Compare commits

..

4 Commits

7 changed files with 17 additions and 13 deletions

View File

@ -671,7 +671,7 @@
},
"browser.display.use_document_fonts": {
"Comment": "Are webpages allowed to set their own fonts by default? 0 forbids them. See also browser.display.use_document_fonts.icon_font_allowlist for what webpages are allowed to set. If changing this, see also fingerprinting overrides",
"Status": "user",
"Status": "locked",
"Type": "number",
"Value": 0
},

View File

@ -14,6 +14,7 @@ use_default_interface=true
# Build-in network configuration including DHCP client (and server when
# tethering), true if not using systemd-networkd!
#EnableNetworkConfiguration=true
#EnableNetworkConfiguration=false
# NOTE! Disable this in case of trouble connecting to network entirely!
@ -22,17 +23,17 @@ use_default_interface=true
# Generate a different spoofed MAC address for every SSID. Some networks
# configured in /var/lib/iwd/ have a new MAC address for every connection.
AddressRandomization=network
#AddressRandomization=network
# Randomize only 3 last octets of MAC. Reveals the manufacturer, but doesn't
# set the locally administered bit. However the range is 00:00:01 to 00:00:FE
# (254 possible addresses!)
# Helsinki City WLAN (and variations) doesn't seem to like "full" (default)
AddressRandomizationRange=nic
#AddressRandomizationRange=nic
# Always require management frame protection. May break things especially with
# legacy networks and hardware! Switch to 1 (default) for only when supported
# by both sides (downgrade attack possible?).
ManagementFrameProtection=2
#ManagementFrameProtection=2
# It must be 1 for Lumina (ThinkPad T470) and MikroTik Chateau 5G to accept
# each other, otherwise fallback to open guest network happens.
#ManagementFrameProtection=1
@ -46,7 +47,7 @@ EnableIPv6=true
# systemd-resolved. NOTE! Must be used in conjunction with
# EnableNetworkConfiguration!
#NameResolvingService=systemd
#NameResolvingService=none
NameResolvingService=none
# Default 300, lower preferred by system. Useful when WiFi is known faster
# than ethernet like having 10 Mbps switch from time before the building had
# anything faster than DSL...

View File

@ -659,6 +659,7 @@ alias nordvpn-off2=nordvpn-offf
alias flatpak="LANG=C.UTF-8 flatpak"
# Search without description
alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application"
alias flatpakl="LANG=C.UTF-8 flatpak list --columns=origin,version,application"
if hash homebrew 2> /dev/null; then
alias brew=homebrew

View File

@ -647,6 +647,7 @@ alias nordvpn-off2=nordvpn-offf
alias flatpak="LANG=C.UTF-8 flatpak"
# Search without description
alias flatpaks="LANG=C.UTF-8 flatpak search --columns=remote,version,application"
alias flatpakl="LANG=C.UTF-8 flatpak list --columns=origin,version,application"
if hash homebrew 2> /dev/null; then
alias brew=homebrew

View File

@ -1,9 +1,9 @@
[Settings]
#[Settings]
#AlwaysRandomizeAddress=true
# Disables connections without Management Frame Protection (and TKIP)
TransitionDisable=true
#TransitionDisable=true
# Requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=open
#DisabledTransitionModes=open
[IPv4]
DNS=127.0.0.1 127.0.0.53

View File

@ -1,10 +1,10 @@
# This SSID is "private-cafe-sample", it comes from the filename
[Settings]
#[Settings]
#AlwaysRandomizeAddress=true
# Disables TKIP and connections without Management Frame Protection
TransitionDisable=true
#TransitionDisable=true
# Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=personal,enterprise,open
#DisabledTransitionModes=personal,enterprise,open
[Security]
Passphrase=MySuperSecretPassphraseThatDoesNotReadHere

View File

@ -4,9 +4,9 @@ AutoConnect=true
# MAC address override. Takes priority over AlwaysRandomizeAddress
#AddressOverride=
# Disables TKIP and connections without Management Frame Protection
TransitionDisable=true
#TransitionDisable=true
# Disables WPA2-{Personal,Enterprise} and requires WiFi Enhanced Open (OWE)
DisabledTransitionModes=personal,enterprise,open
#DisabledTransitionModes=personal,enterprise,open
[Security]
Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
@ -17,6 +17,7 @@ Passphrase=MySuperSecretPassphraseThatDoesNotReadHere
#Address=192.168.1.2
#Gateway=192.168.1.1
DNS=127.0.0.1 127.0.0.53
#Netmask=255.255.255.0
#DomainName=.
# In home network recognising the device may be a quality of life feature
#SendHostname=true