From ecdb362f60a16b22d5a06fb90617b51d49df9e8b Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Sun, 27 Apr 2025 13:55:33 +0200
Subject: [PATCH 1/3] profiles/firefox: Provide default configuration

---
 hosts/krypton/programs.nix   |  4 +-
 hosts/zinc/programs.nix      |  4 +-
 profiles/default.nix         |  1 +
 profiles/firefox/default.nix | 82 ++++++++++++++++++++++++++++++++++++
 4 files changed, 86 insertions(+), 5 deletions(-)
 create mode 100644 profiles/firefox/default.nix

diff --git a/hosts/krypton/programs.nix b/hosts/krypton/programs.nix
index 8bbd595..85ed21f 100644
--- a/hosts/krypton/programs.nix
+++ b/hosts/krypton/programs.nix
@@ -1,9 +1,7 @@
 { pkgs, ... }:
 
 {
-  environment.systemPackages = with pkgs; [
-    firefox-wayland
-  ];
+  profiles.clerie.firefox.enable = true;
 
   users.users.clerie.packages = with pkgs; [
     keepassxc
diff --git a/hosts/zinc/programs.nix b/hosts/zinc/programs.nix
index 34808b1..df35c8a 100644
--- a/hosts/zinc/programs.nix
+++ b/hosts/zinc/programs.nix
@@ -2,9 +2,9 @@
 
 {
 
-  users.users.clerie.packages = with pkgs; [
-    firefox
+  profiles.clerie.firefox.enable = true;
 
+  users.users.clerie.packages = with pkgs; [
     blender
     #cura # libarcus library is currently broken, required for curaengine
 
diff --git a/profiles/default.nix b/profiles/default.nix
index 0b0b95f..5b6be2a 100644
--- a/profiles/default.nix
+++ b/profiles/default.nix
@@ -9,6 +9,7 @@
     ./cybercluster-vm
     ./dn42-router
     ./fem-net
+    ./firefox
     ./hetzner-cloud
     ./mercury-vm
     ./netcup
diff --git a/profiles/firefox/default.nix b/profiles/firefox/default.nix
new file mode 100644
index 0000000..2d5b489
--- /dev/null
+++ b/profiles/firefox/default.nix
@@ -0,0 +1,82 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+
+{
+
+  options.profiles.clerie.firefox = {
+    enable = mkEnableOption "Firefox setup";
+  };
+
+  config = mkIf config.profiles.clerie.firefox.enable {
+
+    programs.firefox.enable = true;
+
+    programs.firefox.package = pkgs.firefox-wayland;
+
+    programs.firefox.policies = {
+      AutofillAddressEnabled = false;
+      AutofillCreditCardEnabled = false;
+      CaptivePortal = false;
+      DisableFeedbackCommands = true;
+      DisableFirefoxStudies = true;
+      DisablePocket = true;
+      DisableSetDesktopBackground = true;
+      DisableTelemetry = true;
+
+      DisplayBookmarksToolbar = "never";
+      DisplayMenuBar = "default-off";
+
+      DontCheckDefaultBrowser = true;
+
+      Extensions = {
+        Locked = [
+          "uBlock0@raymondhill.net" # uBlock Origin
+          "@testpilot-containers" # Firefox Multi-Account Containers
+        ];
+        Install = [
+          "{c2c003ee-bd69-42a2-b0e9-6f34222cb046}" # Auto Tab Discard
+          "keepassxc-browser@keepassxc.org" # KeePassXC-Browser
+        ];
+      };
+
+      ExtensionSettings = {
+        "uBlock0@raymondhill.net" = {
+          private_browsing = true;
+        };
+      };
+
+      FirefoxHome = {
+        Search = false;
+        TopSites = false;
+        SponsoredTopSites = false;
+        Highlights = false;
+        Pocket = false;
+        SponsoredPocket = false;
+        Snippets = false;
+      };
+
+      HttpsOnlyMode = "enabled";
+
+      NewTabPage = false;
+      NoDefaultBookmarks = true;
+
+      OfferToSaveLogins = false;
+      PasswordManagerEnabled = false;
+
+      RequestedLocales = [ "en" ];
+
+      SearchBar = "unified";
+      ShowHomeButton = false;
+
+      UserMessaging = {
+        ExtensionRecommendations = false;
+        FeatureRecommendations = false;
+        SkipOnboarding = true;
+        MoreFromMozilla = false;
+      };
+
+    };
+
+  };
+}

From dffebb92e8047c32c47fe61b1cfedb475a39bbfa Mon Sep 17 00:00:00 2001
From: clerie <git@clerie.de>
Date: Sun, 27 Apr 2025 14:12:44 +0200
Subject: [PATCH 2/3] profiles/firefox: Use webcam through pipewire

---
 profiles/firefox/default.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/profiles/firefox/default.nix b/profiles/firefox/default.nix
index 2d5b489..424b1bc 100644
--- a/profiles/firefox/default.nix
+++ b/profiles/firefox/default.nix
@@ -64,6 +64,14 @@ with lib;
       OfferToSaveLogins = false;
       PasswordManagerEnabled = false;
 
+      Preferences = {
+        # Access Webcam through Pipewire
+        "media.webrtc.camera.allow-pipewire" = {
+          "Value" = true;
+          "Status" = "default";
+        };
+      };
+
       RequestedLocales = [ "en" ];
 
       SearchBar = "unified";

From c91c9b7c9c495c6581d6b8c5364febfed23a326f Mon Sep 17 00:00:00 2001
From: Flake Update Bot <flake-update-bot@clerie.de>
Date: Mon, 28 Apr 2025 03:03:59 +0200
Subject: [PATCH 3/3] Update nixpkgs 2025-04-28-01-03

---
 flake.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/flake.lock b/flake.lock
index 6d926d2..87864c3 100644
--- a/flake.lock
+++ b/flake.lock
@@ -551,11 +551,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1745234285,
-        "narHash": "sha256-GfpyMzxwkfgRVN0cTGQSkTC0OHhEkv3Jf6Tcjm//qZ0=",
+        "lastModified": 1745526057,
+        "narHash": "sha256-ITSpPDwvLBZBnPRS2bUcHY3gZSwis/uTe255QgMtTLA=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "c11863f1e964833214b767f4a369c6e6a7aba141",
+        "rev": "f771eb401a46846c1aebd20552521b233dd7e18b",
         "type": "github"
       },
       "original": {