diff --git a/.config/aliasrc b/.config/aliasrc index d6518b6..163181b 100644 --- a/.config/aliasrc +++ b/.config/aliasrc @@ -45,8 +45,6 @@ alias yd='youtube-dl' #dotfiles configuration alias alias config='git --git-dir=$HOME/.cfg/ --work-tree=$HOME' -alias chrome='firejail chromium --ozone-platform-hint=auto' - note() { NOTEFILE="$HOME/.cache/notes" if [ "$#" -lt 1 ]; then diff --git a/.config/tofi/config b/.config/tofi/config new file mode 100644 index 0000000..2ffc6ae --- /dev/null +++ b/.config/tofi/config @@ -0,0 +1,16 @@ +anchor = top +width = 100% +height = 24 +horizontal = true +font-size = 12 +prompt-text = " run: " +font = monospace +outline-width = 0 +border-width = 0 +background-color = #000000 +min-input-width = 120 +result-spacing = 15 +padding-top = 0 +padding-bottom = 0 +padding-left = 0 +padding-right = 0 diff --git a/.librewolf/librewolf.overrides.cfg b/.librewolf/librewolf.overrides.cfg index 1fea332..fdccf51 100755 --- a/.librewolf/librewolf.overrides.cfg +++ b/.librewolf/librewolf.overrides.cfg @@ -1,547 +1,5 @@ -/** LIBREWOLF SETTINGS - * - * please take the time to read and understand, but also to customize the settings to find your own setup. - * the answers to the most common questions are at this link https://librewolf.net/docs/faq/ - * - * WARNING: please make sure the first line of this file is empty. this is a known bug. - */ -defaultPref("librewolf.cfg.version", "6.10"); - - -/** INDEX - * the file is organized in categories, and each one has a number of sections: - * - * PRIVACY [ISOLATION, SANITIZING, CACHE AND STORAGE, HISTORY AND SESSION RESTORE, QUERY STRIPPING] - * NETWORKING [HTTPS, REFERERS, WEBRTC, PROXY, DNS, PREFETCHING AND SPECULATIVE CONNECTIONS, OFFLINE] - * FINGERPRINTING [RFP, WEBGL] - * SECURITY [SITE ISOLATION, CERTIFICATES, TLS/SSL, PERMISSIONS, FONTS, SAFE BROWSING, OTHERS] - * REGION [LOCATION, LANGUAGE] - * BEHAVIOR [DRM, SEARCH AND URLBAR, DOWNLOADS, AUTOPLAY, POP-UPS AND WINDOWS, MOUSE] - * EXTENSIONS [USER INSTALLED, SYSTEM, EXTENSION FIREWALL] - * BUILT-IN FEATURES [UPDATER, SYNC, LOCKWISE, CONTAINERS, DEVTOOLS, OTHERS] - * UI [BRANDING, HANDLERS, FIRST LAUNCH, NEW TAB PAGE, ABOUT, RECOMMENDED] - * TELEMETRY - * WINDOWS [UPDATES, OTHERS] - */ - - - -/** [CATEGORY] PRIVACY */ - -/** [SECTION] ISOLATION - * default to strict mode, which includes: - * 1. dFPI for both normal and private windows - * 2. strict blocking lists for trackers - * 3. shims to avoid breakage caused by blocking lists - * 4. stricter policies for xorigin referrers - * 5. dFPI specific cookie cleaning mechanism - * 6. query stripping - * - * the desired category must be set with pref() otherwise it won't stick. - * the UI that allows to change mode manually is hidden. - */ -pref("browser.contentblocking.category", "strict"); -defaultPref("privacy.partition.serviceWorkers", true); // default v105+ -defaultPref("privacy.partition.always_partition_third_party_non_cookie_storage", true); // enable APS - -/** [SECTION] SANITIZING - * all the cleaning prefs true by default except for siteSetting and offlineApps, - * which is what we want. users should set manual exceptions in the UI if there - * are cookies they want to keep. - */ -defaultPref("privacy.clearOnShutdown.offlineApps", true); -defaultPref("privacy.sanitize.sanitizeOnShutdown", true); -defaultPref("privacy.sanitize.timeSpan", 0); - +defaultPref("privacy.resistFingerprinting.letterboxing", true); defaultPref("privacy.clearOnShutdown.history", false); defaultPref("privacy.clearOnShutdown.downloads", false); -/** [SECTION] CACHE AND STORAGE */ -defaultPref("browser.cache.disk.enable", false); // disable disk cache -/** prevent media cache from being written to disk in pb, but increase max cache size to avoid playback issues */ -defaultPref("browser.privatebrowsing.forceMediaMemoryCache", true); -defaultPref("media.memory_cache_max_size", 65536); -// disable favicons in profile folder and page thumbnail capturing -defaultPref("browser.shell.shortcutFavicons", false); -defaultPref("browser.pagethumbnails.capturing_disabled", true); -defaultPref("browser.helperApps.deleteTempFileOnExit", true); // delete temporary files opened with external apps - -/** [SECTION] HISTORY AND SESSION RESTORE - * since we hide the UI for modes other than custom we want to reset it for - * everyone. same thing for always on PB mode. - */ -pref("privacy.history.custom", true); -pref("browser.privatebrowsing.autostart", false); -defaultPref("browser.formfill.enable", false); // disable form history -defaultPref("browser.sessionstore.privacy_level", 2); // prevent websites from storing session data like cookies and forms -defaultPref("browser.sessionstore.interval", 60000); // increase time between session saves - -/** [SECTION] QUERY STRIPPING - * currently we set the same query stripping list that brave uses: - * https://github.com/brave/brave-core/blob/f337a47cf84211807035581a9f609853752a32fb/browser/net/brave_site_hacks_network_delegate_helper.cc#L29 - */ -defaultPref("privacy.query_stripping.strip_list", "__hsfp __hssc __hstc __s _hsenc _openstat dclid fbclid gbraid gclid hsCtaTracking igshid mc_eid ml_subscriber ml_subscriber_hash msclkid oft_c oft_ck oft_d oft_id oft_ids oft_k oft_lk oft_sk oly_anon_id oly_enc_id rb_clickid s_cid twclid vero_conv vero_id wbraid wickedid yclid"); -/** - * librewolf specific pref that allows to include the query stripping lists in uBO by default. - * the asset file is fetched every 7 days. - */ -defaultPref("librewolf.uBO.assetsBootstrapLocation", "https://gitlab.com/librewolf-community/browser/source/-/raw/main/assets/uBOAssets.json"); - - - -/** [CATEGORY] NETWORKING */ - -/** [SECTION] HTTPS */ -defaultPref("dom.security.https_only_mode", true); // only allow https in all windows, including private browsing -defaultPref("network.auth.subresource-http-auth-allow", 1); // block HTTP authentication credential dialogs -defaultPref("security.mixed_content.block_display_content", true); // block insecure passive content - -/** [SECTION] REFERERS - * to enhance privacy but keep a certain level of usability we trim cross-origin - * referers, instead of completely avoid sending them. - * as a general rule, the behavior of referes which are not cross-origin should not - * be changed. - */ -defaultPref("network.http.referer.XOriginPolicy", 0); // default, might be worth changing to 2 to stop sending them completely -defaultPref("network.http.referer.XOriginTrimmingPolicy", 2); // trim referer to only send scheme, host and port - -/** [SECTION] WEBRTC - * there's no point in disabling webrtc as mDNS protects the private IP on linux, osx and win10+. - * with the below preference we protect the value even in trusted environments and for win7/8 users, - * although this will likely cause breakage. - */ -defaultPref("media.peerconnection.ice.no_host", true); // don't use any private IPs for ICE candidate -defaultPref("media.peerconnection.ice.default_address_only", true); // use a single interface for ICE candidates, the vpn one when a vpn is used - -/** [SECTION] PROXY */ -defaultPref("network.gio.supported-protocols", ""); // disable gio as it could bypass proxy -defaultPref("network.file.disable_unc_paths", true); // hidden, disable using uniform naming convention to prevent proxy bypass -defaultPref("network.proxy.socks_remote_dns", true); // forces dns query through the proxy when using one -defaultPref("media.peerconnection.ice.proxy_only_if_behind_proxy", true); // force webrtc inside proxy when one is used - -/** [SECTION] DNS */ -defaultPref("network.trr.confirmationNS", "skip"); // skip undesired doh test connection -defaultPref("network.dns.disablePrefetch", true); // disable dns prefetching -/** - * librewolf doesn't use DoH, but it can be enabled with the following prefs: - * pref("network.trr.mode", 2); - * pref("network.trr.uri", "https://dns.quad9.net/dns-query"); - * - * the possible modes are: - * 0 = default - * 1 = browser picks faster - * 2 = DoH with system dns fallback - * 3 = DoH without fallback - * 5 = DoH is off, default currently - */ - -/** [SECTION] PREFETCHING AND SPECULATIVE CONNECTIONS - * disable prefecthing for different things such as links, bookmarks and predictors. - */ -lockPref("network.predictor.enabled", false); -lockPref("network.prefetch-next", false); -lockPref("network.http.speculative-parallel-limit", 0); -defaultPref("browser.places.speculativeConnect.enabled", false); -// disable speculative connections and domain guessing from the urlbar -defaultPref("browser.urlbar.speculativeConnect.enabled", false); - -/** [SECTION] OFFLINE - * let users set the browser as offline, without the browser trying to guess. - */ -defaultPref("network.manage-offline-status", false); - - - -/** [CATEGORY] FINGERPRINTING */ - -/** [SECTION] RFP - * librewolf should stick to RFP for fingerprinting. we should not set prefs that interfere with it - * and disabling API for no good reason will be counter productive, so it should also be avoided. - */ -defaultPref("privacy.resistFingerprinting", true); -// rfp related settings -defaultPref("privacy.resistFingerprinting.block_mozAddonManager", true); // prevents rfp from breaking AMO -defaultPref("browser.startup.blankWindow", false); // if set to true it breaks RFP windows resizing -defaultPref("browser.display.use_system_colors", false); // default but enforced due to RFP -/** - * increase the size of new RFP windows for better usability, while still using a rounded value. - * if the screen resolution is lower it will stretch to the biggest possible rounded value. - * also, expose hidden letterboxing pref but do not enable it for now. - */ -defaultPref("privacy.window.maxInnerWidth", 1600); -defaultPref("privacy.window.maxInnerHeight", 900); -defaultPref("privacy.resistFingerprinting.letterboxing", true); - -/** [SECTION] WEBGL */ -defaultPref("webgl.disabled", true); - - - -/** [CATEGORY] SECURITY */ - -/** [SECTION] CERTIFICATES */ -defaultPref("security.cert_pinning.enforcement_level", 2); // enable strict public key pinning, might cause issues with AVs -/** - * enable safe negotiation and show warning when it is not supported. might cause breakage. - */ -defaultPref("security.ssl.require_safe_negotiation", true); -defaultPref("security.ssl.treat_unsafe_negotiation_as_broken", true); -/** - * our strategy with revocation is to perform all possible checks with CRL, but when a cert - * cannot be checked with it we use OCSP stapled with hard-fail, to still keep privacy and - * increase security. - * crlite is in mode 3 by default, which allows us to detect false positive with OCSP. - * in v103, when crlite is fully mature, it will switch to mode 2 and no longer double-check. - */ -defaultPref("security.remote_settings.crlite_filters.enabled", true); -defaultPref("security.OCSP.require", true); // set to hard-fail - -/** [SECTION] TLS/SSL */ -lockPref("security.tls.enable_0rtt_data", false); // disable 0 RTT to improve tls 1.3 security -pref("security.tls.version.enable-deprecated", false); // make TLS downgrades session only by enforcing it with pref() -// show relevant and advanced issues on warnings and error screens -defaultPref("browser.ssl_override_behavior", 1); -defaultPref("browser.xul.error_pages.expert_bad_cert", true); - -/** [SECTION] PERMISSIONS */ -lockPref("permissions.delegation.enabled", false); // force permission request to show real origin -lockPref("permissions.manager.defaultsUrl", ""); // revoke special permissions for some mozilla domains - -/** [SECTION] FONTS */ -defaultPref("gfx.font_rendering.opentype_svg.enabled", false); // disale svg opentype fonts - -/** [SECTION] SAFE BROWSING - * disable safe browsing, including the fetch of updates. reverting the 7 prefs below - * allows to perform local checks and to fetch updated lists from google. - */ -defaultPref("browser.safebrowsing.malware.enabled", false); -defaultPref("browser.safebrowsing.phishing.enabled", false); -defaultPref("browser.safebrowsing.blockedURIs.enabled", false); -defaultPref("browser.safebrowsing.provider.google4.gethashURL", ""); -defaultPref("browser.safebrowsing.provider.google4.updateURL", ""); -defaultPref("browser.safebrowsing.provider.google.gethashURL", ""); -defaultPref("browser.safebrowsing.provider.google.updateURL", ""); -/** - * disable safe browsing checks on downloads, both local and remote. the locked prefs - * control remote checks, while the first one is for local checks only. - */ -defaultPref("browser.safebrowsing.downloads.enabled", false); -lockPref("browser.safebrowsing.downloads.remote.enabled", false); -lockPref("browser.safebrowsing.downloads.remote.url", ""); -lockPref("browser.safebrowsing.downloads.remote.block_potentially_unwanted", false); -lockPref("browser.safebrowsing.downloads.remote.block_uncommon", false); -// other safe browsing options, all default but enforce -lockPref("browser.safebrowsing.passwords.enabled", false); -lockPref("browser.safebrowsing.provider.google4.dataSharing.enabled", false); -lockPref("browser.safebrowsing.provider.google4.dataSharingURL", ""); - -/** [SECTION] OTHERS */ -defaultPref("network.IDN_show_punycode", true); // use punycode in idn to prevent spoofing -defaultPref("pdfjs.enableScripting", false); // disable js scripting in the built-in pdf reader - - - -/** [CATEGORY] REGION */ - -/** [SECTION] LOCATION - * replace google with mozilla as the default geolocation provide and prevent use of OS location services - */ -defaultPref("geo.provider.network.url", "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%"); -lockPref("geo.provider.ms-windows-location", false); // [WINDOWS] -lockPref("geo.provider.use_corelocation", false); // [MAC] -lockPref("geo.provider.use_gpsd", false); // [LINUX] -defaultPref("geo.provider.use_geoclue", false); // [LINUX] - -/** [SECTION] LANGUAGE - * show language as en-US for all users, regardless of their OS language and browser language. - * both prefs must use pref() and not defaultPref to work. - */ -pref("javascript.use_us_english_locale", true); -pref("intl.accept_languages", "en-US, en"); -// disable region specific updates from mozilla -lockPref("browser.region.network.url", ""); -lockPref("browser.region.update.enabled", false); - - - -/** [CATEGORY] BEHAVIOR */ - -/** [SECTION] DRM */ -defaultPref("media.eme.enabled", false); // master switch for drm content -defaultPref("media.gmp-manager.url", "data:text/plain,"); // prevent checks for plugin updates when drm is disabled -// disable the widevine and the openh264 plugins -defaultPref("media.gmp-provider.enabled", false); -defaultPref("media.gmp-gmpopenh264.enabled", false); - -/** [SECTION] SEARCH AND URLBAR - * disable search suggestion and do not update opensearch engines. - */ -defaultPref("browser.urlbar.suggest.searches", false); -defaultPref("browser.search.suggest.enabled", false); -defaultPref("browser.search.update", false); -/** - * the pref disables the whole feature and hide it from the ui - * (as noted in https://bugzilla.mozilla.org/show_bug.cgi?id=1755057). - * this also includes the best match feature, as it is part of firefox suggest. - */ -pref("browser.urlbar.quicksuggest.enabled", false); - -/** [SECTION] DOWNLOADS - * user interaction should always be required for downloads, as a way to enhance security by asking - * the user to specific a certain save location. - */ -defaultPref("browser.download.useDownloadDir", false); -defaultPref("browser.download.autohideButton", false); // do not hide download button automatically -defaultPref("browser.download.manager.addToRecentDocs", false); // do not add downloads to recents -defaultPref("browser.download.alwaysOpenPanel", false); // do not expand toolbar menu for every download, we already have enough interaction - -/** [SECTION] AUTOPLAY - * block autoplay unless element is clicked, and apply the policy to all elements - * including muted ones. - */ -defaultPref("media.autoplay.blocking_policy", 2); -defaultPref("media.autoplay.default", 5); - -/** [SECTION] POP-UPS AND WINDOWS - * disable annoyin pop-ups and limit events that can trigger them. - */ -defaultPref("dom.disable_beforeunload", true); // disable "confirm you want to leave" pop-ups -defaultPref("dom.disable_open_during_load", true); // block pop-ups windows -defaultPref("dom.popup_allowed_events", "click dblclick mousedown pointerdown"); -/** - * prevent scripts from resizing existing windows and opening new ones, by forcing them into - * new tabs that can't be resized as well. - */ -defaultPref("dom.disable_window_move_resize", true); -defaultPref("browser.link.open_newwindow", 3); -defaultPref("browser.link.open_newwindow.restriction", 0); - -/** [SECTION] MOUSE */ -defaultPref("middlemouse.contentLoadURL", false); // prevent mouse middle click from opening links - - - -/** [CATEGORY] EXTENSIONS */ - -/** [SECTION] USER INSTALLED - * extensions are allowed to operate on restricted domains, while their scope - * is set to profile+applications (https://mike.kaply.com/2012/02/21/understanding-add-on-scopes/). - * an installation prompt should always be displayed. - */ -defaultPref("extensions.webextensions.restrictedDomains", ""); -defaultPref("extensions.enabledScopes", 5); // hidden -defaultPref("extensions.postDownloadThirdPartyPrompt", false); - -/** [SECTION] SYSTEM - * built-in extension are not allowed to auto-update. additionally the reporter extension - * of webcompat is disabled. urls are stripped for defense in depth. - */ -defaultPref("extensions.systemAddon.update.enabled", false); -defaultPref("extensions.systemAddon.update.url", ""); -lockPref("extensions.webcompat-reporter.enabled", false); -lockPref("extensions.webcompat-reporter.newIssueEndpoint", ""); - -/** [SECTION] EXTENSION FIREWALL - * the firewall can be enabled with the below prefs, but it is not a sane default: - * defaultPref("extensions.webextensions.base-content-security-policy", "default-src 'none'; script-src 'none'; object-src 'none';"); - * defaultPref("extensions.webextensions.base-content-security-policy.v3", "default-src 'none'; script-src 'none'; object-src 'none';"); - */ - - - -/** [CATEGORY] BUILT-IN FEATURES */ - -/** [SECTION] UPDATER - * since we do not bake auto-updates in the browser it doesn't make sense at the moment. - */ -lockPref("app.update.auto", false); - -/** [SECTION] SYNC - * this functionality is disabled by default but it can be activated in one click. - * this pref fully controls the feature, including its ui. - */ -defaultPref("identity.fxaccounts.enabled", false); - -/** [SECTION] LOCKWISE - * disable the default password manager built into the browser, including its autofill - * capabilities and formless login capture. - */ -defaultPref("signon.rememberSignons", false); -defaultPref("signon.autofillForms", false); -defaultPref("extensions.formautofill.addresses.enabled", false); -defaultPref("extensions.formautofill.creditCards.enabled", false); -defaultPref("signon.formlessCapture.enabled", false); - -/** [SECTION] CONTAINERS - * enable containers and show the settings to control them in the stock ui - */ -defaultPref("privacy.userContext.enabled", true); -defaultPref("privacy.userContext.ui.enabled", true); - -/** [SECTION] DEVTOOLS - * disable chrome and remote debugging. - */ -defaultPref("devtools.chrome.enabled", false); -defaultPref("devtools.debugger.remote-enabled", false); -defaultPref("devtools.remote.adb.extensionURL", ""); -defaultPref("devtools.selfxss.count", 0); // required for devtools console to work - -/** [SECTION] OTHERS */ -lockPref("browser.translation.engine", ""); // remove translation engine -defaultPref("accessibility.force_disabled", 1); // block accessibility services -defaultPref("webchannel.allowObject.urlWhitelist", ""); // do not receive objects through webchannels -defaultPref("services.settings.server", "https://%.invalid") // set the remote settings URL (REMOTE_SETTINGS_SERVER_URL in the code) - - - -/** [CATEGORY] UI */ - -/** [SECTION] BRANDING - * set librewolf support and releases urls in the UI, so that users land in the proper places. - */ -defaultPref("app.support.baseURL", "https://librewolf.net/docs/faq/#"); -defaultPref("browser.search.searchEnginesURL", "https://librewolf.net/docs/faq/#how-do-i-add-a-search-engine"); -defaultPref("browser.geolocation.warning.infoURL", "https://librewolf.net/docs/faq/#how-do-i-enable-location-aware-browsing"); -defaultPref("app.feedback.baseURL", "https://librewolf.net/#questions"); -defaultPref("app.releaseNotesURL", "https://gitlab.com/librewolf-community/browser"); -defaultPref("app.releaseNotesURL.aboutDialog", "https://gitlab.com/librewolf-community/browser"); -defaultPref("app.update.url.details", "https://gitlab.com/librewolf-community/browser"); -defaultPref("app.update.url.manual", "https://gitlab.com/librewolf-community/browser"); - -/** [SECTION] FIRST LAUNCH - * disable what's new and ui tour on first start and updates. the browser - * should also not stress user about being the default one. - */ -defaultPref("browser.startup.homepage_override.mstone", "ignore"); -defaultPref("startup.homepage_override_url", "about:blank"); -defaultPref("startup.homepage_welcome_url", "about:blank"); -defaultPref("startup.homepage_welcome_url.additional", ""); -lockPref("browser.messaging-system.whatsNewPanel.enabled", false); -lockPref("browser.uitour.enabled", false); -lockPref("browser.uitour.url", ""); -defaultPref("browser.shell.checkDefaultBrowser", false); - -/** [SECTION] NEW TAB PAGE - * we want the new tab page to display nothing but the search bar without anything distracting. - */ -defaultPref("browser.newtab.preload", false); -defaultPref("browser.newtabpage.activity-stream.section.highlights.includeDownloads", false); -defaultPref("browser.newtabpage.activity-stream.section.highlights.includeVisited", false); -defaultPref("browser.newtabpage.activity-stream.feeds.topsites", false); -// hide pocket and sponsored content, from new tab page and search bar -lockPref("browser.newtabpage.activity-stream.feeds.section.topstories", false); -lockPref("browser.newtabpage.activity-stream.feeds.system.topstories", false); -lockPref("browser.newtabpage.activity-stream.feeds.telemetry", false); -lockPref("browser.newtabpage.activity-stream.feeds.section.topstories.options", "{\"hidden\":true}"); // hide buggy pocket section from about:preferences#home -lockPref("browser.newtabpage.activity-stream.showSponsored", false); -lockPref("browser.newtabpage.activity-stream.showSponsoredTopSites", false); -lockPref("browser.newtabpage.activity-stream.telemetry", false); -lockPref("browser.newtabpage.activity-stream.default.sites", ""); -lockPref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", false); -lockPref("browser.newtabpage.activity-stream.discoverystream.enabled", false); -lockPref("browser.newtabpage.activity-stream.feeds.snippets", false); // default - -/** [SECTION] ABOUT - * remove annoying ui elements from the about pages, including about:protections - */ -defaultPref("browser.contentblocking.report.lockwise.enabled", false); -defaultPref("browser.contentblocking.report.monitor.enabled", false); -lockPref("browser.contentblocking.report.hide_vpn_banner", true); -lockPref("browser.contentblocking.report.vpn.enabled", false); -lockPref("browser.contentblocking.report.show_mobile_app", false); -lockPref("browser.vpn_promo.enabled", false); -lockPref("browser.promo.focus.enabled", false); -// ...about:addons recommendations sections and more -defaultPref("extensions.htmlaboutaddons.recommendations.enabled", false); -defaultPref("extensions.getAddons.showPane", false); -defaultPref("extensions.getAddons.cache.enabled", false); // disable fetching of extension metadata -defaultPref("lightweightThemes.getMoreURL", ""); // disable button to get more themes -// ...about:preferences#home -defaultPref("browser.topsites.useRemoteSetting", false); // hide sponsored shortcuts button -// ...and about:config -defaultPref("browser.aboutConfig.showWarning", false); -// hide about:preferences#moreFromMozilla -defaultPref("browser.preferences.moreFromMozilla", false); - -/** [SECTION] RECOMMENDED - * disable all "recommend as you browse" activity. - */ -lockPref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false); -lockPref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false); - - - -/** [CATEGORY] TELEMETRY - * telemetry is already disabled elsewhere and most of the stuff in here is just for redundancy. - */ -lockPref("toolkit.telemetry.unified", false); // master switch -lockPref("toolkit.telemetry.enabled", false); // master switch -lockPref("toolkit.telemetry.server", "data:,"); -lockPref("toolkit.telemetry.archive.enabled", false); -lockPref("toolkit.telemetry.newProfilePing.enabled", false); -lockPref("toolkit.telemetry.updatePing.enabled", false); -lockPref("toolkit.telemetry.firstShutdownPing.enabled", false); -lockPref("toolkit.telemetry.shutdownPingSender.enabled", false); -lockPref("toolkit.telemetry.shutdownPingSender.enabledFirstSession", false); // default -lockPref("toolkit.telemetry.bhrPing.enabled", false); -lockPref("toolkit.telemetry.reportingpolicy.firstRun", false); // default -lockPref("toolkit.telemetry.cachedClientID", ""); -lockPref("toolkit.telemetry.previousBuildID", ""); -lockPref("toolkit.telemetry.server_owner", ""); -lockPref("toolkit.coverage.opt-out", true); // hidden -lockPref("toolkit.telemetry.coverage.opt-out", true); // hidden -lockPref("toolkit.coverage.enabled", false); -lockPref("toolkit.coverage.endpoint.base", ""); -lockPref("toolkit.crashreporter.infoURL", ""); -lockPref("datareporting.healthreport.uploadEnabled", false); -lockPref("datareporting.policy.dataSubmissionEnabled", false); -lockPref("security.protectionspopup.recordEventTelemetry", false); -lockPref("browser.ping-centre.telemetry", false); -// opt-out of normandy and studies -lockPref("app.normandy.enabled", false); -lockPref("app.normandy.api_url", ""); -lockPref("app.shield.optoutstudies.enabled", false); -// disable personalized extension recommendations -lockPref("browser.discovery.enabled", false); -lockPref("browser.discovery.containers.enabled", false); -lockPref("browser.discovery.sites", ""); -// disable crash report -lockPref("browser.tabs.crashReporting.sendReport", false); -lockPref("breakpad.reportURL", ""); -// disable connectivity checks -lockPref("network.connectivity-service.enabled", false); -// disable captive portal -lockPref("network.captive-portal-service.enabled", false); -lockPref("captivedetect.canonicalURL", ""); -// prevent sending server side analytics -lockPref("beacon.enabled", false); - -/** [CATEGORY] WINDOWS - * the prefs in this section only apply to windows installations and they don't have any - * effect on linux, macos and bsd users. - */ - -/** [SECTION] UPDATES - * disable windows specific update services. - */ -lockPref("app.update.service.enabled", false); -defaultPref("app.update.background.scheduling.enabled", false); - -/** [SECTION] OTHERS */ -lockPref("default-browser-agent.enabled", false); // disable windows specific telemetry -defaultPref("network.protocol-handler.external.ms-windows-store", false); // prevent links from launching windows store -lockPref("toolkit.winRegisterApplicationRestart", false); // disable automatic start and session restore after reboot -lockPref("security.family_safety.mode", 0); // disable win8.1 family safety cert -defaultPref("network.http.windows-sso.enabled", false); // disable MS auto authentication via sso - - - -/** [CATEGORY] OVERRIDES - * allow settings to be overriden with a file placed in the right location - * https://librewolf.net/docs/settings/#where-do-i-find-my-librewolfoverridescfg - */ -let profile_directory; -if (profile_directory = getenv('USERPROFILE') || getenv('HOME')) { - defaultPref('autoadmin.global_config_url', `file://${profile_directory}/.librewolf/librewolf.overrides.cfg`); -}