init

2026-09-06 17:32:17 +02:00
commit e37e956f95
12 changed files with 956 additions and 0 deletions
@@ -0,0 +1,57 @@
+# Bureau Cinnamon générique pour la flotte. Adapté (pas importé) depuis
+# nixos_cinnamon/hosts/cinnamon/desktop-cinnamon.nix : les deux repos
+# restent indépendants au `git pull`.
+{ pkgs, ... }:
+
+{
+  services.xserver.enable = true;
+  services.xserver.displayManager.lightdm.enable = true;
+  services.xserver.desktopManager.cinnamon.enable = true;
+  services.accounts-daemon.enable = true;
+
+  environment.cinnamon.excludePackages = with pkgs; [
+    celluloid
+    warpinator
+  ];
+
+  # Réglages de confidentialité génériques (pas de SearXNG/DNS personnels
+  # comme sur le poste perso — cette config est destinée à être publique).
+  programs.firefox = {
+    enable = true;
+    languagePacks = [ "fr" ];
+
+    preferences = {
+      "privacy.resistFingerprinting" = true;
+      "browser.newtabpage.activity-stream.showSponsored" = false;
+      "browser.search.suggest.enabled" = false;
+      "dom.security.https_only_mode" = true;
+      "media.peerconnection.enabled" = false;
+      "geo.enabled" = false;
+      "network.captive-portal-service.enabled" = false;
+    };
+
+    policies = {
+      DisableTelemetry = true;
+      DisablePocket = true;
+      DisableFirefoxStudies = true;
+      OfferToSaveLogins = false;
+      DontCheckDefaultBrowser = true;
+      EnableTrackingProtection = {
+        Value = true;
+        Locked = true;
+      };
+      ExtensionSettings = {
+        "uBlock0@raymondhill.net" = {
+          install_url = "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi";
+          installation_mode = "force_installed";
+        };
+      };
+    };
+  };
+
+  environment.systemPackages = with pkgs; [
+    libreoffice
+    thunderbird
+    vlc
+  ];
+}