summary refs log tree commit diff stats
diff options
context:
space:
mode:
authorAlan Pearce2019-05-27 16:34:38 +0200
committerAlan Pearce2019-05-28 09:58:41 +0200
commit3afe52a135a0ccee881e487fe3310f31ec62cf27 (patch)
tree49447a136bc97ede67b89c17ea8f34a15d4540cc
parentdfada4ad3353564b2f99474a4a2872aedf4a2bfd (diff)
downloadnixos-configuration-3afe52a135a0ccee881e487fe3310f31ec62cf27.tar.lz
nixos-configuration-3afe52a135a0ccee881e487fe3310f31ec62cf27.tar.zst
nixos-configuration-3afe52a135a0ccee881e487fe3310f31ec62cf27.zip
satoshipay: Add chromium policy configuration
-rw-r--r--modules/satoshipay.nix37
1 files changed, 37 insertions, 0 deletions
diff --git a/modules/satoshipay.nix b/modules/satoshipay.nix
index 7830587..7ac6cdb 100644
--- a/modules/satoshipay.nix
+++ b/modules/satoshipay.nix
@@ -16,6 +16,43 @@
 
   nixpkgs.config.allowUnfree = true;
 
+  programs.chromium = {
+    enable = true;
+    extensions = [
+      "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
+      "aeblfdkhhhdcdjpifhhbdiojplfjncoa" # 1password x
+    ];
+    homepageLocation = "about:blank";
+    defaultSearchProviderSearchURL = "https://duckduckgo.com/?q={searchTerms}";
+    defaultSearchProviderSuggestURL = "https://duckduckgo.com/ac/?q={searchTerms}&type=list";
+    # https://www.chromium.org/administrators/policy-list-3
+    extraOpts = {
+      BlockThirdPartyCookies = true;
+      CookiesBlockedForUrls = [
+        "[*.]smartlock.google.com"
+        "[*.]mediumSmartLockSigninAllowed.com"
+      ];
+      SyncDisabled = true;
+      BuiltInDnsClientEnabled = false;
+      BrowserSignin = 0;
+      EasyUnlockAllowed = false;
+      EnableMediaRouter = false;
+      CloudPrintProxyEnabled = false;
+      CloudPrintSubmitEnabled = false;
+      SafeBrowsingEnabled = false;
+      RestoreOnStartup = 1; # Restore last session
+      AlwaysOpenPdfExternally = true;
+      BrowserNetworkTimeQueriesEnabled = false;
+      NotificationsAllowedForUrls = [
+        "gitlab.satoshipay.tech"
+        "calendar.google.com"
+      ];
+      NotificationsBlockedForUrls = [
+        "[.*]reddit.com"
+      ];
+    };
+  };
+
   environment.systemPackages = with pkgs; [
     awscli
     caddy