all repos — nixfiles @ 3afe52a135a0ccee881e487fe3310f31ec62cf27

System and user configuration, managed by nix and home-manager

satoshipay: Add chromium policy configuration
Alan Pearce alan@alanpearce.eu
Mon, 27 May 2019 16:34:38 +0200
commit

3afe52a135a0ccee881e487fe3310f31ec62cf27

parent

dfada4ad3353564b2f99474a4a2872aedf4a2bfd

1 files changed, 37 insertions(+), 0 deletions(-)

jump to
M modules/satoshipay.nixmodules/satoshipay.nix
@@ -16,6 +16,43 @@ }; 
   nixpkgs.config.allowUnfree = true;
 
+  programs.chromium = {
+    enable = true;
+    extensions = [
+      "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
+      "aeblfdkhhhdcdjpifhhbdiojplfjncoa" # 1password x
+    ];
+    homepageLocation = "about:blank";
+    defaultSearchProviderSearchURL = "https://duckduckgo.com/?q={searchTerms}";
+    defaultSearchProviderSuggestURL = "https://duckduckgo.com/ac/?q={searchTerms}&type=list";
+    # https://www.chromium.org/administrators/policy-list-3
+    extraOpts = {
+      BlockThirdPartyCookies = true;
+      CookiesBlockedForUrls = [
+        "[*.]smartlock.google.com"
+        "[*.]mediumSmartLockSigninAllowed.com"
+      ];
+      SyncDisabled = true;
+      BuiltInDnsClientEnabled = false;
+      BrowserSignin = 0;
+      EasyUnlockAllowed = false;
+      EnableMediaRouter = false;
+      CloudPrintProxyEnabled = false;
+      CloudPrintSubmitEnabled = false;
+      SafeBrowsingEnabled = false;
+      RestoreOnStartup = 1; # Restore last session
+      AlwaysOpenPdfExternally = true;
+      BrowserNetworkTimeQueriesEnabled = false;
+      NotificationsAllowedForUrls = [
+        "gitlab.satoshipay.tech"
+        "calendar.google.com"
+      ];
+      NotificationsBlockedForUrls = [
+        "[.*]reddit.com"
+      ];
+    };
+  };
+
   environment.systemPackages = with pkgs; [
     awscli
     caddy