all repos — nixfiles @ 3afe52a135a0ccee881e487fe3310f31ec62cf27

System and user configuration, managed by nix and home-manager

satoshipay: Add chromium policy configuration

Alan Pearce
commit

3afe52a135a0ccee881e487fe3310f31ec62cf27

parent

dfada4ad3353564b2f99474a4a2872aedf4a2bfd

1 file changed, 37 insertions(+), 0 deletions(-)

jump to
M modules/satoshipay.nixmodules/satoshipay.nix
@@ -16,6 +16,43 @@ };
nixpkgs.config.allowUnfree = true; + programs.chromium = { + enable = true; + extensions = [ + "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin + "aeblfdkhhhdcdjpifhhbdiojplfjncoa" # 1password x + ]; + homepageLocation = "about:blank"; + defaultSearchProviderSearchURL = "https://duckduckgo.com/?q={searchTerms}"; + defaultSearchProviderSuggestURL = "https://duckduckgo.com/ac/?q={searchTerms}&type=list"; + # https://www.chromium.org/administrators/policy-list-3 + extraOpts = { + BlockThirdPartyCookies = true; + CookiesBlockedForUrls = [ + "[*.]smartlock.google.com" + "[*.]mediumSmartLockSigninAllowed.com" + ]; + SyncDisabled = true; + BuiltInDnsClientEnabled = false; + BrowserSignin = 0; + EasyUnlockAllowed = false; + EnableMediaRouter = false; + CloudPrintProxyEnabled = false; + CloudPrintSubmitEnabled = false; + SafeBrowsingEnabled = false; + RestoreOnStartup = 1; # Restore last session + AlwaysOpenPdfExternally = true; + BrowserNetworkTimeQueriesEnabled = false; + NotificationsAllowedForUrls = [ + "gitlab.satoshipay.tech" + "calendar.google.com" + ]; + NotificationsBlockedForUrls = [ + "[.*]reddit.com" + ]; + }; + }; + environment.systemPackages = with pkgs; [ awscli caddy