usage.uploadEnabled", false);
|
|
pref("toolkit.telemetry.enabled", false);
|
|
pref("toolkit.telemetry.unified", false);
|
|
pref("app.shield.optoutstudies.enabled", false);
|
|
pref("app.normandy.enabled", false);
|
|
pref("nimbus.rollouts.enabled", false);
|
|
pref("browser.discovery.enabled", false);
|
|
|
|
// Firefox Suggest launched in Poland with Firefox 157; it adds sponsored
|
|
// results to the address bar.
|
|
pref("browser.urlbar.quicksuggest.enabled", false);
|
|
pref("browser.urlbar.suggest.quicksuggest.sponsored", false);
|
|
pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false);
|
|
pref("browser.newtabpage.activity-stream.showSponsored", false);
|
|
pref("browser.newtabpage.activity-stream.showSponsoredTopSites", false);
|
|
|
|
/*** SECURITY ***/
|
|
|
|
// HTTPS-Only: upgrade every site to HTTPS and warn before loading plain
|
|
// HTTP. Was enabled once, but it's off now.
|
|
pref("dom.security.https_only_mode", true);
|
|
|
|
// Safe Browsing back on for malware/phishing. It checks a local list and
|
|
// only sends a partial hash when a URL matches, never your history.
|
|
// The remote download check (which uploads file metadata to Google) stays off.
|
|
pref("browser.safebrowsing.malware.enabled", true);
|
|
pref("browser.safebrowsing.phishing.enabled", true);
|
|
pref("browser.safebrowsing.downloads.enabled", true);
|
|
pref("browser.safebrowsing.downloads.remote.enabled", false);
|
|
|
|
/*** NETWORK ***/
|
|
|
|
// DNS: use the system resolver (systemd-resolved with DNS-over-TLS) and
|
|
// never let Firefox switch itself to its own DNS-over-HTTPS provider.
|
|
pref("network.trr.mode", 5);
|
|
|
|
// No preloading pages or DNS you didn't ask for.
|
|
pref("network.dns.disablePrefetch", true);
|
|
pref("network.prefetch-next", false);
|
|
pref("network.http.speculative-parallel-limit", 0);
|
|
pref("browser.urlbar.speculativeConnect.enabled", false);
|
|
pref("network.captive-portal-service.enabled", false);
|
|
pref("network.connectivity-service.enabled", false);
|
|
|
|
/*** GPU VIDEO DECODING (RTX 3060 Ti, nvidia-vaapi-driver) ***/
|
|
|
|
// Firefox blocklists VA-API on NVIDIA; force it on. The 3060 Ti decodes
|
|
// H.264, VP9 and AV1 in hardware. (media.ffmpeg.vaapi.enabled is gone
|
|
// since Firefox 137; this pref replaced it.)
|
|
pref("media.hardware-video-decoding.force-enabled", true);
|
|
pref("media.rdd-ffmpeg.enabled", true);
|
|
pref("gfx.webrender.all", true);
|
|
|
|
/*** LOOK & FEEL ***/
|
|
|
|
// Compact mode (back in Firefox 157): thinner tabs and toolbars.
|
|
// Switch back via ☰ > More tools > Customize toolbar > Density.
|
|
pref("browser.compactmode.show", true);
|
|
pref("browser.uidensity", 1);
|
|
|
|
// Smoother, momentum-based scrolling, nicer at 240 Hz.
|
|
pref("general.smoothScroll.msdPhysics.enabled", true);
|
|
|
|
// Middle-click on a page to autoscroll (like on Windows).
|
|
pref("general.autoScroll", true);
|
|
|
|
// Closing the last tab doesn't close the window.
|
|
pref("browser.tabs.closeWindowWithLastTab", false);
|
|
|
|
// Show the full URL including https:// so you always see what site you're on.
|
|
pref("browser.urlbar.trimHttps", false);
|
|
pref("browser.urlbar.trimURLs", false);
|
|
|
|
// No "proceed with caution" page every time you open about:config.
|
|
pref("browser.aboutConfig.showWarning", false);
|