From e9be3a6a753c09af64ef0f94481d5faa03bcef66 Mon Sep 17 00:00:00 2001 From: "Henry J. Webster" Date: Thu, 30 Jul 2026 18:26:11 -0500 Subject: enzo: lock resistFingerprinting off so dark sites work MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Setting it via the policy with Status "default" did not take effect: LibreWolf's mozilla.cfg does defaultPref("privacy.resistFingerprinting", true), and a policy "default" pref writes the same branch and loses the tie to the autoconfig, so RFP stayed on — spoofing web content's prefers-color-scheme to light and disabling the devtools toggle. Use Status "locked", which wins over defaultPref. Assisted-by: Claude:claude-opus-4-8 --- machines/enzo/desktop.nix | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/machines/enzo/desktop.nix b/machines/enzo/desktop.nix index 4b04b13..9d543fb 100644 --- a/machines/enzo/desktop.nix +++ b/machines/enzo/desktop.nix @@ -93,12 +93,18 @@ DisableAppUpdate = true; Preferences = { # LibreWolf enables resistFingerprinting by default, which spoofs web - # content's prefers-color-scheme to light — so sites would ignore the - # desktop dark setting. Turn it off so pages follow dark; LibreWolf - # keeps its other protections (uBlock, no telemetry, FPP). + # content's prefers-color-scheme to light — so sites ignore the + # desktop dark setting (and devtools can't toggle it). Turn it off so + # pages follow dark; LibreWolf keeps its other protections (uBlock, no + # telemetry). + # + # Must be "locked", not "default": LibreWolf's mozilla.cfg does + # defaultPref("privacy.resistFingerprinting", true), and a policy + # "default" writes the same branch and loses the tie to the autoconfig. + # "locked" wins over defaultPref. "privacy.resistFingerprinting" = { Value = false; - Status = "default"; + Status = "locked"; }; # Blank home page + blank new tab -- cgit v1.3