Opinionated privacy-focused macOS defaults implemeneted as configuration profiles
- nix-darwin users won't find anything special here
- only Apple Silicon is officially supported. Your miles may vary with Intel system
- TODO: mention last tested macOS version
Tampering with system-wide Password Policy potentially can lock you out. In some cases this may lead to permanent data loss!
- always enable FileVault!
- always store your FileVault personal recovery key securely, outside of the system it's intended for!
.