nixos-system-config/modules/nixos/multimedia/web/firefox.nix

{ username, pkgs, ... }:

{
  environment.systemPackages = with pkgs; [
    tor-browser
  ];

  environment.persistence."/nix/config" = {
    users."${username}".directories = [
      ".config/mozilla"
    ];
  };

  programs.firefox = {
    enable = true;
    package = pkgs.firefox-esr;
    policies = {
      EnableTrackingProtection = {
        Value = true;
        Cryptomining = true;
        Fingerprinting = true;
        EmailTracking = true;
      };
      DisableTelemetry = true;
      DisablePocket = true;
      DisableFirefoxStudies = true;
      DisableFirefoxAccounts = false;
      DisableAccounts = false;
      DontCheckDefaultBrowser = true;
      OverrideFirstRunPage = "";
      OverridePostUpdatePage = "";
      NoDefaultBookmarks = true;
      Cookies = {
        Behaviour = "reject-foreign";
        BehaviourPrivateBrowsing = "reject-foreign";
      };

      SearchEngines = { # ESR only
        Remove = [ "Bing" "Google" "DuckDuckGo" "Wikipedia (en)" ];
      };
    };
  };
}