diff --git a/firefox/files/foo.sh.js b/firefox/files/foo.sh.js
new file mode 100644
index 0000000..2374e7d
--- /dev/null
+++ b/firefox/files/foo.sh.js
@@ -0,0 +1,5 @@
+// set defaults but allow user to change
+pref("startup.homepage_override_url", "https://www.foo.sh/");
+pref("startup.homepage_welcome_url", "https://www.foo.sh/");
+// lock these settings
+lockPref("signon.rememberSignons", false);
diff --git a/firefox/tasks/main.yml b/firefox/tasks/main.yml
new file mode 100644
index 0000000..77551c1
--- /dev/null
+++ b/firefox/tasks/main.yml
@@ -0,0 +1,13 @@
+---
+- name: install packages
+  package:
+    name: firefox
+    state: installed
+
+- name: install default settings
+  copy:
+    dest: /usr/lib64/firefox/defaults/preferences/00-foo.sh.js
+    src: foo.sh.js
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"
diff --git a/thunderbird/files/foo.sh.js b/thunderbird/files/foo.sh.js
new file mode 100644
index 0000000..404093a
--- /dev/null
+++ b/thunderbird/files/foo.sh.js
@@ -0,0 +1,2 @@
+// set defaults but allow user to change
+pref("signon.rememberSignons", false);
diff --git a/thunderbird/tasks/main.yml b/thunderbird/tasks/main.yml
new file mode 100644
index 0000000..ab62649
--- /dev/null
+++ b/thunderbird/tasks/main.yml
@@ -0,0 +1,13 @@
+---
+- name: install packages
+  package:
+    name: thunderbird
+    state: installed
+
+- name: install default settings
+  copy:
+    dest: /usr/lib64/thunderbird/defaults/pref/00-foo.sh.js
+    src: foo.sh.js
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"