Compare commits

...

4 Commits

7 changed files with 17 additions and 13 deletions

View File

@ -671,7 +671,7 @@
}, },
"browser.display.use_document_fonts": { "browser.display.use_document_fonts": {
"Comment": "Are webpages allowed to set their own fonts by default? 0 forbids them. See also browser.display.use_document_fonts.icon_font_allowlist for what webpages are allowed to set. If changing this, see also fingerprinting overrides", "Comment": "Are webpages allowed to set their own fonts by default? 0 forbids them. See also browser.display.use_document_fonts.icon_font_allowlist for what webpages are allowed to set. If changing this, see also fingerprinting overrides",
"Status": "user", "Status": "locked",
"Type": "number", "Type": "number",
"Value": 0 "Value": 0
}, },

View File

@ -14,6 +14,7 @@ use_default_interface=true
# Build-in network configuration including DHCP client (and server when # Build-in network configuration including DHCP client (and server when
# tethering), true if not using systemd-networkd! # tethering), true if not using systemd-networkd!
#EnableNetworkConfiguration=true
#EnableNetworkConfiguration=false #EnableNetworkConfiguration=false
# NOTE! Disable this in case of trouble connecting to network entirely! # NOTE! Disable this in case of trouble connecting to network entirely!
@ -22,17 +23,17 @@ use_default_interface=true
# Generate a different spoofed MAC address for every SSID. Some networks # Generate a different spoofed MAC address for every SSID. Some networks
# configured in /var/lib/iwd/ have a new MAC address for every connection. # configured in /var/lib/iwd/ have a new MAC address for every connection.
AddressRandomization=network #AddressRandomization=network
# Randomize only 3 last octets of MAC. Reveals the manufacturer, but doesn't # Randomize only 3 last octets of MAC. Reveals the manufacturer, but doesn't
# set the locally administered bit. However the range is 00:00:01 to 00:00:FE # set the locally administered bit. However the range is 00:00:01 to 00:00:FE
# (254 possible addresses!) # (254 possible addresses!)
# Helsinki City WLAN (and variations) doesn't seem to like "full" (default) # Helsinki City WLAN (and variations) doesn't seem to like "full" (default)
AddressRandomizationRange=nic #AddressRandomizationRange=nic
# Always require management frame protection. May break things especially with # Always require management frame protection. May break things especially with
# legacy networks and hardware! Switch to 1 (default) for only when supported # legacy networks and hardware! Switch to 1 (default) for only when supported
# by both sides (downgrade attack possible?). # by both sides (downgrade attack possible?).
ManagementFrameProtection=2 #ManagementFrameProtection=2
# It must be 1 for Lumina (ThinkPad T470) and MikroTik Chateau 5G to accept # It must be 1 for Lumina (ThinkPad T470) and MikroTik Chateau 5G to accept
# each other, otherwise fallback to open guest network happens. # each other, otherwise fallback to open guest network happens.
#ManagementFrameProtection=1 #ManagementFrameProtection=1
@ -46,7 +47,7 @@ EnableIPv6=true
# systemd-resolved. NOTE! Must be used in conjunction with # systemd-resolved. NOTE! Must be used in conjunction with
# EnableNetworkConfiguration! # EnableNetworkConfiguration!
#NameResolvingService=systemd #NameResolvingService=systemd
#NameResolvingService=none NameResolvingService=none
# Default 300, lower preferred by system. Useful when WiFi is known faster # Default 300, lower preferred by system. Useful when WiFi is known faster
# than ethernet like having 10 Mbps switch from time before the building had # than ethernet like having 10 Mbps switch from time before the building had
# anything faster than DSL... # anything faster than DSL...

View File

@ -659,6 +659,7 @@ alias nordvpn-off2=nordvpn-offf
alias flatpak="LANG=C.UTF-8 flatpak" alias flatpak="LANG=C.UTF-8 flatpak"
# Search without description # Search without description
alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application" alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application"
alias flatpakl="LANG=C.UTF-8 flatpak list --columns=origin,version,application"
if hash homebrew 2> /dev/null; then if hash homebrew 2> /dev/null; then
alias brew=homebrew alias brew=homebrew

View File

@ -647,6 +647,7 @@ alias nordvpn-off2=nordvpn-offf
alias flatpak="LANG=C.UTF-8 flatpak" alias flatpak="LANG=C.UTF-8 flatpak"
# Search without description # Search without description
alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application" alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application"
alias flatpakl="LANG=C.UTF-8 flatpak list --columns=origin,version,application"
if hash homebrew 2> /dev/null; then if hash homebrew 2> /dev/null; then
alias brew=homebrew alias brew=homebrew

View File

@ -1,9 +1,9 @@
[Settings] #[Settings]
#AlwaysRandomizeAddress=true #AlwaysRandomizeAddress=true
# Disables connections without Management Frame Protection (and TKIP) # Disables connections without Management Frame Protection (and TKIP)
TransitionDisable=true #TransitionDisable=true
# Requires WiFi Enhanced Open (OWE) # Requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=open #DisabledTransitionModes=open
[IPv4] [IPv4]
DNS=127.0.0.1 127.0.0.53 DNS=127.0.0.1 127.0.0.53

View File

@ -1,10 +1,10 @@
# This SSID is "private-cafe-sample", it comes from the filename # This SSID is "private-cafe-sample", it comes from the filename
[Settings] #[Settings]
#AlwaysRandomizeAddress=true #AlwaysRandomizeAddress=true
# Disables TKIP and connections without Management Frame Protection # Disables TKIP and connections without Management Frame Protection
TransitionDisable=true #TransitionDisable=true
# Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE) # Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=personal,enterprise,open #DisabledTransitionModes=personal,enterprise,open
[Security] [Security]
Passphrase=MySuperSecretPassphraseThatDoesNotReadHere Passphrase=MySuperSecretPassphraseThatDoesNotReadHere

View File

@ -4,9 +4,9 @@ AutoConnect=true
# MAC address override. Takes priority over AlwaysRandomizeAddress # MAC address override. Takes priority over AlwaysRandomizeAddress
#AddressOverride= #AddressOverride=
# Disables TKIP and connections without Management Frame Protection # Disables TKIP and connections without Management Frame Protection
TransitionDisable=true #TransitionDisable=true
# Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE) # Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=personal,enterprise,open #DisabledTransitionModes=personal,enterprise,open
[Security] [Security]
Passphrase=MySuperSecretPassphraseThatDoesNotReadHere Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
@ -17,6 +17,7 @@ Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
#Address=192.168.1.2 #Address=192.168.1.2
#Gateway=192.168.1.1 #Gateway=192.168.1.1
DNS=127.0.0.1 127.0.0.53 DNS=127.0.0.1 127.0.0.53
#Netmask=255.255.255.0
#DomainName=. #DomainName=.
# In home network recognising the device may be a quality of life feature # In home network recognising the device may be a quality of life feature
#SendHostname=true #SendHostname=true