diff --git a/docs/alpine-desktop-setup/post-install/network.md b/docs/alpine-desktop-setup/post-install/network.md index e69de29..c7dc92f 100644 --- a/docs/alpine-desktop-setup/post-install/network.md +++ b/docs/alpine-desktop-setup/post-install/network.md @@ -0,0 +1,74 @@ +# Network + +## Wifi + +Being able to connect to the internet is essential so let's set it up. Although `dhcp` will already work out of the box, wifi will not. Luckily there exist `wpa_supplicant`. First install the necessary packages: + +``` +# apk add networkmanager-wifi wpa_supplicant +``` + +Then configure `/etc/NetworkManager/NetworkManager.conf` to use `wpa_supplicant`: + +``` +[main] +dhcp=internal +plugins=ifupdown,keyfile + +[ifupdown] +managed=true + +[device] +wifi.scan-rand-mac-address=yes +wifi.backend=wpa_supplicant +``` + +Now restart the service and you should be able to connect to the Wifi. + +``` +# rc-service networkmanager restart +``` + +There are different frontends to configure connections but for now lets install `networkmanager-tui`: + +``` +# apk add networkmanager-tui +# nmtui +``` + +It should be pretty self-explanatory on how to use it. + +## VPN's + +NetworkManager can already use WireGuard but to use other VPN types it might be necessary to install their corresponding plugin. For OpenVPN that would be: + +``` +# apk add networkmanager-openvpn +``` + +## Security + +NetworkManager's defaults are fine for normal usage but for security sake they are definitly lacking. + +### MAC Randomization + +Create a config file `/etc/NetworkManager/conf.d/mac-rand.conf` to randomize te mac address for every time your computer connects: + +``` +[connection-mac-randomization] +ethernet.cloned-mac-address=random +wifi.cloned-mac-address=random +``` + +### IPv6 privacy + +Edit `/etc/NetworkManager/conf.d/ip6-privacy.conf`: + +``` +[connection] +ipv6.ip6-privacy=2 +``` + +### Macchanger + +WIP diff --git a/docs/alpine-desktop-setup/post-install/security.md b/docs/alpine-desktop-setup/post-install/security.md new file mode 100644 index 0000000..e69de29 diff --git a/mkdocs.yml b/mkdocs.yml index d00f8d9..81628bb 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -34,15 +34,16 @@ nav: - 'Provisioning': alpine-desktop-setup/installation/provisioning.md - 'Installation': alpine-desktop-setup/installation/installation.md - 'Post installation': + - 'Network': alpine-desktop-setup/post-install/network.md - 'Users': alpine-desktop-setup/post-install/users.md - 'Nix': alpine-desktop-setup/post-install/nix.md - 'Config files': alpine-desktop-setup/post-install/config-files.md - - 'Network': alpine-desktop-setup/post-install/network.md - 'Zram and swap': alpine-desktop-setup/post-install/zram.md - 'OpenRC': alpine-desktop-setup/post-install/openrc.md - 'Firmware and drivers': alpine-desktop-setup/post-install/drivers.md - 'Secureboot and automatic decryption': alpine-desktop-setup/post-install/automatic-decryption.md - 'Power management': alpine-desktop-setup/post-install/power-management.md + - 'Security': alpine-desktop-setup/post-install/security.md - 'Graphical session': - 'Session manager': alpine-desktop-setup/graphical-session/session-manager.md - 'Login manager': alpine-desktop-setup/graphical-session/login-manager.md