From: Ullli <ullli@freie-schul-it.de>
Date: Mon, 24 Nov 2025 16:45:31 +0000 (+0100)
Subject: Einstellungen fuer Firefox
X-Git-Url: https://freie-schul-it.de/gitweb/fsit_cmgt.git/commitdiff_plain/fc24eaa894591fc0721fd1fe62c1b422ff5b1759?ds=sidebyside;hp=793d18f4f1988b2bd4b1c5c99b69cc689da6cefd

Einstellungen fuer Firefox
---

diff --git a/defaults/main.yml b/defaults/main.yml
index e4c2709..009096c 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -5,4 +5,9 @@ fsit_cmgt_inventory:
 fsit_cmgt_benutzername:
 fsit_cmgt_kommentar:
 fsit_cmgt_is_sudoer: false
-fsit_cmgt_printserver:  
+fsit_cmgt_printserver:
+# firefox
+fsit_cmgt_blocked_install_message: Bitte wende Dich an den Support.
+fsit_cmgt_homepage_url: https://freie-schul-it.de
+fsit_cmgt_requested_locales: "de"
+fsit_cmgt_searchengine: DuckDuckGo
diff --git a/tasks/app-settings.yml b/tasks/app-settings.yml
new file mode 100644
index 0000000..0969008
--- /dev/null
+++ b/tasks/app-settings.yml
@@ -0,0 +1,13 @@
+---
+- name: Create firefox-policies directory
+  ansible.builtin.file:
+    path: /etc/firefox/policies
+    state: directory
+- name: Copy firefox-policies config file
+  ansible.builtin.copy:
+    src: firefox_policies.json.j2
+    dest: /etc/firefox/policies/policies.json
+    owner: root
+    group: root
+    mode: 0644
+# ?Change jamaica/hibiscus config
diff --git a/templates/firefox_policies.json.j2 b/templates/firefox_policies.json.j2
new file mode 100644
index 0000000..b324065
--- /dev/null
+++ b/templates/firefox_policies.json.j2
@@ -0,0 +1,90 @@
+{
+  "policies": {
+    "DisableBuiltinPDFViewer": true,
+    "DisableFeedbackCommands": true,
+    "DisableFirefoxAccounts": true,
+    "DisableFirefoxStudies": true,
+    "DisablePocket": true,
+    "DisableProfileImport": true,
+    "DisableTelemetry": true,
+    "EnableTrackingProtection": {
+      "Cryptomining": true,
+      "Fingerprinting": true,
+      "Value": true
+    },
+    "ExtensionSettings": {
+      "*": {
+        "allowed_types": [
+          "extension",
+	  "themes",
+	  "dictionary",
+	  "locale"
+        ],
+        "blocked_install_message": "{{ fsit_cmgt_blocked_install_message  }}",
+        "install_sources": [
+          "about:addons",
+          "https://addons.mozilla.org/"
+        ],
+        "installation_mode": "allowed"
+      },
+      "CanvasBlocker@kkapsner.de": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/canvasblocker/latest.xpi",
+        "installation_mode": "blocked"
+      },
+      "{74145f27-f039-47ce-a470-a662b129930a}": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/clearurls/latest.xpi",
+        "installation_mode": "blocked"
+      },
+      "keepassxc-browser@keepassxc.org": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/keepassxc-browser/latest.xpi",
+        "installation_mode": "normal_installed"
+      },
+      "skipredirect@sblask": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/skip-redirect/latest.xpi",
+        "installation_mode": "blocked"
+      },
+      "uBlock0@raymondhill.net": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi",
+        "installation_mode": "force_installed"
+      }
+    },
+    "FirefoxHome": {
+      "Highlights": false,
+      "Pocket": false,
+      "Search": true,
+      "Snippets": false,
+      "TopSites": true
+    },
+    "FlashPlugin": {
+      "Default": false,
+      "Locked": true
+    },
+    "Homepage": {
+      "StartPage": "homepage",
+      "URL": "{{ fsit_cmgt_homepage_url }}"
+    },
+    "NewTabPage": true,
+    "PasswordManagerEnabled": false,
+    "Preferences": {
+      "media.gmp-gmpopenh264.enabled": true,
+      "media.gmp-widevinecdm.enabled": true
+    },
+    "PrimaryPassword": false,
+    "RequestedLocales": [{{  fsit_cmgt_requested_locales  }}],
+    "SanitizeOnShutdown": {
+      "Cache": true,
+      "OfflineApps": true
+    },
+    "SearchEngines": {
+      "Default": "{{ fsit_cmgt_searchengine }}",
+      "DefaultPrivate": "{{ fsit_cmgt_searchengine }}",
+      "Remove": [
+        "eBay",
+        "Amazon.com",
+        "Amazon.de",
+        "Google",
+        "Bing"
+      ]
+    }
+  }
+}