diff --git a/etc/fwupd/fwupd.conf b/etc/fwupd/fwupd.conf
new file mode 100644
index 0000000..b2ca55f
--- /dev/null
+++ b/etc/fwupd/fwupd.conf
@@ -0,0 +1,8 @@
+# use `man 5 fwupd.conf` for documentation
+[fwupd]
+DisabledPlugins=test;test_ble
+OnlyTrusted=true
+AllowEmulation=false
+
+[uefi_capsule]
+DisableCapsuleUpdateOnDisk=true