{etc,var/lib/}iwd/: read manual, adjust accordingly

etc/iwd/main.conf

@@ -9,6 +9,14 @@
 Country=FI
 # legacy compatibility, at least on Lumina?
 use_default_interface=true
-# build-in DHCP client
+# build-in network configuration including DHCP client
 EnableNetworkConfiguration=true
+# Generate a different spoofed MAC address for every SSID. Some networks
+# configured in /var/lib/iwd/ have a new MAC address for every connection.
+AddressRandomization=network
+
+[Network]
 EnableIPv6=true
+# resolvconf/systemd/none. I prefer configuring resolv.conf/unbound by
+# myself.
+NameResolvingService=none

var/lib/iwd/.gitignore

@@ -1,3 +1,4 @@
 *.psk
 *.8021x
-!private-wifi-sample.psk
+!private-cafe-sample.psk
+!private-home-sample.psk

var/lib/iwd/Helsingfors stads WLAN.open

@@ -0,0 +1,2 @@
+[Settings]
+AlwaysRandomizeAddress=true

var/lib/iwd/Helsingin kaupungin WLAN.open

@@ -0,0 +1,2 @@
+[Settings]
+AlwaysRandomizeAddress=true

var/lib/iwd/Helsinki City Open WLAN.open

@@ -0,0 +1,2 @@
+[Settings]
+AlwaysRandomizeAddress=true

var/lib/iwd/README.md

@@ -11,3 +11,9 @@ Notes:
 * `Settings.AutoConnect=true` is unnecessary as it defaults to true
   according to `man iwd.network`.
 * `IPv6.Enabled=true` defauls to true being also unnecessary.
+* `private-home-sample.psk` has a comment on MAC address override and sends
+   hostname with IPv4 DHCP. `private-cafe-sample.psk` always randomizes MAC
+   address and doesn't send hostname.
+* The `.open` networks always randomize MAC address too. If a network is
+  private and needs MAC address for captive portal override or something,
+  `private-home-sample.psk` should be adjusted from.

var/lib/iwd/Stadinetti.open

@@ -0,0 +1,2 @@
+[Settings]
+AlwaysRandomizeAddress=true

var/lib/iwd/openwireless.org.open

@@ -0,0 +1,2 @@
+[Settings]
+AlwaysRandomizeAddress=true

var/lib/iwd/openwireless.org_nomap.open

@@ -0,0 +1,2 @@
+[Settings]
+AlwaysRandomizeAddress=true

var/lib/iwd/private-cafe-sample.psk

@@ -1,9 +1,9 @@
-# This SSID is "private-wifi-sample", it comes from the filename
+# This SSID is "private-cafe-sample", it comes from the filename
 [Settings]
-AutoConnect=true
+AlwaysRandomizeAddress=true
-
-[IPv6]
-Enabled=true
 
 [Security]
 Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
+
+[IPv6]
+Enabled=true

var/lib/iwd/private-home-sample.psk

@@ -0,0 +1,15 @@
+# This SSID is "private-home-sample", it comes from the filename
+[Settings]
+AutoConnect=true
+# MAC address override. Takes priority over AlwaysRandomizeAddress
+#AddressOverride=
+
+[Security]
+Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
+
+[IPv4]
+# In home network recognising the device may be a quality of life feature
+SendHostname=true
+
+[IPv6]
+Enabled=true

var/lib/iwd/stadinet.open

@@ -0,0 +1,2 @@
+[Settings]
+AlwaysRandomizeAddress=true