nix/home-mods/firefox/_base.nix

{ config
, lib
, pkgs
, ...
}: {
  enable = true;
  # package = pkgs.firefox;

  profiles = {
    default = {
      isDefault = true;

      # userChrome = ''
      #   @-moz-document url(chrome://browser/content/browser.xhtml) {
      #       /* tabs on bottom of window */
      #       /* requires that you set
      #       * toolkit.legacyUserProfileCustomizations.stylesheets = true
      #       * in about:config
      #       */
      #       #main-window body { flex-direction: column-reverse !important; }
      #       #navigator-toolbox { flex-direction: column-reverse !important; }
      #       #urlbar {
      #           top: unset !important;
      #           bottom: calc(var(--urlbar-margin-inline)) !important;
      #           box-shadow: none !important;
      #           display: flex !important;
      #           flex-direction: column !important;
      #       }
      #       #urlbar > * {
      #           flex: none;
      #       }
      #       #urlbar-input-container {
      #           order: 2;
      #       }
      #       #urlbar > .urlbarView {
      #           order: 1;
      #           border-bottom: 1px solid #666;
      #       }
      #       #urlbar-results {
      #           display: flex;
      #           flex-direction: column-reverse;
      #       }
      #       .search-one-offs { display: none !important; }
      #       .tab-background { border-top: none !important; }
      #       #navigator-toolbox::after { border: none; }
      #       #TabsToolbar .tabbrowser-arrowscrollbox,
      #       #tabbrowser-tabs, .tab-stack { min-height: 28px !important; }
      #       .tabbrowser-tab { font-size: 80%; }
      #       .tab-content { padding: 0 5px; }
      #       .tab-close-button .toolbarbutton-icon { width: 12px !important; height: 12px !important; }
      #       toolbox[inFullscreen=true] { display: none; }
      #       /*
      #       * the following makes it so that the on-click panels in the nav-bar
      #       * extend upwards, not downwards. some of them are in the #mainPopupSet
      #       * (hamburger + unified extensions), and the rest are in
      #       * #navigator-toolbox. They all end up with an incorrectly-measured
      #       * max-height (based on the distance to the _bottom_ of the screen), so
      #       * we correct that. The ones in #navigator-toolbox then adjust their
      #       * positioning automatically, so we can just set max-height. The ones
      #       * in #mainPopupSet do _not_, and so we need to give them a
      #       * negative margin-top to offset them *and* a fixed height so their
      #       * bottoms align with the nav-bar. We also calc to ensure they don't
      #       * end up overlapping with the nav-bar itself. The last bit around
      #       * cui-widget-panelview is needed because "new"-style panels (those
      #       * using "unified" panels) don't get flex by default, which results in
      #       * them being the wrong height.
      #       *
      #       * Oh, yeah, and the popup-notification-panel (like biometrics prompts)
      #       * of course follows different rules again, and needs its own special
      #       * rule.
      #       */
      #       #mainPopupSet panel.panel-no-padding { margin-top: calc(-50vh + 40px) !important; }
      #       #mainPopupSet .panel-viewstack, #mainPopupSet popupnotification { max-height: 50vh !important; height: 50vh; }
      #       #mainPopupSet panel.panel-no-padding.popup-notification-panel { margin-top: calc(-50vh - 35px) !important; }
      #       #navigator-toolbox .panel-viewstack { max-height: 75vh !important; }
      #       panelview.cui-widget-panelview { flex: 1; }
      #       panelview.cui-widget-panelview > vbox { flex: 1; min-height: 50vh; }
      #   }
      # '';
      settings = {
        # Search foo
        "browser.search.suggest.enabled" = true;
        "browser.search.suggest.enabled.private" = false;
        "browser.search.update" = false;
        "services.sync.prefs.sync.browser.search.update" = false;

        # Disable internal passwod manager
        "signon.rememberSignons" = false;
        # Extensions are managed with Nix, so don't update.
        "extensions.autoDisableScopes" = 0; # do not auto-disable all newly added extensions
        "extensions.update.autoUpdateDefault" = false;
        "extensions.update.enabled" = false;

        # Default Apps are also managed via Nix
        "browser.shell.checkDefaultBrowser" = false;

        # Default to dark theme in DevTools panel
        "devtools.theme" = "dark";

        # Reduce search engine noise in the urlbar's completion window. The
        # shortcuts and suggestions will still work, but Firefox won't clutter
        # its UI with reminders that they exist.
        "browser.urlbar.suggest.searches" = true; # Let's hope duckduckgo doesn't sell it all :)
        "browser.urlbar.shortcuts.bookmarks" = true;
        "browser.urlbar.shortcuts.history" = true;
        "browser.urlbar.shortcuts.tabs" = true;
        "browser.urlbar.showSearchSuggestionsFirst" = false;
        "browser.urlbar.speculativeConnect.enabled" = false;
        "browser.urlbar.suggest.quicksuggest.nonsponsored" = false;
        "browser.urlbar.suggest.quicksuggest.sponsored" = false;

        # Disable some not so useful functionality.
        "browser.disableResetPrompt" = true; # "Looks like you haven't started Firefox in a while."
        "browser.onboarding.enabled" = false; # "New to Firefox? Let's get started!" tour
        "browser.aboutConfig.showWarning" = false; # Warning when opening about:config
        "extensions.pocket.enabled" = false;
        "extensions.shield-recipe-client.enabled" = false;

        # Sync
        # "services.sync.username" = config.etu.user.email;

        "services.sync.engine.addons" = false; # Do not sync extensions.

        "general.autoScroll" = true; # Middle click to scroll

        "browser.startup.page" = 3; # Restore previous windows and tabs.

        # Security-oriented defaults
        "security.family_safety.mode" = 0;
        # https://blog.mozilla.org/security/2016/10/18/phasing-out-sha-1-on-the-public-web/
        "security.pki.sha1_enforcement_level" = 1;
        # https://github.com/tlswg/tls13-spec/issues/1001
        "security.tls.enable_0rtt_data" = false;
        # Use Mozilla geolocation service instead of Google if given permission
        "geo.provider.network.url" = "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%";
        "geo.provider.use_gpsd" = false;
        # https://support.mozilla.org/en-US/kb/extension-recommendations
        "browser.newtabpage.activity-stream.asrouter.userprefs.cfr" = false;
        "browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons" = false;
        "browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features" = false;
        "extensions.htmlaboutaddons.recommendations.enabled" = false;
        "extensions.htmlaboutaddons.discover.enabled" = false;
        "extensions.htmlaboutaddons.inline-options.enabled" = false;
        "extensions.getAddons.showPane" = false; # uses Google Analytics
        "browser.discovery.enabled" = false;

        # Privacy enhancements
        "browser.newtabpage.activity-stream.feeds.telemetry" = false;
        "browser.newtabpage.activity-stream.telemetry" = false;
        "browser.newtabpage.activity-stream.feeds.snippets" = false;
        "browser.newtabpage.activity-stream.feeds.section.topstories" = false;
        "browser.newtabpage.activity-stream.section.highlights.includePocket" = false;
        "browser.newtabpage.activity-stream.showSponsored" = false;
        "browser.newtabpage.activity-stream.feeds.discoverystreamfeed" = false;
        "browser.newtabpage.activity-stream.showSponsoredTopSites" = false;

        # Improve performance
        "gfx.webrender.all" = true;

        # Enable ETP for decent security (makes firefox containers and many
        # common security/privacy add-ons redundant).
        "browser.contentblocking.category" = "strict";
        "privacy.purge_trackers.enabled" = true;
        # Do Not Track header
        "privacy.donottrackheader.enabled" = true;
        "privacy.donottrackheader.value" = 1;
        # Disable Private Attribution Tracking Foo
        "dom.private-attribution.submission.enabled" = false;
        # Your customized toolbar settings are stored in
        # 'browser.uiCustomization.state'. This tells firefox to sync it between
        # machines. WARNING: This may not work across OSes. Since I use NixOS on
        # all the machines I use Firefox on, this is no concern to me.
        "services.sync.prefs.sync.browser.uiCustomization.state" = true;

        # Enable userChrome customisations
        "toolkit.legacyUserProfileCustomizations.stylesheets" = false; # TODO Reenable with fixed tabs on bottom css

        # Reduce File IO / SSD abuse
        # Otherwise, Firefox bombards the HD with writes. Not so nice for SSDs.
        # This forces it to write every 15 minutes, rather than 15 seconds.
        "browser.sessionstore.interval" = "900000";
        # Disable battery API
        "dom.battery.enabled" = false;
        # Disable "beacon" asynchronous HTTP transfers (used for analytics)
        "beacon.enabled" = false;
        # Disable pinging URIs specified in HTML <a> ping= attributes
        "browser.send_pings" = false;
        # Disable gamepad API to prevent USB device enumeration
        "dom.gamepad.enabled" = false;
        # Don't try to guess domain names when entering an invalid domain name in URL bar
        "browser.fixup.alternate.enabled" = false;

        # Disable telemetry
        "toolkit.telemetry.unified" = false;
        "toolkit.telemetry.enabled" = false;
        "toolkit.telemetry.server" = "data:,";
        "toolkit.telemetry.archive.enabled" = false;
        "toolkit.telemetry.coverage.opt-out" = true;
        "toolkit.coverage.opt-out" = true;
        "toolkit.coverage.endpoint.base" = "";
        "experiments.supported" = false;
        "experiments.enabled" = false;
        "experiments.manifest.uri" = "";
        "browser.ping-centre.telemetry" = false;
        # https://mozilla.github.io/normandy/
        "app.normandy.enabled" = false;
        "app.normandy.api_url" = "";
        "app.shield.optoutstudies.enabled" = false;
        # Disable health reports (basically more telemetry)
        # https://support.mozilla.org/en-US/kb/firefox-health-report-understand-your-browser-perf
        # https://gecko.readthedocs.org/en/latest/toolkit/components/telemetry/telemetry/preferences.html
        "datareporting.healthreport.uploadEnabled" = false;
        "datareporting.healthreport.service.enabled" = false;
        "datareporting.policy.dataSubmissionEnabled" = false;

        # Disable crash reports
        "breakpad.reportURL" = "";
        "browser.tabs.crashReporting.sendReport" = false;
        "browser.crashReports.unsubmittedCheck.autoSubmit2" = false; # don't submit backlogged reports

        # Disable Form autofill
        # https://wiki.mozilla.org/Firefox/Features/Form_Autofill
        "browser.formfill.enable" = false;
        "extensions.formautofill.addresses.enabled" = false;
        "extensions.formautofill.available" = "off";
        "extensions.formautofill.creditCards.available" = false;
        "extensions.formautofill.creditCards.enabled" = false;
        "extensions.formautofill.heuristics.enabled" = false;

        # VAAPI ffmpeg foo
        "media.ffmpeg.vaapi.enabled" = true;
      };

      extensions.force = true;
      extensions.settings = {
        "tab-stash@condordes.net".settings = {
          options = {
            "last_notified_version" = "3.2";
            "after_stashing_tab" = "close";
            "migrated_tab_markers_applied" = true;
          };
        };

        "uBlock0@raymondhill.net".settings = {
          selectedFilterLists = [
            "user-filters"
            "ublock-filters"
            "ublock-badware"
            "ublock-privacy"
            "ublock-quick-fixes"
            "ublock-unbreak"
            "easylist"
            "easyprivacy"
            "urlhaus-1"
            "plowe-0"
            "fanboy-cookiemonster"
            "ublock-cookies-easylist"
            "fanboy-social"
            "easylist-chat"
            "easylist-newsletters"
            "easylist-notifications"
            "easylist-annoyances"
            "DEU-0"
          ];
        };
      };

      extensions.packages = with pkgs.nur.repos.rycee.firefox-addons; [
        # clearurls
        # leechblock-ng
        # localcdn
        # skip-redirect
        # unpaywall
        # privacy-badger
        # consent-o-matic
        bitwarden
        darkreader
        dearrow
        deutsch-de-language-pack
        dictionary-german
        df-youtube
        flagfox
        ipvfoo
        kagi-search
        plasma-integration
        rust-search-extension
        sidebery
        sponsorblock
        tab-stash
        ublock-origin
        pkgs.nur.repos.bhasherbel.aw-awatcher
      ];

      # TODO Reenable when fixed (currently works for setup but default settings is broken due to https://github.com/nix-community/home-manager/pull/6505#issuecomment-2673463728)
      #   search = {
      #     force = true;
      #     default = "Kagi";
      #     privateDefault = "DuckDuckGo";
      #     # default = "DuckDuckGo";
      #     # privateDefault = "Kagi";
      #     order = [ "Kagi" "DuckDuckGo" "Nix Packages" "Nix Options" "NixOS Wiki" "Home-Manager Options" ];

      #     engines = {
      #       "Kagi" = {
      # id = "eacf4b1a-4c8a-4b75-abeb-6ae09e5ef4ae";
      #         urls = [{ template = "https://kagi.com/search?q={searchTerms}"; }];
      #         definedAliases = [ "@k" ];
      #         iconUpdateURL = "https://kagi.com/favicon.ico";
      #         updateInterval = 24 * 60 * 60 * 1000; # every day
      #       };
      #       "DuckDuckGo".metaData = {
      #         alias = "@ddg";
      #       };
      #       "Nix Packages" = {
      #         urls = [
      #           {
      #             template = "https://search.nixos.org/packages";
      #             params = [
      #               {
      #                 name = "type";
      #                 value = "packages";
      #               }
      #               {
      #                 name = "query";
      #                 value = "{searchTerms}";
      #               }
      #             ];
      #           }
      #         ];

      #         icon = "/run/current-system/sw/share/icons/hicolor/scalable/apps/nix-snowflake.svg";

      #         definedAliases = [ "@np" ];
      #       };
      #       "Nix Options" = {
      #         urls = [
      #           {
      #             template = "https://search.nixos.org/options";
      #             params = [
      #               {
      #                 name = "type";
      #                 value = "options";
      #               }
      #               {
      #                 name = "query";
      #                 value = "{searchTerms}";
      #               }
      #             ];
      #           }
      #         ];

      #         icon = "/run/current-system/sw/share/icons/hicolor/scalable/apps/nix-snowflake.svg";

      #         definedAliases = [ "@no" ];
      #       };
      #       "Home-Manager Options" = {
      #         urls = [
      #           {
      #             template = "https://home-manager-options.extranix.com";
      #             params = [
      #               {
      #                 name = "query";
      #                 value = "{searchTerms}";
      #               }
      #               {
      #                 name = "release";
      #                 value = "master";
      #               }
      #             ];
      #           }
      #         ];
      #         icon = "/run/current-system/sw/share/icons/hicolor/scalable/apps/nix-snowflake.svg";
      #         definedAliases = [ "@ho" ];
      #       };

      #       "NixOS Wiki" = {
      #         urls = [
      #           {
      #             template = "https://nixos.wiki/index.php?search={searchTerms}";
      #           }
      #         ];
      #         iconUpdateURL = "https://nixos.wiki/favicon.png";
      #         definedAliases = [ "@nw" ];
      #       };

      #       "Bing".metaData.hidden = true;
      #       "Amazon.de".metaData.hidden = true;
      #       "Google".metaData.hidden = true;
      #     };
      #   };

      # TODO Check if possible to reenable without breaking tab stash ?
      # This currently overwrites existing bookmarks which kinda sucks.....
      # bookmarks = [
      #   {
      #     toolbar = true;
      #     bookmarks = [
      #       {
      #         name = "Home Manager";
      #         url = "https://nixos.wiki/wiki/Home_Manager";
      #       }
      #       {
      #         name = "Nix PR Channel Tracker";
      #         url = "https://nixpk.gs/pr-tracker.html";
      #       }
      #       {
      #         name = "Chaotic Nix";
      #         url = "https://www.nyx.chaotic.cx/";
      #       }
      #     ];
      #   }
      #   {
      #     name = "wikipedia";
      #     tags = [ "wiki" ];
      #     keyword = "wiki";
      #     url = "https://en.wikipedia.org/wiki/Special:Search?search=%s&go=Go";
      #   }
      #   {
      #     name = "kernel.org";
      #     url = "https://www.kernel.org";
      #   }
      #   {
      #     name = "Nix sites";
      #     bookmarks = [
      #       {
      #         name = "homepage";
      #         url = "https://nixos.org/";
      #       }
      #       {
      #         name = "wiki";
      #         tags = [ "wiki" "nix" ];
      #         url = "https://nixos.wiki/";
      #       }
      #       {
      #         name = "Nix sites";
      #         bookmarks = [
      #           {
      #             name = "homepage";
      #             url = "https://nixos.org/";
      #           }
      #           {
      #             name = "wiki";
      #             url = "https://nixos.wiki/";
      #           }
      #         ];
      #       }
      #     ];
      #   }
      # ];
    };
  };
}