sync 2026-09-26 18:19 UTC

 1672 files changed, 151396 insertions(+)

1 files changed, 204 insertions, 0 deletions

diff --git a/opt/firefox/rawnix.js b/opt/firefox/rawnix.js
new file mode 100644
index 0000000..4cfd633
--- /dev/null
+++ b/opt/firefox/rawnix.js
@@ -0,0 +1,204 @@
+// rawnix firefox defaults
+// installed to /usr/lib/firefox/browser/defaults/preferences/rawnix.js
+// NOTE: default-pref files use pref(), NOT user_pref(). user_pref() is only
+// valid in a profile's prefs.js / user.js and is a parse error here.
+
+// ---------------------------------------------------------------------------
+// Telemetry / data reporting
+// ---------------------------------------------------------------------------
+pref("datareporting.policy.dataSubmissionEnabled", false);
+pref("datareporting.healthreport.uploadEnabled", false);
+pref("datareporting.usage.uploadEnabled", false);
+pref("toolkit.telemetry.enabled", false);
+pref("toolkit.telemetry.unified", false);
+pref("toolkit.telemetry.archive.enabled", false);
+pref("toolkit.telemetry.server", "data:,");
+pref("toolkit.telemetry.server_owner", "");
+pref("toolkit.telemetry.newProfilePing.enabled", false);
+pref("toolkit.telemetry.shutdownPingSender.enabled", false);
+pref("toolkit.telemetry.updatePing.enabled", false);
+pref("toolkit.telemetry.bhrPing.enabled", false);
+pref("toolkit.telemetry.firstShutdownPing.enabled", false);
+pref("toolkit.telemetry.coverage.opt-out", true);
+pref("toolkit.coverage.opt-out", true);
+pref("toolkit.coverage.endpoint.base", "");
+pref("browser.ping-centre.telemetry", false);
+pref("browser.newtabpage.activity-stream.telemetry", false);
+pref("browser.newtabpage.activity-stream.feeds.telemetry", false);
+pref("browser.tabs.crashReporting.sendReport", false);
+pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false);
+
+// ---------------------------------------------------------------------------
+// Experiments, studies, remote-config, in-product messaging
+// ---------------------------------------------------------------------------
+pref("app.normandy.enabled", false);
+pref("app.normandy.api_url", "");
+pref("app.shield.optoutstudies.enabled", false);
+pref("messaging-system.rsexperimentloader.enabled", false);
+pref("browser.discovery.enabled", false);
+pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false);
+pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false);
+pref("browser.newtabpage.activity-stream.asrouter.providers.cfr", "{\"enabled\":false}");
+pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiments", "{\"enabled\":false}");
+pref("browser.preferences.moreFromMozilla", false);
+pref("browser.aboutwelcome.enabled", false);
+pref("browser.shell.checkDefaultBrowser", false);
+pref("browser.startup.homepage_override.mstone", "ignore");
+
+// ---------------------------------------------------------------------------
+// AI / machine learning
+// browser.ml.enable is the master gate for the ONNX inference runtime.
+// Verify names against about:config (filter: browser.ml) after a version bump.
+// ---------------------------------------------------------------------------
+pref("browser.ml.enable", false);
+pref("browser.ml.chat.enabled", false);
+pref("browser.ml.chat.menu", false);
+pref("browser.ml.chat.shortcuts", false);
+pref("browser.ml.chat.shortcuts.custom", false);
+pref("browser.ml.chat.sidebar", false);
+pref("browser.ml.chat.page", false);
+pref("browser.ml.chat.provider", "");
+pref("browser.ml.chat.hideLocalhost", true);
+pref("browser.ml.linkPreview.enabled", false);
+pref("browser.ml.linkPreview.optin", false);
+pref("browser.ml.pageAssist.enabled", false);
+pref("extensions.ml.enabled", false);
+pref("browser.tabs.groups.smart.enabled", false);
+pref("browser.tabs.groups.smart.userEnabled", false);
+pref("pdfjs.enableAltText", false);
+pref("pdfjs.enableAltTextModelDownload", false);
+pref("pdfjs.enableUpdatedAddImage", false);
+// local translation: no server round-trip, but downloads models on demand
+pref("browser.translations.enable", false);
+pref("browser.translations.automaticallyPopup", false);
+
+// ---------------------------------------------------------------------------
+// Accounts, Sync, Pocket
+// ---------------------------------------------------------------------------
+pref("identity.fxaccounts.enabled", false);
+pref("identity.fxaccounts.toolbar.enabled", false);
+pref("identity.fxaccounts.toolbar.syncSetup.panelAccessed", true);
+pref("extensions.pocket.enabled", false);
+pref("extensions.getAddons.showPane", false);
+pref("extensions.htmlaboutaddons.recommendations.enabled", false);
+pref("extensions.systemAddon.update.enabled", false);
+pref("extensions.systemAddon.update.url", "");
+
+// ---------------------------------------------------------------------------
+// Address bar / search suggestions / Firefox Suggest (Merino)
+// ---------------------------------------------------------------------------
+pref("browser.search.suggest.enabled", false);
+pref("browser.urlbar.suggest.searches", false);
+pref("browser.urlbar.quicksuggest.enabled", false);
+pref("browser.urlbar.quicksuggest.dataCollection.enabled", false);
+pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false);
+pref("browser.urlbar.suggest.quicksuggest.sponsored", false);
+pref("browser.urlbar.merino.endpointURL", "");
+pref("browser.urlbar.trending.featureGate", false);
+pref("browser.urlbar.suggest.trending", false);
+pref("browser.urlbar.weather.featureGate", false);
+pref("browser.urlbar.addons.featureGate", false);
+pref("browser.urlbar.mdn.featureGate", false);
+pref("browser.urlbar.yelp.featureGate", false);
+pref("browser.urlbar.clipboard.featureGate", false);
+pref("browser.urlbar.speculativeConnect.enabled", false);
+pref("browser.places.speculativeConnect.enabled", false);
+
+// ---------------------------------------------------------------------------
+// New tab page
+// ---------------------------------------------------------------------------
+pref("browser.newtabpage.activity-stream.feeds.section.topstories", false);
+pref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", false);
+pref("browser.newtabpage.activity-stream.showSponsored", false);
+pref("browser.newtabpage.activity-stream.showSponsoredTopSites", false);
+pref("browser.newtabpage.activity-stream.default.sites", "");
+pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts", false);
+
+// ---------------------------------------------------------------------------
+// Background network chatter
+// ---------------------------------------------------------------------------
+pref("network.captive-portal-service.enabled", false);
+pref("captivedetect.canonicalURL", "");
+pref("network.connectivity-service.enabled", false);
+pref("network.prefetch-next", false);
+pref("network.dns.disablePrefetch", true);
+pref("network.dns.disablePrefetchFromHTTPS", true);
+pref("network.predictor.enabled", false);
+pref("network.predictor.enable-prefetch", false);
+pref("network.http.speculative-parallel-limit", 0);
+pref("browser.region.network.url", "");
+pref("browser.region.update.enabled", false);
+pref("geo.provider.network.url", "");
+pref("geo.provider.use_geoclue", false);
+pref("beacon.enabled", false);
+
+// DNS: 5 = TRR fully disabled, use the system resolver.
+// Set to 3 with network.trr.uri if you want strict DoH instead.
+pref("network.trr.mode", 5);
+
+// ---------------------------------------------------------------------------
+// Safe Browsing
+// TRADEOFF: this removes phishing/malware warnings. A source build has no
+// Google API key anyway, so remote lookups already fail; these prefs stop the
+// periodic list downloads from Google's servers.
+// ---------------------------------------------------------------------------
+pref("browser.safebrowsing.malware.enabled", false);
+pref("browser.safebrowsing.phishing.enabled", false);
+pref("browser.safebrowsing.downloads.enabled", false);
+pref("browser.safebrowsing.downloads.remote.enabled", false);
+pref("browser.safebrowsing.downloads.remote.url", "");
+pref("browser.safebrowsing.provider.google4.updateURL", "");
+pref("browser.safebrowsing.provider.google4.gethashURL", "");
+pref("browser.safebrowsing.provider.google4.dataSharingURL", "");
+pref("browser.safebrowsing.provider.google.updateURL", "");
+pref("browser.safebrowsing.provider.google.gethashURL", "");
+
+// ---------------------------------------------------------------------------
+// Tracking protection / state partitioning
+// ---------------------------------------------------------------------------
+pref("browser.contentblocking.category", "strict");
+pref("privacy.trackingprotection.enabled", true);
+pref("privacy.trackingprotection.pbmode.enabled", true);
+pref("privacy.trackingprotection.socialtracking.enabled", true);
+pref("privacy.trackingprotection.cryptomining.enabled", true);
+pref("privacy.trackingprotection.fingerprinting.enabled", true);
+pref("privacy.trackingprotection.emailtracking.enabled", true);
+pref("network.cookie.cookieBehavior", 5);
+pref("privacy.partition.network_state", true);
+pref("privacy.partition.serviceWorkers", true);
+pref("privacy.partition.always_partition_third_party_non_cookie_storage", true);
+pref("privacy.query_stripping.enabled", true);
+pref("privacy.query_stripping.enabled.pbmode", true);
+pref("privacy.globalprivacycontrol.enabled", true);
+pref("privacy.globalprivacycontrol.functionality.enabled", true);
+pref("privacy.fingerprintingProtection", true);
+pref("privacy.fingerprintingProtection.pbmode", true);
+
+// privacy.resistFingerprinting is stronger but visibly breaks things:
+// forces UTC, spoofs locale/screen size, letterboxes windows, blocks canvas.
+// Leave it to the user rather than defaulting it on.
+// pref("privacy.resistFingerprinting", true);
+
+// ---------------------------------------------------------------------------
+// WebRTC local IP leak
+// ---------------------------------------------------------------------------
+pref("media.peerconnection.ice.default_address_only", true);
+
+// ---------------------------------------------------------------------------
+// Misc
+// ---------------------------------------------------------------------------
+pref("browser.formfill.enable", false);
+pref("signon.management.page.breach-alerts.enabled", false);
+pref("signon.rememberSignons", false);
+pref("browser.send_pings", false);
+pref("dom.battery.enabled", false);
+pref("media.gmp-gmpopenh264.enabled", false);
+pref("media.gmp-widevinecdm.enabled", false);
+pref("media.gmp-manager.url", "data:text/plain,");
+
+// ---------------------------------------------------------------------------
+// Misc
+// ---------------------------------------------------------------------------
+pref("browser.backup.enabled", false);
+pref("browser.backup.scheduled.enabled", false);
+pref("services.settings.server", "data:,#remote-settings-dumps-only");