diff --git a/patches/securefox-doh.patch b/patches/securefox-doh.patch index 7d8136b..2137769 100644 --- a/patches/securefox-doh.patch +++ b/patches/securefox-doh.patch @@ -4,9 +4,9 @@ o:/browser/app/profile/firefox.js +pref("network.trr.mode", 3); // Max Protection: only use DoH; do not fall back to native DNS +pref("network.trr.max-fails", 5); // Reduce max fail attempts -+pref("network.trr.uri", "https://mozilla.cloudflare-dns.com/dns-query"); // Default resolver for DoH -+pref("network.trr.custom_uri", "https://mozilla.cloudflare-dns.com/dns-query"); // Custom URI for DoH -+pref("network.trr.bootstrapAddr", "1.1.1.1"); // Bootstrap address for Cloudflare's DoH ++pref("network.trr.uri", "https://dns10.quad9.net/dns-query"); // Default resolver for DoH (Quad9) ++pref("network.trr.custom_uri", "https://dns10.quad9.net/dns-query"); // Custom URI for DoH (Quad9) ++pref("network.trr.bootstrapAddr", "9.9.9.9"); // Bootstrap address for Quad9's DoH +pref("network.trr.disable-ECS", true); // Disable EDNS Client Subnet +pref("network.trr.allow-rfc1918", false); // Block private addresses in TRR responses +pref("network.trr.skip-AAAA-when-not-supported", true); // Skip IPv6 lookups when not supported @@ -14,9 +14,7 @@ o:/browser/app/profile/firefox.js +pref("network.trr.wait-for-portal", false); // Do not wait for captive portal detection +pref("network.trr.excluded-domains", ""); // No additional exclusions for DoH +pref("network.trr.builtin-excluded-domains", "localhost,local"); // Default built-in exclusions -+pref("network.trr.ohttp.config_uri", "https://dooh.cloudflare-dns.com/.well-known/doohconfig"); // Oblivious HTTP configuration -+pref("network.trr.ohttp.uri", "https://dooh.cloudflare-dns.com/dns-query"); // Oblivious HTTP resolver URI -+pref("network.trr.use_ohttp", true); // Enable Oblivious HTTP for DNS -+pref("network.dns.echconfig.enabled", true); // Enable Encrypted Client Hello (ECH) for TLS -+pref("network.dns.http3_echconfig.enabled", true); // Enable ECH for HTTP/3 ++pref("network.trr.use_ohttp", false); // Disable Oblivious HTTP for DNS (unsupported by Quad9) ++pref("network.dns.echconfig.enabled", false); // Disable Encrypted Client Hello (ECH) (unsupported by Quad9) ++pref("network.dns.http3_echconfig.enabled", false); // Disable ECH for HTTP/3 (unsupported by Quad9) +pref("network.dns.echconfig.fallback_to_origin_when_all_failed", false); // Disable fallback to non-ECH diff --git a/patches/ui-cleanup.patch b/patches/ui-cleanup.patch new file mode 100644 index 0000000..889997f --- /dev/null +++ b/patches/ui-cleanup.patch @@ -0,0 +1,7 @@ +t:pref +i:/browser/app/profile/firefox.js +o:/browser/app/profile/firefox.js + ++pref("identity.fxaccounts.enabled", false); // Disable Firefox Account integration (removes "Sign in to Sync" and "Sync and save data") ++pref("browser.tabs.tabmanager.enabled", false); // Disable "List all tabs" button ++pref("browser.tabs.firefox-view", false); // Remove "View recent browsing" (Firefox View button) \ No newline at end of file