From f87c4899b615aff0209549aea534466f3ee77244 Mon Sep 17 00:00:00 2001
From: Aminda Suomalainen <suomalainen+git@mikaela.info>
Date: Thu, 25 Apr 2024 13:57:01 +0300
Subject: [PATCH] chromium: add dns-over-https.json.badidea and declare it as a
 bad idea

---
 etc/opt/chromium/policies/managed/.editorconfig          | 5 +++++
 etc/opt/chromium/policies/managed/.gitattributes         | 1 +
 .../policies/managed/dns-over-https.json.badidea         | 9 +++++++++
 3 files changed, 15 insertions(+)
 create mode 100644 etc/opt/chromium/policies/managed/.editorconfig
 create mode 100644 etc/opt/chromium/policies/managed/.gitattributes
 create mode 100644 etc/opt/chromium/policies/managed/dns-over-https.json.badidea

diff --git a/etc/opt/chromium/policies/managed/.editorconfig b/etc/opt/chromium/policies/managed/.editorconfig
new file mode 100644
index 00000000..fdf565d5
--- /dev/null
+++ b/etc/opt/chromium/policies/managed/.editorconfig
@@ -0,0 +1,5 @@
+root = false
+
+[*.badidea]
+indent_style = space
+indent_size = 2
diff --git a/etc/opt/chromium/policies/managed/.gitattributes b/etc/opt/chromium/policies/managed/.gitattributes
new file mode 100644
index 00000000..d81350cf
--- /dev/null
+++ b/etc/opt/chromium/policies/managed/.gitattributes
@@ -0,0 +1 @@
+dns-over-https.json.badidea	linguist-language=json
diff --git a/etc/opt/chromium/policies/managed/dns-over-https.json.badidea b/etc/opt/chromium/policies/managed/dns-over-https.json.badidea
new file mode 100644
index 00000000..2931dbf5
--- /dev/null
+++ b/etc/opt/chromium/policies/managed/dns-over-https.json.badidea
@@ -0,0 +1,9 @@
+{
+  "comment": "This is a bad idea, because I don't know other DNS servers that
+  perform DNSSEC in addition to DNS-over-HTTPS, I just know these two do and
+  Quad9 doesn't. This would otherwise be the unbound.conf.d/dns-over-tls.conf
+  equivalent.",
+  "DnsOverHttpsMode": "automatic",
+  "DnsOverHttpsTemplates": "https://open.dns0.eu/
+  https://doh.applied-privacy.net/query"
+}