add firefox config and extensions

packer/ansible/playbook.yml

@@ -43,8 +43,14 @@
       metalcut:
         socket: laser.lab.fablab-nea.de:9000
         dockerimage: r.jalr.de/fablab/metalcut
-    firefox_language_packs:
-      - de
+    firefox:
+      language_packs:
+        - de
+      extensions:
+        - id: uBlock0@raymondhill.net
+          url: https://addons.mozilla.org/firefox/downloads/file/1114441/ublock_origin-1.17.2-an+fx.xpi
+        - id: https-everywhere@eff.org
+          url: https://addons.mozilla.org/firefox/downloads/file/1082984/https_everywhere-2018.9.19-an+fx.xpi
     debian_sections:
       - main
       - contrib

packer/ansible/roles/firefox/files/firefox.js

@@ -0,0 +1,33 @@
+// debian settings
+pref("extensions.update.enabled", true);
+pref("intl.locale.requested", "");
+pref("browser.shell.checkDefaultBrowser", false);
+
+// disable trackers
+lockPref("app.normandy.enabled", false);
+lockPref("browser.chrome.errorReporter.enabled", false);
+lockPref("browser.safebrowsing.downloads.enabled", false);
+lockPref("browser.safebrowsing.downloads.remote.enabled", false);
+lockPref("browser.safebrowsing.malware.enabled", false);
+lockPref("browser.safebrowsing.passwords.enabled", false);
+lockPref("browser.safebrowsing.phishing.enabled", false);
+lockPref("browser.tabs.crashReporting.sendReport", false);
+lockPref("datareporting.healthreport.uploadEnabled", false);
+lockPref("datareporting.policy.dataSubmissionEnabled", false);
+lockPref("security.ssl.errorReporting.enabled", false);
+
+// design
+pref("browser.newtabpage.enabled", false);
+pref("browser.uiCustomization.state", '{"placements":{"widget-overflow-fixed-list":[],"PersonalToolbar":["personal-bookmarks"],"nav-bar":["back-button","forward-button","home-button","urlbar-container","stop-reload-button","downloads-button","library-button"],"TabsToolbar":["tabbrowser-tabs","new-tab-button","alltabs-button"],"toolbar-menubar":["menubar-items"]},"seen":["developer-button"],"dirtyAreaCache":["PersonalToolbar","nav-bar","TabsToolbar","toolbar-menubar"],"currentVersion":14,"newElementCount":3}');
+
+// privacy
+pref("privacy.donottrackheader.enabled", true);
+
+pref("privacy.history.custom", true);
+pref("places.history.enabled", false);
+pref("browser.formfill.enable", false);
+
+// search
+pref("browser.search.hiddenOneOffs", "Google,Amazon.de,Bing,Debian packages,DuckDuckGo,eBay,Ecosia,LEO Eng-Deu,Wikipedia (de)"); // hide „one click“ search eingines
+pref("browser.search.suggest.enabled", false);
+pref("browser.urlbar.placeholderName", "DuckDuckGo"); // defaults to google, even if DuckDuckGo is the default

packer/ansible/roles/firefox/files/policies.json

@@ -0,0 +1,26 @@
+{
+  "policies": {
+    "DNSOverHTTPS": {
+      "Enabled": false,
+      "Locked": false
+    },
+    "DisableFeedbackCommands": true,
+    "DisableFirefoxAccounts": true,
+    "DisableFirefoxStudies": true,
+    "DisablePocket": true,
+    "DisableTelemetry": true,
+    "EnableTrackingProtection": {
+      "Value": true,
+      "Locked": true
+    },
+    "NoDefaultBookmarks": true,
+    "OfferToSaveLogins": true,
+    "Homepage": {
+      "URL": "about:blank"
+    },
+    "OverrideFirstRunPage": "",
+    "SearchEngines": {
+      "Default": "DuckDuckGo"
+    }
+  }
+}

packer/ansible/roles/firefox/tasks/extensions.yml

@@ -0,0 +1,6 @@
+---
+- name: install firefox extensions
+  get_url:
+    url: "{{ item.url }}"
+    dest: "/usr/lib/firefox-esr/browser/extensions/{{ item.id }}.xpi"
+  loop: "{{ firefox.extensions }}"

packer/ansible/roles/firefox/tasks/main.yml

@@ -7,8 +7,22 @@
     apt:
       name: "firefox-esr-l10n-{{ item }}"
     with_items:
-      - "{{ firefox_language_packs }}"
-    when: firefox_language_packs is defined
+      - "{{ firefox.language_packs }}"
+    when: firefox.language_packs is defined
+
+  - name: install firefox config
+    copy:
+      src: firefox.js
+      dest: /etc/firefox-esr/firefox-esr.js
+
+  - name: install firefox policies
+    copy:
+      src: policies.json
+      dest: /usr/share/firefox-esr/distribution/policies.json
+
+  - import_tasks: extensions.yml
+    tags:
+      - firefox:extensions
 
   tags:
     - firefox