iwd: clean up config

Also add network address randomization

requirements/accepted_variables.yml

@@ -17,12 +17,14 @@ snapshot_tool: '{{ ["sanoid", "zrepl"] if rootfs == "zfs"
 usershell:
   - ash
   - bash
+  - dash
   - fish
   - hilbish
   - ion-shell
   - nushell
   - sh
   - xonsh
+  - yash
   - zsh
 
 seat_manager:
@@ -42,6 +44,7 @@ dhcp_client:
   - udhcpc # from busybox
   - dhcpcd
   - connman
+  - kea
 
 audit_daemon:
   - auditd

roles/networking/files/iwd/main.conf

@@ -1,39 +1,16 @@
-# Note: The lines starting with # are ignored. To enable any of the
-# configuration options below, remove # from the beginning of a respective line.
-
-# this file is not distributed upstream as of iwd 1.0 version
-# It is created as transitional config from latest version
-# Please read iwd.config(5), iwd.network(5), iwctl(1), iwmon(1) before setting
-# these parameters below
-
-# main.conf format is changed with iwd 1.3 release
-
-#[EAP]
-#mtu=1400
-
-#[EAPoL]
-#max_4way_handshake_time=5
+# See iwd.config(5) for all options
 
 [General]
-
-EnableNetworkConfiguration=True
-UseDefaultInterface=True
-ControlPortOverNL80211=True
-#RoamThreshold=-70
+EnableNetworkConfiguration=true
+UseDefaultInterface=true
+AddressRandomization=network
+ControlPortOverNL80211=true
 
 [Network]
-
 NameResolvingService=resolvconf
 EnableIPv6=true
 RoutePriorityOffset=200
 
 [Scan]
-
 DisablePeriodicScan=true
 DisableRoamingScan=true
-
-#[Blacklist]
-
-#[Rank]
-
-# BandModifier5Ghz=1.0

roles/user/defaults/main.yml

@@ -13,10 +13,12 @@ realtime_pam_limits:
 shells_mappings:
   ash: /bin/ash
   bash: /bin/bash
+  dash: /usr/bin/dash
   fish: /usr/bin/fish
   hilbish: /usr/bin/hilbish
   ion-shell: /usr/bin/ion
   nushell: /usr/bin/nu
   sh: /bin/sh
   xonsh: /usr/bin/xonsh
+  yash: /usr/bin/yash
   zsh: /bin/zsh