From 22f2bd2d2cf3ad881f73e9407348aae42ba6854c Mon Sep 17 00:00:00 2001
From: mustard <mustard@homelab0ne.xyz>
Date: Tue, 4 Mar 2025 02:07:58 +0100
Subject: [PATCH] More tweaks

---
 development.yaml                              | 26 ++++++++++++++++---
 .../defaults/preferences/userjs-override.js   |  5 +++-
 .../lib64/firefox/distribution/policies.json  | 19 +-------------
 roles/baseline/tasks/main.yaml                |  2 +-
 4 files changed, 28 insertions(+), 24 deletions(-)

diff --git a/development.yaml b/development.yaml
index cb51c54..623105d 100644
--- a/development.yaml
+++ b/development.yaml
@@ -1,8 +1,26 @@
-- name: Configure Fedora 41 Gnome Template
+- name: Configure Fedora 41 Gnome Template for development
   hosts: 127.0.0.1
   connection: local
   tasks:
-    - ansible.builtin.include_role:
-      name: 'baseline'
+    - name: 'Baseline hardening'
+      ansible.builtin.include_role:
+        name: 'baseline'
       vars:
-        umask_changes: 'false'
\ No newline at end of file
+        - umask_changes: false
+        - manage_network: true
+
+    - name: 'Gnome package stuff'
+      ansible.builtin.include_role:
+        name: gnome
+
+    - name: 'Setup dom0 prompt for sudo'
+      ansible.builtin.include_role:
+        name: sudo-dom0-prompt
+
+    - name: 'Install trivalent'
+      ansible.builtin.include_role:
+        name: trivalent
+
+    - name: 'Setup arkenfox'
+      ansible.builtin.include_role:
+        name: arkenfox
\ No newline at end of file
diff --git a/roles/arkenfox/files/usr/lib64/firefox/browser/defaults/preferences/userjs-override.js b/roles/arkenfox/files/usr/lib64/firefox/browser/defaults/preferences/userjs-override.js
index 6fb9b9e..e75a4b8 100644
--- a/roles/arkenfox/files/usr/lib64/firefox/browser/defaults/preferences/userjs-override.js
+++ b/roles/arkenfox/files/usr/lib64/firefox/browser/defaults/preferences/userjs-override.js
@@ -1,3 +1,6 @@
 pref("privacy.resistFingerprinting.letterboxing", false); // disable letterboxing because it's very annoying
 pref("javascript.options.wasm", true); // enable WASM because element and proton need it
-pref("general.smoothScroll", true); // why do I have this set?
\ No newline at end of file
+pref("general.smoothScroll", true); // why do I have this set?
+
+pref("browser.bookmarks.restore_default_bookmarks", false); // remove Fedora's default bookmarks because I never use them
+pref("browser.bookmarks.file", '');
\ No newline at end of file
diff --git a/roles/arkenfox/files/usr/lib64/firefox/distribution/policies.json b/roles/arkenfox/files/usr/lib64/firefox/distribution/policies.json
index 9b966fa..1b29d62 100644
--- a/roles/arkenfox/files/usr/lib64/firefox/distribution/policies.json
+++ b/roles/arkenfox/files/usr/lib64/firefox/distribution/policies.json
@@ -29,28 +29,11 @@
 				]
 		},
 		"ExtensionSettings": {
-			"*": {
-				"blocked_install_message": "Denied by Brace",
-				"install_sources": [ "about:addons", "https://addons.mozilla.org/" ],
-				"installation_mode": "blocked",
-				"allowed_types": [ "extension" ]
 			},
 			"uBlock0@raymondhill.net": {
 				"installation_mode": "force_installed",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/uBlock0@raymondhill.net/latest.xpi"
-			},
-			"{73a6fe31-595d-460b-a920-fcc0f8843232}": {
-				"installation_mode": "allowed",
-				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/{73a6fe31-595d-460b-a920-fcc0f8843232}/latest.xpi"
-			},
-			"{9a41dee2-b924-4161-a971-7fb35c053a4a}": {
-				"installation_mode": "allowed",
-				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/{9a41dee2-b924-4161-a971-7fb35c053a4a}/latest.xpi"
-			},
-			"{48748554-4c01-49e8-94af-79662bf34d50}": {
-				"installation_mode": "allowed",
-				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/{48748554-4c01-49e8-94af-79662bf34d50}/latest.xpi"
-			}
+
 		},
 		"FirefoxHome": {
 			"Search": true,
diff --git a/roles/baseline/tasks/main.yaml b/roles/baseline/tasks/main.yaml
index ac5efb8..6d66c89 100644
--- a/roles/baseline/tasks/main.yaml
+++ b/roles/baseline/tasks/main.yaml
@@ -84,7 +84,7 @@
     mode: '0644'
   when: manage_network == true
 
-- name: Copy dconf files + xdg-desktop-portals fix + Network manager
+- name: Disable coredump + GNOME telemetry
   ansible.builtin.copy:
     src: '{{ item }}'
     dest: '/{{ item }}'