enzo/kusanagi: firefox — restrict search engines, block geo/notification prompts

Limit search engines to DuckDuckGo (default), Searx, Wikipedia, eBay, and
Google via the SearchEngines policy; remove Bing/Amazon/Perplexity. Silently
deny geolocation and notification permission prompts (permissions.default.*).
Note that Firefox View can't be disabled by pref/policy on modern Firefox.

Assisted-by: Claude:claude-opus-4-8

1 files changed, 32 insertions, 0 deletions

diff --git a/profiles/desktop.nix b/profiles/desktop.nix
index 5a47f96..f7f40df 100644
--- a/profiles/desktop.nix
+++ b/profiles/desktop.nix
@@ -78,6 +78,38 @@
       "browser.startup.page" = 0; # 0 = blank on startup
       "browser.newtabpage.enabled" = false;
       "browser.toolbars.bookmarks.visibility" = "never";
+      # Silently deny geolocation instead of prompting ("Website would like
+      # your location"). 2 = block, 0 = ask (default), 1 = allow. Per-site
+      # exceptions still override this (padlock icon → Location → Allow).
+      "permissions.default.geo" = 2;
+      # Likewise silently deny "Website would like to send notifications".
+      "permissions.default.desktop-notification" = 2;
+    };
+    # Note: Firefox View ("View recent browsing across windows and devices")
+    # can't be disabled via pref or policy on modern Firefox — the old
+    # browser.tabs.firefox-view pref was removed in Firefox 123. Remove its
+    # toolbar button manually (right-click the icon → Remove from Toolbar);
+    # the choice persists in the profile.
+
+    # Restrict the available search engines to exactly these five, in this
+    # order, with DuckDuckGo as default. DuckDuckGo/Google/Wikipedia/eBay are
+    # built-in; only Searx is added. Bing/Amazon/Perplexity (the other
+    # built-ins) are removed. SearchEngines works on regular Firefox as of v139.
+    policies.SearchEngines = {
+      Default = "DuckDuckGo";
+      Remove = [ "Bing" "Amazon.com" "Perplexity" ];
+      Add = [
+        {
+          Name = "Searx";
+          URLTemplate = "https://searx.be/search?q={searchTerms}";
+          Method = "GET";
+          IconURL = "https://searx.be/favicon.ico";
+          Alias = "searx";
+        }
+      ];
+      # Names must match the engines' internal names. Wikipedia's built-in
+      # engine is named "Wikipedia (en)" in the en-US locale.
+      Order = [ "DuckDuckGo" "Searx" "Wikipedia (en)" "eBay" "Google" ];
     };
   };