satoshipay: Add chromium policy configuration

1 files changed, 37 insertions, 0 deletions

diff --git a/modules/satoshipay.nix b/modules/satoshipay.nix
index 78305873..7ac6cdb1 100644
--- a/modules/satoshipay.nix
+++ b/modules/satoshipay.nix
@@ -16,6 +16,43 @@
 
   nixpkgs.config.allowUnfree = true;
 
+  programs.chromium = {
+    enable = true;
+    extensions = [
+      "cjpalhdlnbpafiamejdnhcphjbkeiagm" # ublock origin
+      "aeblfdkhhhdcdjpifhhbdiojplfjncoa" # 1password x
+    ];
+    homepageLocation = "about:blank";
+    defaultSearchProviderSearchURL = "https://duckduckgo.com/?q={searchTerms}";
+    defaultSearchProviderSuggestURL = "https://duckduckgo.com/ac/?q={searchTerms}&type=list";
+    # https://www.chromium.org/administrators/policy-list-3
+    extraOpts = {
+      BlockThirdPartyCookies = true;
+      CookiesBlockedForUrls = [
+        "[*.]smartlock.google.com"
+        "[*.]mediumSmartLockSigninAllowed.com"
+      ];
+      SyncDisabled = true;
+      BuiltInDnsClientEnabled = false;
+      BrowserSignin = 0;
+      EasyUnlockAllowed = false;
+      EnableMediaRouter = false;
+      CloudPrintProxyEnabled = false;
+      CloudPrintSubmitEnabled = false;
+      SafeBrowsingEnabled = false;
+      RestoreOnStartup = 1; # Restore last session
+      AlwaysOpenPdfExternally = true;
+      BrowserNetworkTimeQueriesEnabled = false;
+      NotificationsAllowedForUrls = [
+        "gitlab.satoshipay.tech"
+        "calendar.google.com"
+      ];
+      NotificationsBlockedForUrls = [
+        "[.*]reddit.com"
+      ];
+    };
+  };
+
   environment.systemPackages = with pkgs; [
     awscli
     caddy