# iwd is started as the Wi-Fi backend; systemd-networkd remains the
# authoritative IP-layer manager (see etc/systemd/network/30-wifi-bond0.network
# which enslaves the wlan interface into bond0).
#
# AddressRandomization=network — iwd picks a deterministic random MAC
# per SSID. Same network always reconnects with the same MAC (so DHCP
# leases, WPA-EAP creds, and captive-portal sessions stay stable across
# reconnects), but a hostile AP on a different SSID never sees the
# hardware MAC. Better than per-association random which trips captive
# portals on every reconnect.

[General]
EnableNetworkConfiguration=false
UseDefaultInterface=false
AddressRandomization=network

[Network]
EnableIPv6=true
NameResolvingService=systemd
RoutePriorityOffset=200

[Scan]
DisablePeriodicScan=false