From 34d7bb4bf33f466cc10e24d4a0789ff68b9f3ce3 Mon Sep 17 00:00:00 2001
From: Dmitry Voronin <hi@voronind.com>
Date: Wed, 21 Aug 2024 11:49:33 +0300
Subject: [PATCH] Firefox : Enable HTTPS-only mode.

---
 home/program/firefox/default.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/home/program/firefox/default.nix b/home/program/firefox/default.nix
index 59f746d1..3a3a2341 100644
--- a/home/program/firefox/default.nix
+++ b/home/program/firefox/default.nix
@@ -45,6 +45,10 @@
 		// Disable built-in DoH.
 		user_pref("doh-rollout.disable-heuristics", true);
 		user_pref("network.trr.mode", 5);
+
+		// HTTPS only mode.
+		user_pref("dom.security.https_only_mode", true);
+		user_pref("dom.security.https_only_mode_ever_enabled", true);
 	'';
 
 	mkExtension = install_url: {