summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNatasha Moongrave <natasha@256phi.eu>2026-06-20 23:15:06 +0200
committerNatasha Moongrave <natasha@256phi.eu>2026-06-20 23:15:06 +0200
commit72d507619108a08bf6aee5d75c7745224ca35701 (patch)
tree18b43d37b0b42004b16074590080440c74394b96
parent12e698ef536aff14173dc9b57bf5db4a5a1c53ec (diff)
Fixed some browser config errors
-rw-r--r--modules/features/browser.nix229
-rw-r--r--modules/system/keyboard.nix6
2 files changed, 119 insertions, 116 deletions
diff --git a/modules/features/browser.nix b/modules/features/browser.nix
index 3146436..e24f252 100644
--- a/modules/features/browser.nix
+++ b/modules/features/browser.nix
@@ -1,8 +1,4 @@
-{
- self',
- inputs,
- ...
-}: let
+{inputs, ...}: let
extensions = {
core = [
"ublock-origin"
@@ -32,133 +28,140 @@ in {
# -----------------------------
# NIXOS MODULE
# -----------------------------
- flake.nixosModules.browser = {pkgs, ...}: {
- programs.librewolf = {
- enable = true;
- package = self'.packages.librewolf-sandboxed;
-
- languagePacks = ["en-GB" "cs" "sk" "de"];
-
- policies = {
- DisableTelemetry = true;
- DisableFirefoxStudies = true;
- DisablePocket = true;
- DisableFeedbackCommands = true;
-
- DefaultDownloadDirectory = "\${home}/Downloads";
-
- # -----------------------------
- # EXTENSIONS
- # -----------------------------
- Extensions.Install = mkExt (extensions.core ++ extensions.security ++ extensions.youtube);
-
- Extensions.Uninstall = [
- "google@search.mozilla.org"
- "bing@search.mozilla.org"
- "ddg@search.mozilla.org"
- ];
- };
+ flake.nixosModules.browser = {
+ lib,
+ pkgs,
+ self,
+ ...
+ }: {
+ home-manager.users.mun = {
+ programs.librewolf = {
+ enable = true;
+ package = inputs.self.packages.${pkgs.stdenv.hostPlatform.system}.librewolf-sandboxed;
+
+ languagePacks = ["en-GB" "cs" "sk" "de"];
+
+ policies = {
+ DisableTelemetry = true;
+ DisableFirefoxStudies = true;
+ DisablePocket = true;
+ DisableFeedbackCommands = true;
+
+ DefaultDownloadDirectory = "\${home}/Downloads";
+
+ # -----------------------------
+ # EXTENSIONS
+ # -----------------------------
+ Extensions.Install = mkExt (extensions.core ++ extensions.security ++ extensions.youtube);
+
+ Extensions.Uninstall = [
+ "google@search.mozilla.org"
+ "bing@search.mozilla.org"
+ "ddg@search.mozilla.org"
+ ];
+ };
- profiles = {
- # -------------------------
- # 1. DAILY PROFILE (mun)
- # -------------------------
- mun = {
- isDefault = true;
-
- search = {
- force = true;
- default = "duckduckbleh";
-
- engines = {
- "duckduckbleh" = {
- urls = [
- {
- template = "https://noai.duckduckgo.com/";
- params = [
- {
- name = "q";
- value = "{searchTerms}";
- }
- ];
- }
- ];
- definedAliases = ["duck" "d"];
+ profiles = {
+ # -------------------------
+ # 1. DAILY PROFILE (mun)
+ # -------------------------
+ mun = {
+ isDefault = true;
+
+ search = {
+ force = true;
+ default = "duckduckbleh";
+
+ engines = {
+ "duckduckbleh" = {
+ urls = [
+ {
+ template = "https://noai.duckduckgo.com/";
+ params = [
+ {
+ name = "q";
+ value = "{searchTerms}";
+ }
+ ];
+ }
+ ];
+ definedAliases = ["duck" "d"];
+ };
};
};
- };
- settings = {
- "signon.rememberSignons" = false;
- "browser.startup.homepage" = "about:blank";
+ settings = {
+ "signon.rememberSignons" = false;
+ "browser.startup.homepage" = "about:blank";
+ };
};
- };
- # -------------------------
- # 2. WORK PROFILE
- # -------------------------
- work = {
- isDefault = false;
+ # -------------------------
+ # 2. WORK PROFILE
+ # -------------------------
+ work = {
+ isDefault = false;
- settings = {
- # more permissive (auth sites break otherwise)
- "signon.rememberSignons" = true;
- "network.cookie.lifetimePolicy" = 0;
+ settings = {
+ # more permissive (auth sites break otherwise)
+ "signon.rememberSignons" = true;
+ "network.cookie.lifetimePolicy" = 0;
+ };
};
- };
- # -------------------------
- # 3. SCHOOL PROFILE
- # -------------------------
- school = {
- isDefault = false;
+ # -------------------------
+ # 3. SCHOOL PROFILE
+ # -------------------------
+ school = {
+ isDefault = false;
- settings = {
- "signon.rememberSignons" = true;
- "privacy.clearOnShutdown.cookies" = false;
+ settings = {
+ "signon.rememberSignons" = true;
+ "privacy.clearOnShutdown.cookies" = false;
+ };
};
- };
- # -------------------------
- # 4. OPSEC PROFILE (STRICT)
- # -------------------------
- opsec = {
- isDefault = false;
+ # -------------------------
+ # 4. OPSEC PROFILE (STRICT)
+ # -------------------------
+ opsec = {
+ isDefault = false;
- settings = {
- "signon.rememberSignons" = false;
- "network.cookie.lifetimePolicy" = 2;
+ settings = {
+ "signon.rememberSignons" = false;
+ "network.cookie.lifetimePolicy" = 2;
- "privacy.clearOnShutdown.cookies" = true;
- "privacy.clearOnShutdown.history" = true;
+ "privacy.clearOnShutdown.cookies" = true;
+ "privacy.clearOnShutdown.history" = true;
+ };
};
};
- };
- # GLOBAL BASELINE (applies to all profiles)
- settings = {
- "privacy.trackingprotection.enabled" = true;
- "network.dns.disablePrefetch" = true;
- "browser.send_pings" = false;
- "dom.security.https_only_mode" = true;
- "privacy.resistFingerprinting" = true;
+ # GLOBAL BASELINE (applies to all profiles)
+ settings = {
+ "privacy.trackingprotection.enabled" = true;
+ "network.dns.disablePrefetch" = true;
+ "browser.send_pings" = false;
+ "dom.security.https_only_mode" = true;
+ "privacy.resistFingerprinting" = true;
+ };
};
};
+ };
- perSystem = {pkgs, ...}: {
- packages.librewolf-sandboxed = pkgs.writeShellScriptBin "librewolf" ''
- exec ${pkgs.bubblewrap}/bin/bwrap \
- --unshare-all \
- --die-with-parent \
- --proc /proc \
- --dev /dev \
- --tmpfs /tmp \
- --ro-bind /nix/store /nix/store \
- --dir $HOME \
- --setenv HOME $HOME \
- --setenv MOZ_ENABLE_WAYLAND 1 \
- ${pkgs.librewolf}/bin/librewolf "$@"
- '';
- };
+ perSystem = {pkgs, ...}: {
+ packages.librewolf-sandboxed = pkgs.writeShellScriptBin "librewolf" ''
+ exec ${pkgs.bubblewrap}/bin/bwrap \
+ --unshare-all \
+ --die-with-parent \
+ --proc /proc \
+ --dev /dev \
+ --tmpfs /tmp \
+ --ro-bind /nix/store /nix/store \
+ --dir $HOME \
+ --setenv HOME $HOME \
+ --setenv MOZ_ENABLE_WAYLAND 1 \
+ ${pkgs.librewolf}/bin/librewolf "$@"
+ '';
};
}
diff --git a/modules/system/keyboard.nix b/modules/system/keyboard.nix
index 1333637..3875e58 100644
--- a/modules/system/keyboard.nix
+++ b/modules/system/keyboard.nix
@@ -3,9 +3,9 @@
lib,
...
}: {
- flake.nixosModule.keyboard = {...}: {
- xkb = {
- layout = lib.mkDefauklt "cz";
+ flake.nixosModules.keyboard = {...}: {
+ services.xkb = {
+ layout = lib.mkDefault "cz";
options = lib.mkDefault "eurosign:e,caps:escape";
};
};