// rawnix firefox defaults
// installed to /usr/lib/firefox/browser/defaults/preferences/rawnix.js
// NOTE: default-pref files use pref(), NOT user_pref(). user_pref() is only
// valid in a profile's prefs.js / user.js and is a parse error here.

// ---------------------------------------------------------------------------
// Telemetry / data reporting
// ---------------------------------------------------------------------------
pref("datareporting.policy.dataSubmissionEnabled", false);
pref("datareporting.healthreport.uploadEnabled", false);
pref("datareporting.usage.uploadEnabled", false);
pref("toolkit.telemetry.enabled", false);
pref("toolkit.telemetry.unified", false);
pref("toolkit.telemetry.archive.enabled", false);
pref("toolkit.telemetry.server", "data:,");
pref("toolkit.telemetry.server_owner", "");
pref("toolkit.telemetry.newProfilePing.enabled", false);
pref("toolkit.telemetry.shutdownPingSender.enabled", false);
pref("toolkit.telemetry.updatePing.enabled", false);
pref("toolkit.telemetry.bhrPing.enabled", false);
pref("toolkit.telemetry.firstShutdownPing.enabled", false);
pref("toolkit.telemetry.coverage.opt-out", true);
pref("toolkit.coverage.opt-out", true);
pref("toolkit.coverage.endpoint.base", "");
pref("browser.ping-centre.telemetry", false);
pref("browser.newtabpage.activity-stream.telemetry", false);
pref("browser.newtabpage.activity-stream.feeds.telemetry", false);
pref("browser.tabs.crashReporting.sendReport", false);
pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false);

// ---------------------------------------------------------------------------
// Experiments, studies, remote-config, in-product messaging
// ---------------------------------------------------------------------------
pref("app.normandy.enabled", false);
pref("app.normandy.api_url", "");
pref("app.shield.optoutstudies.enabled", false);
pref("messaging-system.rsexperimentloader.enabled", false);
pref("browser.discovery.enabled", false);
pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons", false);
pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features", false);
pref("browser.newtabpage.activity-stream.asrouter.providers.cfr", "{\"enabled\":false}");
pref("browser.newtabpage.activity-stream.asrouter.providers.messaging-experiments", "{\"enabled\":false}");
pref("browser.preferences.moreFromMozilla", false);
pref("browser.aboutwelcome.enabled", false);
pref("browser.shell.checkDefaultBrowser", false);
pref("browser.startup.homepage_override.mstone", "ignore");

// ---------------------------------------------------------------------------
// AI / machine learning
// browser.ml.enable is the master gate for the ONNX inference runtime.
// Verify names against about:config (filter: browser.ml) after a version bump.
// ---------------------------------------------------------------------------
pref("browser.ml.enable", false);
pref("browser.ml.chat.enabled", false);
pref("browser.ml.chat.menu", false);
pref("browser.ml.chat.shortcuts", false);
pref("browser.ml.chat.shortcuts.custom", false);
pref("browser.ml.chat.sidebar", false);
pref("browser.ml.chat.page", false);
pref("browser.ml.chat.provider", "");
pref("browser.ml.chat.hideLocalhost", true);
pref("browser.ml.linkPreview.enabled", false);
pref("browser.ml.linkPreview.optin", false);
pref("browser.ml.pageAssist.enabled", false);
pref("extensions.ml.enabled", false);
pref("browser.tabs.groups.smart.enabled", false);
pref("browser.tabs.groups.smart.userEnabled", false);
pref("pdfjs.enableAltText", false);
pref("pdfjs.enableAltTextModelDownload", false);
pref("pdfjs.enableUpdatedAddImage", false);
// local translation: no server round-trip, but downloads models on demand
pref("browser.translations.enable", false);
pref("browser.translations.automaticallyPopup", false);

// ---------------------------------------------------------------------------
// Accounts, Sync, Pocket
// ---------------------------------------------------------------------------
pref("identity.fxaccounts.enabled", false);
pref("identity.fxaccounts.toolbar.enabled", false);
pref("identity.fxaccounts.toolbar.syncSetup.panelAccessed", true);
pref("extensions.pocket.enabled", false);
pref("extensions.getAddons.showPane", false);
pref("extensions.htmlaboutaddons.recommendations.enabled", false);
pref("extensions.systemAddon.update.enabled", false);
pref("extensions.systemAddon.update.url", "");

// ---------------------------------------------------------------------------
// Address bar / search suggestions / Firefox Suggest (Merino)
// ---------------------------------------------------------------------------
pref("browser.search.suggest.enabled", false);
pref("browser.urlbar.suggest.searches", false);
pref("browser.urlbar.quicksuggest.enabled", false);
pref("browser.urlbar.quicksuggest.dataCollection.enabled", false);
pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false);
pref("browser.urlbar.suggest.quicksuggest.sponsored", false);
pref("browser.urlbar.merino.endpointURL", "");
pref("browser.urlbar.trending.featureGate", false);
pref("browser.urlbar.suggest.trending", false);
pref("browser.urlbar.weather.featureGate", false);
pref("browser.urlbar.addons.featureGate", false);
pref("browser.urlbar.mdn.featureGate", false);
pref("browser.urlbar.yelp.featureGate", false);
pref("browser.urlbar.clipboard.featureGate", false);
pref("browser.urlbar.speculativeConnect.enabled", false);
pref("browser.places.speculativeConnect.enabled", false);

// ---------------------------------------------------------------------------
// New tab page
// ---------------------------------------------------------------------------
pref("browser.newtabpage.activity-stream.feeds.section.topstories", false);
pref("browser.newtabpage.activity-stream.feeds.discoverystreamfeed", false);
pref("browser.newtabpage.activity-stream.showSponsored", false);
pref("browser.newtabpage.activity-stream.showSponsoredTopSites", false);
pref("browser.newtabpage.activity-stream.default.sites", "");
pref("browser.newtabpage.activity-stream.improvesearch.topSiteSearchShortcuts", false);

// ---------------------------------------------------------------------------
// Background network chatter
// ---------------------------------------------------------------------------
pref("network.captive-portal-service.enabled", false);
pref("captivedetect.canonicalURL", "");
pref("network.connectivity-service.enabled", false);
pref("network.prefetch-next", false);
pref("network.dns.disablePrefetch", true);
pref("network.dns.disablePrefetchFromHTTPS", true);
pref("network.predictor.enabled", false);
pref("network.predictor.enable-prefetch", false);
pref("network.http.speculative-parallel-limit", 0);
pref("browser.region.network.url", "");
pref("browser.region.update.enabled", false);
pref("geo.provider.network.url", "");
pref("geo.provider.use_geoclue", false);
pref("beacon.enabled", false);

// DNS: 5 = TRR fully disabled, use the system resolver.
// Set to 3 with network.trr.uri if you want strict DoH instead.
pref("network.trr.mode", 5);

// ---------------------------------------------------------------------------
// Safe Browsing
// TRADEOFF: this removes phishing/malware warnings. A source build has no
// Google API key anyway, so remote lookups already fail; these prefs stop the
// periodic list downloads from Google's servers.
// ---------------------------------------------------------------------------
pref("browser.safebrowsing.malware.enabled", false);
pref("browser.safebrowsing.phishing.enabled", false);
pref("browser.safebrowsing.downloads.enabled", false);
pref("browser.safebrowsing.downloads.remote.enabled", false);
pref("browser.safebrowsing.downloads.remote.url", "");
pref("browser.safebrowsing.provider.google4.updateURL", "");
pref("browser.safebrowsing.provider.google4.gethashURL", "");
pref("browser.safebrowsing.provider.google4.dataSharingURL", "");
pref("browser.safebrowsing.provider.google.updateURL", "");
pref("browser.safebrowsing.provider.google.gethashURL", "");

// ---------------------------------------------------------------------------
// Tracking protection / state partitioning
// ---------------------------------------------------------------------------
pref("browser.contentblocking.category", "strict");
pref("privacy.trackingprotection.enabled", true);
pref("privacy.trackingprotection.pbmode.enabled", true);
pref("privacy.trackingprotection.socialtracking.enabled", true);
pref("privacy.trackingprotection.cryptomining.enabled", true);
pref("privacy.trackingprotection.fingerprinting.enabled", true);
pref("privacy.trackingprotection.emailtracking.enabled", true);
pref("network.cookie.cookieBehavior", 5);
pref("privacy.partition.network_state", true);
pref("privacy.partition.serviceWorkers", true);
pref("privacy.partition.always_partition_third_party_non_cookie_storage", true);
pref("privacy.query_stripping.enabled", true);
pref("privacy.query_stripping.enabled.pbmode", true);
pref("privacy.globalprivacycontrol.enabled", true);
pref("privacy.globalprivacycontrol.functionality.enabled", true);
pref("privacy.fingerprintingProtection", true);
pref("privacy.fingerprintingProtection.pbmode", true);

// privacy.resistFingerprinting is stronger but visibly breaks things:
// forces UTC, spoofs locale/screen size, letterboxes windows, blocks canvas.
// Leave it to the user rather than defaulting it on.
// pref("privacy.resistFingerprinting", true);

// ---------------------------------------------------------------------------
// WebRTC local IP leak
// ---------------------------------------------------------------------------
pref("media.peerconnection.ice.default_address_only", true);

// ---------------------------------------------------------------------------
// Misc
// ---------------------------------------------------------------------------
pref("browser.formfill.enable", false);
pref("signon.management.page.breach-alerts.enabled", false);
pref("signon.rememberSignons", false);
pref("browser.send_pings", false);
pref("dom.battery.enabled", false);
pref("media.gmp-gmpopenh264.enabled", false);
pref("media.gmp-widevinecdm.enabled", false);
pref("media.gmp-manager.url", "data:text/plain,");

// ---------------------------------------------------------------------------
// Misc
// ---------------------------------------------------------------------------
pref("browser.backup.enabled", false);
pref("browser.backup.scheduled.enabled", false);
pref("services.settings.server", "data:,#remote-settings-dumps-only");