19b6fbef3c 
							
						 
					 
					
						
						
							
							systemd-networkd: attempt to deduplicate by cutting into 10-global.network  
						
						 
						
						
						
						
					 
					
						2024-04-22 12:07:39 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							aac3ccdec3 
							
						 
					 
					
						
						
							
							unbound/well-known-dns.conf: add CNAMEs one.one.one.one & dns.google.com  
						
						 
						
						
						
						
					 
					
						2024-04-22 11:26:46 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							dc6fc85174 
							
						 
					 
					
						
						
							
							chromium: exclude bittimittari.fi  
						
						 
						
						
						
						
					 
					
						2024-04-22 10:09:28 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							fe1970cfd9 
							
						 
					 
					
						
						
							
							chromium: add brave IPFS disabling policy  
						
						 
						
						... 
						
						
						
						IPFS is known for killing routers and having it on two machines while trying to VoIP with a lot of people, it gets a bit too heavy 
						
						
					 
					
						2024-04-22 10:03:53 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							abd21e008a 
							
						 
					 
					
						
						
							
							well-known-dns.conf: typetransparent subdomains just in case  
						
						 
						
						... 
						
						
						
						Theoretically the higher level domain affects them too, but in practice I am unsure and I have previously only used always_reject for google-analytics & subdomains blocking. It at least isn't causing warnings or errors. 
						
						
					 
					
						2024-04-22 07:42:53 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							579e98f27c 
							
						 
					 
					
						
						
							
							unbound/well-known-dns.conf: use typetransparent so non-local queries won't get NODATA  
						
						 
						
						
						
						
					 
					
						2024-04-22 07:28:55 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							623a9150fd 
							
						 
					 
					
						
						
							
							unbound: merge 00-insecure-domains.conf into blocklist.conf  
						
						 
						
						
						
						
					 
					
						2024-04-22 07:10:18 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							892feb3c1b 
							
						 
					 
					
						
						
							
							unbound/blocklist: add fritz.box.  
						
						 
						
						
						
						
					 
					
						2024-04-22 07:06:21 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c90b551ac4 
							
						 
					 
					
						
						
							
							chromium: merge doh-forced to the doh files due to it being required anyway, update documentation, rename doh-allowed → doh-unlocked-unset  
						
						 
						
						
						
						
					 
					
						2024-04-21 14:00:39 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							4a47d14069 
							
						 
					 
					
						
						
							
							resolved.conf.d: add dot-trex.conf symlink and explaining comments like in unbound  
						
						 
						
						
						
						
					 
					
						2024-04-21 13:14:53 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							ce9159e756 
							
						 
					 
					
						
						
							
							unbound/dot-quad9.conf: prettier sorting  
						
						 
						
						
						
						
					 
					
						2024-04-21 13:13:41 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							7379241a20 
							
						 
					 
					
						
						
							
							chromium: add the rest of Quad9 & update README.md  
						
						 
						
						
						
						
					 
					
						2024-04-21 11:35:28 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							3540f2442e 
							
						 
					 
					
						
						
							
							chromium/doh-quad9*: add alternative port as Chromium allows multiple  
						
						 
						
						
						
						
					 
					
						2024-04-21 11:28:07 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							eb47fac4cb 
							
						 
					 
					
						
						
							
							systemd-resolved: add vim modelines  
						
						 
						
						
						
						
					 
					
						2024-04-21 10:58:45 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							f126e681a2 
							
						 
					 
					
						
						
							
							systemd-resolved: split applied-privacy#443 to its own file as resolved configs don't exclude each other  
						
						 
						
						
						
						
					 
					
						2024-04-21 10:57:25 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							a0ccd790ab 
							
						 
					 
					
						
						
							
							unbound & systemd-resolved: add Quad9 alternative port  
						
						 
						
						
						
						
					 
					
						2024-04-21 10:54:22 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e64e4e7fd0 
							
						 
					 
					
						
						
							
							firefox: DisableEncryptedClientHello: false  
						
						 
						
						... 
						
						
						
						I am not sure if this does anything, I just saw a message in logs and it didn't trigger an error 
						
						
					 
					
						2024-04-21 10:13:29 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6a97040386 
							
						 
					 
					
						
						
							
							firefox: add IPvFoo*  
						
						 
						
						
						
						
					 
					
						2024-04-21 10:08:43 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							069da00a38 
							
						 
					 
					
						
						
							
							Chromium: add IPvFoo* and note that users should go through extensions  
						
						 
						
						
						
						
					 
					
						2024-04-21 09:58:30 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e6bd2b13ad 
							
						 
					 
					
						
						
							
							unbound: add TREX upstream configuration  
						
						 
						
						
						
						
					 
					
						2024-04-20 20:25:48 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							a7cf718453 
							
						 
					 
					
						
						
							
							uncound/well-known-dns.conf: add DNS0 {Zero,Kids,Open}  
						
						 
						
						
						
						
					 
					
						2024-04-20 17:59:46 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							41c65344f1 
							
						 
					 
					
						
						
							
							chromium: add dot-dns0-{kids,open,zero}.json  
						
						 
						
						
						
						
					 
					
						2024-04-20 17:53:33 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							437ec3b49c 
							
						 
					 
					
						
						
							
							chromium/doh-dns0.json: add trailing / as Chromium requires it (or fails every DNS request)  
						
						 
						
						
						
						
					 
					
						2024-04-20 17:50:57 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							422ab0de4e 
							
						 
					 
					
						
						
							
							libreawoo, unbound & resolved: uncomment Quad9 default, comment ECS  
						
						 
						
						
						
						
					 
					
						2024-04-20 17:50:12 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							bec7f8bbaa 
							
						 
					 
					
						
						
							
							separate local/share/applications & etc/xdg/autostart  
						
						 
						
						
						
						
					 
					
						2024-04-20 12:14:02 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							ffc4c53615 
							
						 
					 
					
						
						
							
							sudoers/nordvpnd: allow chronyc online  
						
						 
						
						
						
						
					 
					
						2024-04-20 11:56:14 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c9cad77caf 
							
						 
					 
					
						
						
							
							move etc/xdg/autostart to more descriptive location of local/share/applications  
						
						 
						
						
						
						
					 
					
						2024-04-20 11:18:33 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							9bd3a05d5b 
							
						 
					 
					
						
						
							
							clean up old desktop entries I cannot see myself using  
						
						 
						
						
						
						
					 
					
						2024-04-20 11:13:02 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							cebcec5792 
							
						 
					 
					
						
						
							
							add syncplay.desktop  
						
						 
						
						
						
						
					 
					
						2024-04-20 11:07:03 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							8e296b5a25 
							
						 
					 
					
						
						
							
							add mpv.desktop that avoids pseudo-gui  
						
						 
						
						
						
						
					 
					
						2024-04-20 11:04:30 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							24c9209cbe 
							
						 
					 
					
						
						
							
							add/fix desktop entries for wrappers firefox, steam, thunderbird  
						
						 
						
						
						
						
					 
					
						2024-04-20 10:58:09 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							4c841781b3 
							
						 
					 
					
						
						
							
							add/fix libreawoo & firefox desktop entries  
						
						 
						
						
						
						
					 
					
						2024-04-20 10:50:09 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							93c60b21b2 
							
						 
					 
					
						
						
							
							finish chromium desktop files?  
						
						 
						
						
						
						
					 
					
						2024-04-20 10:43:17 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							bbcb37c334 
							
						 
					 
					
						
						
							
							add libreawoo.desktop  
						
						 
						
						
						
						
					 
					
						2024-04-20 10:32:55 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							816157fc25 
							
						 
					 
					
						
						
							
							add initial desktop files for the scripts wrappers  
						
						 
						
						
						
						
					 
					
						2024-04-20 10:23:15 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							45f1c1078f 
							
						 
					 
					
						
						
							
							unbound/well-known-dns.conf: add Google DNS  
						
						 
						
						
						
						
					 
					
						2024-04-20 09:10:36 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							134622edad 
							
						 
					 
					
						
						
							
							unbound/well-known-dns.conf: add missing dots  
						
						 
						
						
						
						
					 
					
						2024-04-20 09:00:44 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e319c8aacf 
							
						 
					 
					
						
						
							
							unbound: restore and update blocklist.conf  
						
						 
						
						... 
						
						
						
						This reverts commit fe8ac1bbb799fd0beaac35553bd400431bc25513. 
						
						
					 
					
						2024-04-20 08:57:26 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c7633838de 
							
						 
					 
					
						
						
							
							unbound: fill well-known-dns.conf some more  
						
						 
						
						
						
						
					 
					
						2024-04-20 08:52:49 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							dda5f2c110 
							
						 
					 
					
						
						
							
							chromium/enable-ech-ocsp.json: remove not strictly releated policies  
						
						 
						
						
						
						
					 
					
						2024-04-20 07:47:31 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							4a889dd9b4 
							
						 
					 
					
						
						
							
							sudoers.d/nordvpnd: add restarting of iwd & systemd-networkd  
						
						 
						
						
						
						
					 
					
						2024-04-20 07:42:40 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6a87111f8b 
							
						 
					 
					
						
						
							
							unbound/well-known-dns.conf: initial commit  
						
						 
						
						
						
						
					 
					
						2024-04-19 19:58:23 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1e22108950 
							
						 
					 
					
						
						
							
							unbound/00-insecure-domains.conf: qname minimization is not relevant here  
						
						 
						
						
						
						
					 
					
						2024-04-19 09:17:01 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1a1bf9adb9 
							
						 
					 
					
						
						
							
							unbound/conf.d: add vim modelines/filetypes  
						
						 
						
						
						
						
					 
					
						2024-04-19 09:14:32 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							b3eb6e06e7 
							
						 
					 
					
						
						
							
							unbound: add symlink for the Fedora name as I keep tab failing  
						
						 
						
						
						
						
					 
					
						2024-04-19 09:09:36 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							47e51ee38b 
							
						 
					 
					
						
						
							
							firefox policy: use Quad9 ECS as TRR  
						
						 
						
						
						
						
					 
					
						2024-04-19 08:48:57 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							39f2eb4f0f 
							
						 
					 
					
						
						
							
							chromium: add doh-cloudflare-secure.json, ECH notes  
						
						 
						
						
						
						
					 
					
						2024-04-19 08:24:29 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							b248392e8a 
							
						 
					 
					
						
						
							
							systemd-resolved: think more on local resolvers or not  
						
						 
						
						
						
						
					 
					
						2024-04-18 14:31:56 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							4c4508ba36 
							
						 
					 
					
						
						
							
							unbound/dot-*quad9.conf: add DNS10 & DNS12 (commented), remove extra spaces  
						
						 
						
						
						
						
					 
					
						2024-04-18 11:16:20 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							9aa71de638 
							
						 
					 
					
						
						
							
							systemd-resolved/dot-quad9.conf: add commented DNS10 & DNS12  
						
						 
						
						
						
						
					 
					
						2024-04-18 11:08:23 +03:00