Commit Graph

3059 Commits

Author SHA1 Message Date
Aminda Suomalainen 0063e2409b
etc/dracut.conf.d: add sedric configs 2024-05-03 21:19:32 +03:00
Aminda Suomalainen 175256d8e4
etc/dnf/protected.d: add systemd-ukify.conf although not yet in use 2024-05-03 20:48:14 +03:00
Aminda Suomalainen 252f77ab0c
systemd-resolved & unbound: comment ECS servers again.
This partially reverts 85c7fedcb2 and will be explained at https://aminda.eu/n/dns soon
2024-05-03 18:07:51 +03:00
Aminda Suomalainen aa865106db
unbound: correct ecs.conf.sample 2024-05-03 17:35:15 +03:00
Aminda Suomalainen 962817874e
etc/dracut.conf.d: add UKI generation & Lumina cmdline 2024-05-03 16:24:03 +03:00
Aminda Suomalainen 85c7fedcb2
systemd-resolved, unbound: only ECS IPv6 2024-05-03 06:23:37 +03:00
Aminda Suomalainen 6cae19ba4f
unbound: more ecs.conf.sample experimentation 2024-05-02 21:32:39 +03:00
Aminda Suomalainen 32c99a2d43
etc/resolv.conf: fix comment explaining rotate 2024-05-01 13:08:06 +03:00
Aminda Suomalainen 1aca183f92
aminda-nocron-reboot.service: fix conflict with systemd-zram-setup@zram0.service 2024-05-01 10:38:54 +03:00
Aminda Suomalainen 6e0f72c7b1
aminda-nocron-reboot.service: split duperemove and sysctl -p --system to aminda-duperemove.service & sysctl-p--system.service 2024-05-01 10:22:57 +03:00
Aminda Suomalainen aa6aad28ba
resolv: follow the same order as man resolv.conf 2024-05-01 10:13:30 +03:00
Aminda Suomalainen ba298f94a5
resolv: increase timeout to 2 (match unbound/RFC 8767), decrease attempts to 2, rotate 2024-05-01 09:54:07 +03:00
Aminda Suomalainen 447385fdb8
chrony: rename ntppool.sources -> ntp-pool.sources 2024-04-30 21:02:28 +03:00
Aminda Suomalainen 78136f7437
systemd/timesyncd.conf.d: don't only use ntp pool as a fallback 2024-04-30 21:01:46 +03:00
Aminda Suomalainen f6e9aa58da
unbound: add replace-systemd-resolved.conf.sample for listening on systemd-resolved ports 2024-04-30 20:30:15 +03:00
Aminda Suomalainen 4882cb66be
systemd-resolv.conf-generate.bash: who is going to stop me from specifying the same resolver thrice? 2024-04-30 20:21:12 +03:00
Aminda Suomalainen b9daad6a2f
resolv.conf: explain 127.0.0.54 2024-04-30 20:16:46 +03:00
Aminda Suomalainen d6e4fd1be7
etc: create systemd-resolv.conf-generate.bash & systemd-resolv.conf-restore.bash, mention them in resolv.conf 2024-04-30 20:05:53 +03:00
Aminda Suomalainen fa5462212d
aminda-nocron-reboot.service: add zram-generator just in case 2024-04-30 19:10:28 +03:00
Aminda Suomalainen 72ea5ca51e
unbound: fix typo in (1)5 minutes cache, apparently a commit once removed the 1 2024-04-30 17:34:01 +03:00
Aminda Suomalainen 5d4e0e10dd
unbound/min-ttl-hour.conf: also print the stats hourly, not every 15 minutes 2024-04-30 17:26:14 +03:00
Aminda Suomalainen 437b69bd6e
unbound: apparently rename min-ttl.conf.sample to min-ttl-five-min.conf 2024-04-30 17:17:46 +03:00
Aminda Suomalainen 9671adf293
unbound: break statistics interval from logging.conf to min-ttl* 2024-04-30 17:11:32 +03:00
Aminda Suomalainen 819d6a782e
unbound: add mixed-case-queries.conf 2024-04-30 17:11:09 +03:00
Aminda Suomalainen 08de11b594
unbound/min-ttl-hour.conf: fix comment 2024-04-30 06:52:46 +03:00
Aminda Suomalainen 87bedac239
unbound: cut cache.conf.SAMPLE into more descriptive files 2024-04-30 06:45:53 +03:00
Aminda Suomalainen 531cdd82c5
unbound/cache.conf.SAMPLE: fix oversight, logging.conf: reducei nterval to quaterly 2024-04-29 20:48:51 +03:00
Aminda Suomalainen 0d0be5f9bc
unbound/cache.conf: rename to cache.conf.SAMPLE and add scary warnings there 2024-04-29 20:46:00 +03:00
Aminda Suomalainen c23cba37c3
sway.conf: add sleeps where I think they may be needed for credentials managing or whatever 2024-04-29 17:35:26 +03:00
Aminda Suomalainen 8636aaebe8
desktop files: attempt to trust the $PATH 2024-04-29 14:17:11 +03:00
Aminda Suomalainen 8cc2da0e5c
add a-joplin.desktop for the wrapper 2024-04-29 14:13:46 +03:00
Aminda Suomalainen b54f55a1bc
document Microsoft Edge recommended policy 2024-04-29 12:39:58 +03:00
Aminda Suomalainen 788143ec01
init-browser-policies.bash: touch Firefox, break LibreWolf, verbose, handle Edge Recommended separately, warn about that too, etc.? 2024-04-29 12:25:17 +03:00
Aminda Suomalainen d377157b46
init-browser-policies.bash: manage Edge recommended profiles separately 2024-04-29 12:15:26 +03:00
Aminda Suomalainen 64a3f8c370
applications .gitignore applications 2024-04-29 10:29:12 +03:00
Aminda Suomalainen 11c67e16b0
automagicise the desktop files 2024-04-29 10:26:44 +03:00
Aminda Suomalainen 7169ae9c8a
applications/edges: put branch in front of the name
because I forgot that default applications cut it from the end
2024-04-29 10:20:18 +03:00
Aminda Suomalainen 373ba7799c
applications/README: note subdirectories being allowed 2024-04-29 10:19:37 +03:00
Aminda Suomalainen 7f7789b63d
local/share/applications: add edge beta & dev 2024-04-29 10:10:18 +03:00
Aminda Suomalainen 7d23d01b54
a-microsoft-edge.desktop: attempt to workaround Microsoft Edge disrespecting chrome:apps as new tab page policy 2024-04-29 10:02:08 +03:00
Aminda Suomalainen a14446ed71
unbound/dns-over-tls.conf: add Cloudflare, Mullvad & Control D
This is now practically https://www.privacyguides.org/en/dns/ plus Appliedprivacy
2024-04-29 08:29:07 +03:00
Aminda Suomalainen 9430c59d5c
sway: map +Shift+Return to foot, so I have even less concerns about foot server 2024-04-29 07:59:59 +03:00
Aminda Suomalainen 0ee83e9a90
chrony/sources: enable xleave with ~everything
I was unable to find much information about this, but see the previous commit and Brave Leo said

> Yes, it's generally acceptable to use interleaved mode with a public NTP (Network Time Protocol) server, as long as you comply with the server's usage policies. This mode allows for time synchronization while also providing a fallback if the primary time source fails. However, keep in mind that public NTP servers are often subject to heavy traffic, so they may not provide the most accurate or timely synchronization.
2024-04-29 06:55:16 +03:00
Aminda Suomalainen 6f0184b519
chrony/sources/ntppool: enable xleave
From https://community.ntppool.org/t/chrony-conf-noclientlog-vs-clientloglimit/2263/4 I got the impression it's fine to do and the manual says it's compatible with the basic mode and xleave supporting servers may still reply in basic mode sometimes so this shouldn't break anything
2024-04-29 06:51:27 +03:00
Aminda Suomalainen 0f66e552c1
Revert "nts-servers.sources: no preferring non-ISP servers"
This reverts commit ff1bc7b3ba.
2024-04-28 20:08:42 +03:00
Aminda Suomalainen 4081c974bb
unbound/cache.conf: make the min ttl an hour in my quest to break DNS 2024-04-28 19:15:42 +03:00
Aminda Suomalainen 23672028d5
unbound/ecs.conf: attempt to send larger subnets than default around 2024-04-28 18:02:18 +03:00
Aminda Suomalainen d64b4f2001
systemd-resolved: add DNA/Moi & Elisa DNS servers
I was unable to find authoritative source for what is Telia's DNS
2024-04-28 16:14:30 +03:00
Aminda Suomalainen 581096257f
local/share/applications: add a desktop entry for briar 2024-04-28 13:52:58 +03:00
Aminda Suomalainen 41b88b5cb9
sway/autostart-p2p-communication.conf: point briar to my wrapper 2024-04-28 13:51:38 +03:00