wildfire: 425 current 2025-07-06 11:48:38 25.05.20250620.b2485d5 6.15.3 *

disable automatic upgrades

modules/common.nix

@@ -199,22 +199,6 @@ in {
     };
   };
 
-  # ================================
-  # AUTOMATIC MAINTENANCE
-  # ================================
-  # Configure automatic system updates for security
-  system.autoUpgrade = {
-    enable = true;
-    flake = inputs.self.outPath; # Use this flake for updates
-    flags = [
-      "--update-input"
-      "nixpkgs" # Update nixpkgs input
-      "-L" # Print build logs for transparency
-    ];
-    dates = "02:00"; # Run at 2 AM
-    randomizedDelaySec = "45min"; # Random delay to avoid server load
-  };
-
   # ================================
   # FONTS
   # ================================

modules/programs.nix

@@ -235,7 +235,34 @@ in {
         };
       };
     };
-    thunderbird.enable = true;
+    thunderbird = {
+      enable = true;
+      policies = {
+        DisableTelemetry = true;
+        DisableFirefoxStudies = true;
+        DisablePocket = true;
+        DNSOverHTTPS = {
+          Enable = true;
+          Provider = "dns.schulze.network";
+          Locked = false;
+          Fallback = true;
+        };
+        ExtensionSettings = {
+          "cloud@johannes-endres.de" = {
+            installation_mode = "force_installed";
+            install_url = "https://addons.thunderbird.net/thunderbird/downloads/latest/filelink-nextcloud-owncloud/addon-987761-latest.xpi";
+          };
+          "dkim_verifier@pl" = {
+            installation_mode = "force_installed";
+            install_url = "https://addons.thunderbird.net/thunderbird/downloads/latest/dkim-verifier/addon-438634-latest.xpi";
+          };
+          "gruvbox-dark@calch.themes.thunderbird.net" = {
+            installation_mode = "force_installed";
+            install_url = "https://addons.thunderbird.net/thunderbird/downloads/latest/gruvbox-dark-thunderbird/addon-987835-latest.xpi";
+          };
+        };
+      };
+    };
     steam = {
       enable = true;
       remotePlay.openFirewall = true;