2 files changed, 108 insertions, 15 deletions

diff --git a/home-manager/browser/default.nix b/home-manager/browser/default.nix
index ab8278a..9c380ea 100644
--- a/home-manager/browser/default.nix
+++ b/home-manager/browser/default.nix
@@ -1,13 +1,48 @@
 { config, pkgs, inputs, ... }:
 {
- imports = [
-    inputs.zen-browser.homeModules.beta
-  ];
-
-  programs.zen-browser = {
+  programs.librewolf= {
     enable = true;
 
-    nativeMessagingHosts = [pkgs.firefoxpwa];
+    languagePacks = [
+      "el"
+    ];
+    
+    profiles."default" = {
+      isDefault = true;
+      search = {
+        force = true;
+        default = "search.internal";
+        engines = {
+          "search.internal" = {
+            urls = [{
+              template = "http://search.internal/search";
+              params = [
+                { name = "q"; value = "{searchTerms}"; }
+              ];
+            }];
+          };
+        };
+      };
+
+      settings = {
+        "browser.startup.homepage" = "http://search.internal";
+        "browser.newtabpage.enabled" = true;
+        "browser.urlbar.suggest.bookmark" = true;
+        "browser.urlbar.suggest.engines" = false;
+        "browser.urlbar.suggest.history" = true;
+        "browser.urlbar.suggest.openpage" = true;
+        "browser.urlbar.suggest.recentsearches" = false;
+        "browser.urlbar.suggest.topsites" = false;
+
+        "extensions.autoDisableScopes" = 0;
+
+        "privacy.resistFingerprinting.letterboxing" = true;
+        "privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts" = true;
+
+        "webgl.disabled" = true;
+      };
+    };
+
     policies = {
       # find more options here: https://mozilla.github.io/policy-templates/
       AutofillAddressEnabled = false;
@@ -17,18 +52,23 @@
         Locked = true;
         Behavior = "reject-foreign";
         BehaviorPrivateBrowsing = "reject";
+        Allow = [
+          "https://fastmail.com"
+          "https://theke.ml"
+        ];
       };
 
       DisablePocket = true;
       DisableAppUpdate = true;
+      DisableTelemetry = true;
       DisableFirefoxStudies = true;
       DisableFirefoxAccounts = true;
       DisableFeedbackCommands = true;
-      DisableTelemetry = true;
+
 
       DontCheckDefaultBrowser = true;
 
-      DownloadDirectory = "${config.home.homeDirectory}/downloads";
+      DownloadDirectory = "${config.home.homeDirectory}/Downloads";
 
       EnableTrackingProtection = {
         Value = true;
@@ -40,6 +80,10 @@
       HardwareAcceleration = true;
       
       HttpsOnlyMode = "force_enabled";
+      HttpAllowlist = [
+        "http://search.internal"
+        "http://dns.internal"
+      ];
 
       NoDefaultBookmarks = true;
 
@@ -64,12 +108,62 @@
       };
 
       SearchEngines = {
-        Default = "Startpage";
         Remove = [
+          "DuckDuckGo"
           "Google"
           "Bing"
         ];
       };
+
+      ExtensionSettings = {
+        # UBlockOrigin
+        "uBlock0@raymondhill.net" = {
+          installation_mode = "force_installed";
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi";
+          default_area = "menupanel";
+        };
+
+        # Decentraleyes
+        "jid1-BoFifL9Vbdl2zQ@jetpack" = {
+          installation_mode = "force_installed";
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/decentraleyes/latest.xpi";
+          default_area = "menupanel";
+        };
+
+        # CanvasBlocker
+        "CanvasBlocker@kkapsner.de" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/canvasblocker/latest.xpi";
+          installation_mode = "force_installed";
+          default_area = "menupanel";
+        };
+
+        # Privacy Badger
+        "jid1-MnnxcxisBPnSXQ@jetpack" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/privacy-badger17/latest.xpi";
+          installation_mode = "force_installed";
+          default_area = "menupanel";
+        };
+
+        # 1pass
+        "{d634138d-c276-4fc8-924b-40a0ea21d284}" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/1password-x-password-manager/latest.xpi";
+          installation_mode = "force_installed";
+        };
+
+        # ClearURLs
+        "{74145f27-f039-47ce-a470-a662b129930a}" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/clearurls/latest.xpi";
+          installation_mode = "force_installed";
+          default_area = "menupanel";
+        };
+
+        # Dark Reader
+        "addon@darkreader.org" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/darkreader/latest.xpi";
+          installation_mode = "force_installed";
+          default_area = "menupanel";
+        };
+      };
     };
   };
 }
diff --git a/home-manager/xdg/default.nix b/home-manager/xdg/default.nix
index 55dde61..6eaa888 100644
--- a/home-manager/xdg/default.nix
+++ b/home-manager/xdg/default.nix
@@ -5,10 +5,10 @@
       enable = true;  # manage ~/.config/mimeapps.list
 
       defaultApplications = {
-        "application/pdf"         = [ "zen" ];
-        "x-scheme-handler/http"   = [ "zen" ];
-        "x-scheme-handler/https"  = [ "zen" ];
-        "x-scheme-handler/chrome" = [ "zen" ];
+        "application/pdf"         = [ "librewolf.desktop" ];
+        "x-scheme-handler/http"   = [ "librewolf.desktop" ];
+        "x-scheme-handler/https"  = [ "librewolf.desktop" ];
+        "x-scheme-handler/chrome" = [ "librewolf.desktop" ];
 
         "text/html"               = [ "featherpad.desktop" ];
 
@@ -34,8 +34,7 @@
 
       # Optional extra handlers that *don’t* become default
       associations.added = {
-        "text/html" = [  "zen" ];
-        "application/pdf" = [ "zen" ];
+        "text/html" = [  "librewolf.desktop" ];
       };
     };
   };