talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Pipe not working.

Browse Source
This commit is contained in:
Tom Alexander 2024-07-13 15:39:06 -04:00
parent 0a4ee7b7f6
commit 6420db5385
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
2 changed files with 15 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
ansible/roles/firefox/defaults/main.yaml
View File

@ -21,3 +21,15 @@ firefox_config:
privacy.globalprivacycontrol.enabled: true privacy.globalprivacycontrol.enabled: true
# Disable "studies" (slice testing) # Disable "studies" (slice testing)
app.shield.optoutstudies.enabled: false app.shield.optoutstudies.enabled: false
# Disable attribution which is used by advertisers to track you.
dom.private-attribution.submission.enabled: false
# Disable battery status, used to track users.
dom.battery.enabled: false
# Disable that websites can get notifications if you copy, paste, or cut something from a web page, and it lets them know which part of the page had been selected.
dom.event.clipboardevents.enabled: false
# Resist fingerprinting
privacy.resistFingerprinting: true
# Isolates all browser identifier sources (e.g. cookies) to the first party domain, with the goal of preventing tracking across different domains.
privacy.firstparty.isolate: true
# Do not preload URLs that auto-complete in the address bar.
browser.urlbar.speculativeConnect.enabled: false

7
ansible/roles/firewall/files/homeserver_pf.conf
View File

@ -52,13 +52,12 @@ nat pass on jail_nat proto {tcp, udp} from any to 10.215.1.216 port 22 -> 10.215
rdr pass on $ext_if inet proto {udp, tcp} from any to any port $unifi_ports -> 10.215.1.202 rdr pass on $ext_if inet proto {udp, tcp} from any to any port $unifi_ports -> 10.215.1.202
# filtering # filtering
# match in on jail_nat from any to any dnpipe(1, 2)
# match in on restricted_nat from any to any dnpipe(1, 2)
block log all block log all
pass out on $ext_if pass out on $ext_if
# match in on jail_nat from any to any dnpipe 1
# match in on jail_nat from any to $rfc1918 dnpipe 2
# match in on restricted_nat from any to any dnpipe 1
pass in on jail_nat pass in on jail_nat
# Allow traffic from my machine to the jails/virtual machines # Allow traffic from my machine to the jails/virtual machines
pass out on jail_nat from $jail_nat_v4 pass out on jail_nat from $jail_nat_v4