{pkgs, ...}: let
  user = import ../data/user.nix {};
in{
  programs.firefox = {
    enable = true;

    policies = {
      CaptivePortal = false;
      DisablePocket = true;
      DisableTelemetry = true;
      DisableFirefoxStudies = true;
      FirefoxHome = {
        Pocket = false;
        Snippets = false;
      };
    };

    profiles = {
      default = {
        isDefault = true;
        name = "User";

        search = {
          default = "ddg";
          force = true;
          privateDefault = "ddg";
        };

        settings = {
          # disable warning when editing about:config
          "browser.aboutConfig.showWarning" = false;
          # webgpu
          "dom.webgpu.enabled" = true;
          "gfx.webrender.all" = true;
          "signon.rememberSignons" = false;
          # mozilla syncserver
          "identity.sync.tokenserver.uri" = "https://nirgendswo.com:8001/1.0/sync/1.5";
          "services.sync.username" = user.email;
          "browser.startup.page" = 3; # resume previous session
          "browser.startup.homepage" = "about:home";
          "browser.toolbars.bookmarks.visibility" = "never";
          "sidebar.verticalTabs" = true;
          "browser.uiCustomization.horizontalTabstrip" = [
            "firefox-view-button"
            "tabbrowser-tabs"
            "new-tab-button"
          ];

          "browser.download.autohideButton" = false;
          "browser.uiCustomization.state" = ''
{
  "placements": {
    "widget-overflow-fixed-list": [],
    "unified-extensions-area": [
      "_04188724-64d3-497b-a4fd-7caffe6eab29_-browser-action"
    ],
    "nav-bar": [
      "sidebar-button",
      "firefox-view-button",
      "alltabs-button",
      "back-button",
      "forward-button",
      "stop-reload-button",
      "urlbar-container",
      "vertical-spacer",
      "_446900e4-71c2-419f-a6a7-df9c091e268b_-browser-action",
      "unified-extensions-button",
      "downloads-button"
    ],
    "toolbar-menubar": [
      "menubar-items"
    ],
    "TabsToolbar": [],
    "vertical-tabs": [
      "tabbrowser-tabs"
    ],
    "PersonalToolbar": [
      "import-button",
      "personal-bookmarks"
    ]
  },
  "seen": [
    "developer-button",
    "screenshot-button",
    "_446900e4-71c2-419f-a6a7-df9c091e268b_-browser-action",
    "ublock0_raymondhill_net-browser-action",
    "_04188724-64d3-497b-a4fd-7caffe6eab29_-browser-action"
  ],
  "dirtyAreaCache": [
    "nav-bar",
    "TabsToolbar",
    "vertical-tabs",
    "PersonalToolbar",
    "unified-extensions-area",
    "toolbar-menubar"
  ],
  "currentVersion": 23,
  "newElementCount": 0
}'';

          # hardening
          "browser.newtabpage.enabled" = true;
          "browser.newtabpage.activity-stream.feeds.telemetry" = false;
          "browser.newtabpage.activity-stream.telemetry" = false;
          "browser.newtabpage.activity-stream.feeds.snippets" = false;
          "browser.newtabpage.activity-stream.feeds.section.topstories" = false;
          "browser.newtabpage.activity-stream.showSponsoredTopSites" = false;
          "browser.newtabpage.activity-stream.showSponsored" = false;
          "browser.newtabpage.activity-stream.feeds.discoverystreamfeed" = false;
          "browser.newtabpage.activity-stream.default.sites" = "";
          "browser.newtab.preload" = false;
          "geo.provider.network.url" = "https://location.services.mozilla.com/v1/geolocate?key=%MOZILLA_API_KEY%";
          "geo.provider.ms-windows-location" = false;
          "geo.provider.use_corelocation" = false;
          "geo.provider.use_gpsd" = false;
          "geo.provider.use_geoclue" = false;
          "browser.region.network.url" = "";
          "browser.region.update.enabled" = false;
          "intl.accept_languages" = "en-US,en-GB,en";
          "javascript.use_us_language_locale" = true;
          "app.update.auto" = false;

          "extensions.discover.enabled" = false;
          "extensions.htmlaboutaddons.recommendations.enabled" = false;
          "extenisons.getAddons.showPane" = false;

          "datareporting.healthreport.uploadEnabled" = false;
          "datareporting.policy.dataSubmissionEnabled" = false;
          "toolkit.telemetry.enabled" = false;
          "toolkit.telemetry.unified" = false;
          "toolkit.telemetry.server" = "data:,";
          "toolkit.telemetry.archive.enabled" = false;
          "toolkit.telemetry.newProfilePing.enabled" = false;
          "toolkit.telemetry.shutdownPingSender.enabled" = false;
          "toolkit.telemetry.updatePing.enabled" = false;
          "toolkit.telemetry.bhrPing.enabled" = false;
          "toolkit.telemetry.firstShutdownPing.enabled" = false;
          "toolkit.telemetry.coverage.opt-out" = true;
          "toolkit.coverage.opt-out" = true;
          "beacon.enabled" = false;

          "app.shield.optoutstudies.enabled" = false;

          "captivedetect.canonicalURL" = "";
          "network.captive-portal-service.enabled" = false;
          "network.connectivity-service.enabled" = false;

          "browser.safebrowsing.malware.enabled" = false;
          "browser.safebrowsing.phishing.enabled" = false;
          "browser.safebrowsing.blockedURIs.enabled" = false;
          "browser.safebrowsing.provider.google4.gethashURL" = "";
          "browser.safebrowsing.provider.google4.updateURL" = "";
          "browser.safebrowsing.provider.google4.dataSharingURL" = "";
          "browser.safebrowsing.provider.google.gethashURL" = "";
          "browser.safebrowsing.provider.google.updateURL" = "";

          "browser.safebrowsing.downloads.enabled" = false;
          "browser.safebrowsing.downloads.remote.enabled" = false;
          "browser.safebrowsing.downloads.remote.url" = "";
          "browser.safebrowsing.allowOverride" = false;

          "network.prefetch-next" = false;
          "network.dns.disablePrefetch" = true;
          "network.predictor.enabled" = false;

          "browser.fixup.alternate.enabled" = false;
          "browser.urlbar.trimURLs" = false;

          "browser.contentblocking.category" = "strict";
          "privacy.partition.serviceWorkers" = true;
          "privacy.partition.always_partition_third_party_non_cookie_storage" = true;
          "privacy.partition.always_partition_third_party_non_cookie_storage.exempt_sessionstorage" = true;
          "privacy.resistFingerprinting" = true;
          "privacy.resistFingerprinting.block_mozAddonManager" = true;

          "app.normandy.enabled" = false;
          "app.normandy.api_url" = "";
        };

        # extensions.packages = with pkgs.nur.repos.rycee.firefox-addons; [
        #   ublock-origin bitwarden rust-search-extension betterttv
        # ];
      };
    };
  };
}