Commit Graph

2870 Commits

Author SHA1 Message Date
1e22108950
unbound/00-insecure-domains.conf: qname minimization is not relevant here 2024-04-19 09:17:01 +03:00
1a1bf9adb9
unbound/conf.d: add vim modelines/filetypes 2024-04-19 09:14:32 +03:00
b3eb6e06e7
unbound: add symlink for the Fedora name as I keep tab failing 2024-04-19 09:09:36 +03:00
47e51ee38b
firefox policy: use Quad9 ECS as TRR 2024-04-19 08:48:57 +03:00
39f2eb4f0f
chromium: add doh-cloudflare-secure.json, ECH notes 2024-04-19 08:24:29 +03:00
b248392e8a
systemd-resolved: think more on local resolvers or not 2024-04-18 14:31:56 +03:00
4c4508ba36
unbound/dot-*quad9.conf: add DNS10 & DNS12 (commented), remove extra spaces 2024-04-18 11:16:20 +03:00
9aa71de638
systemd-resolved/dot-quad9.conf: add commented DNS10 & DNS12 2024-04-18 11:08:23 +03:00
855630579d
tmux.conf: turn the clock yellow 2024-04-18 09:29:02 +03:00
ea94ebfdb9
LibreAwoo: decrease fingerprinting protection allow fonts to be used in Dark Reader
This will require Firefox protection to be disabled for the sites in question, but good enough, I only need this on a few.
2024-04-18 08:22:46 +03:00
5097076daf
unbound: also disable qname-minimization for DNSo53 forwarders 2024-04-17 16:03:23 +03:00
363be56010
unbound: move to tls-ystem-cert from tls-cert-bundle & disable qname minimization for DoT forward-zones 2024-04-17 16:01:38 +03:00
6af465359d
Windows/DoH/DohWellKnownServers.reg: add Quad9 10 & 12 2024-04-17 15:48:13 +03:00
4e1e55e54c
Windows: rm CVE-2018-3639.reg, it probably shouldn't live here forever 2024-04-17 15:43:18 +03:00
bbab2f335d
resolv.tsv: sort 2024-04-17 15:42:34 +03:00
9ba083f81f
resolv.tsv: add Quad9 unfiltered variants 2024-04-17 15:42:08 +03:00
c18fe92ad8
etc/resolv.tsv: add Quad9 Apple Mobileconfigs 2024-04-17 15:34:43 +03:00
f10b151a3b
systemd: add firewalld.service.d/never-fail.conf due to failing to timeout on sedric 2024-04-17 11:38:43 +03:00
674bde15be
sway/autostart-pwa: add --no-startup-window to avoid extraneous new window 2024-04-16 19:14:26 +03:00
5dbc461687
mpv.conf: add commented Tiresias PCfont && set font color to Amber
I am just being distracted and I use the amber colour a lot including in Dark Reader which seems to affect some video subtitles
2024-04-16 10:17:13 +03:00
0a2faa5265
mpv.conf: set font to Comic Shanns Mono, comment Noto Serif Regular 2024-04-16 09:46:16 +03:00
d0eaf1a1d1
sway/nordvpn: include service and socket 2024-04-16 08:46:20 +03:00
75c39ddb0d
sudoers.d/nordvpnd: include nordvpnd.socket 2024-04-16 08:39:16 +03:00
419805bc91
chromium/README: add forgotten files, fix description for those moved from recommended 2024-04-16 07:15:30 +03:00
a0456269a1
chromium: move brave feature disabling from recommended to managed for actual effect 2024-04-16 07:11:55 +03:00
36f433f35b
chromium/managed: add enable-labs.json
I have decided that I want it anyway and unlike before, now it has its own file so I can decide to leave it alone on shared devices
2024-04-15 21:08:56 +03:00
31ecb3ef55
sway: reduce electrons by two, switch teams to browser 2024-04-15 18:07:46 +03:00
8c748dd2d6
unbound/dot-dns0-quad9.conf: fix duplicate forward zone 2024-04-14 14:23:58 +03:00
ac922aea86
{firefox,chromium}: add Floccus bookmarks sync so I will remember its existence 2024-04-14 14:10:39 +03:00
89fc9bd2ed
sway/brave: add the browser itself, increase sleeps for PWAs
It seems to work other than opening an extra window with just new tab page, but good enough
2024-04-14 12:41:23 +03:00
64933b691f
update submodule jauderho-nts-servers 2024-04-14 09:21:56 +03:00
cd2ae2c852
etc/resolv.tsv: add Google DNS & DNS64 as they too are Android hard-coded for DoH3 2024-04-14 09:18:05 +03:00
cc25967b22
etc/resolv.tsv: note Cloudflare being DoH3 on Android, add Cloudflare antimalware/family DoT addresses 2024-04-14 09:10:06 +03:00
85dc4b8c5b
sway/brave: double sleep for DNS race condition with VPN?
At least it works
2024-04-14 08:20:55 +03:00
44c3168a39
chromium policy: strip DnsOverHttpsMode to two different files, rename automatic to allowed for clarity & update README.md on these 2024-04-13 18:38:26 +03:00
46ac8aefd8
unbound: add dot-dns0-quad9.conf 2024-04-12 17:01:32 +03:00
ab74e45a9f
chromium policy/brave-shields-disabled.json: add glowing-bear 2024-04-12 14:29:49 +03:00
b9d8da4df4
chromium policy. add brave-shields-disabled.json based on Privacy Badger 2024-04-12 14:26:31 +03:00
bf1fdc4cff
{firefox,chromium} policy: PB exclude Disroot Mvim, Microsoft {Teams,Learn} 2024-04-12 14:24:31 +03:00
b1a0125674
unbound: add local-tlds.conf 2024-04-12 14:16:10 +03:00
57250d893d
root's crontab: add workaround for sysctl.d reading, fix typo, add output to /dev/null for a noisy command 2024-04-12 12:01:25 +03:00
0d4c40ba16
systemd: mark systemd-resolved.conf to be conflicting with avahi-daemon 2024-04-12 10:58:15 +03:00
73865c747d
root-auto-trust-anchor-file.conf -> debian-root-auto-trust-anchor-file.conf
Let's not overwrite files accidentally
2024-04-12 10:56:51 +03:00
0bac3a8ab0
chromium: add doh-quad9.json 2024-04-12 10:42:51 +03:00
e88c2a8067
etc: attempt to enable mDNS/LLMNR for systemd-{networkd,resolved} & NetworkManager
Some boolean fixing slipped in as well
2024-04-12 09:52:32 +03:00
4d4dc026fd
unbound: ipv6.conf -> prefer-ipv6.conf
more descriptive name
2024-04-12 09:19:02 +03:00
c6f999d2ef
sway: replace vivaldi pwas with brave 2024-04-11 16:38:04 +03:00
a7bb2f5ec8
etc/iwd/main.conf: update comments on DNS 2024-04-11 10:16:21 +03:00
80ac65acd1
systemd-resolved/README.md: enable doctoc 2024-04-11 10:06:18 +03:00
cce932960e
systemd-resolved/README.md: mention nordvpn.conf 2024-04-11 10:05:18 +03:00