summaryrefslogtreecommitdiff
path: root/machines
diff options
context:
space:
mode:
authorHenry J. Webster <hwebs@hwebs.info>2026-07-30 18:26:11 -0500
committerHenry J. Webster <hwebs@hwebs.info>2026-07-30 18:26:11 -0500
commite9be3a6a753c09af64ef0f94481d5faa03bcef66 (patch)
tree4236e000a1c8bb74260f35c84012c60b3f8fbf6d /machines
parent13de30771074ef8053faa16d6a5751eaabe7e0b9 (diff)
enzo: lock resistFingerprinting off so dark sites work
Setting it via the policy with Status "default" did not take effect: LibreWolf's mozilla.cfg does defaultPref("privacy.resistFingerprinting", true), and a policy "default" pref writes the same branch and loses the tie to the autoconfig, so RFP stayed on — spoofing web content's prefers-color-scheme to light and disabling the devtools toggle. Use Status "locked", which wins over defaultPref. Assisted-by: Claude:claude-opus-4-8
Diffstat (limited to 'machines')
-rw-r--r--machines/enzo/desktop.nix14
1 files changed, 10 insertions, 4 deletions
diff --git a/machines/enzo/desktop.nix b/machines/enzo/desktop.nix
index 4b04b13..9d543fb 100644
--- a/machines/enzo/desktop.nix
+++ b/machines/enzo/desktop.nix
@@ -93,12 +93,18 @@
DisableAppUpdate = true;
Preferences = {
# LibreWolf enables resistFingerprinting by default, which spoofs web
- # content's prefers-color-scheme to light — so sites would ignore the
- # desktop dark setting. Turn it off so pages follow dark; LibreWolf
- # keeps its other protections (uBlock, no telemetry, FPP).
+ # content's prefers-color-scheme to light — so sites ignore the
+ # desktop dark setting (and devtools can't toggle it). Turn it off so
+ # pages follow dark; LibreWolf keeps its other protections (uBlock, no
+ # telemetry).
+ #
+ # Must be "locked", not "default": LibreWolf's mozilla.cfg does
+ # defaultPref("privacy.resistFingerprinting", true), and a policy
+ # "default" writes the same branch and loses the tie to the autoconfig.
+ # "locked" wins over defaultPref.
"privacy.resistFingerprinting" = {
Value = false;
- Status = "default";
+ Status = "locked";
};
# Blank home page + blank new tab