diff options
Diffstat (limited to 'profiles/noTunnels.nix')
-rw-r--r-- | profiles/noTunnels.nix | 23 |
1 files changed, 0 insertions, 23 deletions
diff --git a/profiles/noTunnels.nix b/profiles/noTunnels.nix deleted file mode 100644 index 292b034..0000000 --- a/profiles/noTunnels.nix +++ /dev/null @@ -1,23 +0,0 @@ -{ }: { - meta.description = '' - Take reasonable precautions against the use of a proxy, or an encrypted DNS tunnel. - - This can make sense if we do DNS-level filtering, and the user does not have full control - over the device they're using. - - If a motivated user has local write and execution privileges, it is unlikely that we can prevent - them from circumventing these restrictions. - ''; - - policies = { - DNSOverHTTPS = { - Enabled = false; - Locked = true; - }; - - Proxy = { - Mode = "none"; - Locked = true; - }; - }; -} |