46515474aa
iwd/main.conf: fix comment?
2024-08-30 11:44:33 +03:00
96e8aeaad4
sources.list.d: add fpf-apt-tools.list tor.list yggdrasil.list
2024-08-30 09:05:59 +03:00
d5060ef0c8
sources.list.d: add unstable.list (symlink)
2024-08-30 08:31:47 +03:00
437a1bdbe1
fstab: note btrfs being a thing for swapfiles
2024-08-28 14:47:47 +03:00
e1c3079fde
aminda-nocron-reboot.service.d/swapoff
2024-08-23 13:44:48 +03:00
2c6c664ccb
firefox & geoclue: point to api.beacondb.net for beacondb
...
Functionally identical without need to change, but pointed out for scaling up and routing traffic differently if necessary.
Ref: https://matrix.to/#/matrix.org/$nh0IGqWhdROr-xXAMD9hZxMqyUDgfy6DOabKzh6YPaQ?via=matrix.org&via=tchncs.de&via=nitro.chat
2024-08-19 18:43:37 +03:00
74e5d2f825
systemd/reflector: restart on failure
2024-08-18 09:39:38 +03:00
18c3a87459
unbound.conf: note Arch trusted key
2024-08-16 08:42:16 +03:00
b1a25ac3a2
aminda-nocron-reboot.service: apparently firewall-cmd needs home zone specified separately when NetworkManager is present
2024-08-15 09:01:38 +03:00
be0f664bcc
sudoers.d/nordvpnd: add NetworkManager restarting
2024-08-13 07:08:49 +03:00
a0419bda15
sudoers.d/password-feedback: fix the syntax error of missing capital D
...
Apparently it was my fault and not Fedora and Arch not shipping that module (like Fedora is missing insults, while that suspiciously isn't treated as a syntax error
2024-08-12 15:27:59 +03:00
7d548e20e6
sudoers.d: add modelines, remove prettier comment
2024-08-12 15:22:44 +03:00
060b48d9eb
sudoers.d/sudoers-group: I am looking at you not including this, Arch
2024-08-12 15:22:23 +03:00
9ef3faffaf
sudoers.d: add always-ask-password & password-feedback
2024-08-12 15:06:50 +03:00
61b9fb9e6a
etc/yum.repos.d: add dangerzone.repo
2024-08-12 14:56:59 +03:00
e2a1fd5070
Firefox & LibreAwoo: point to Codeberg
2024-08-12 10:01:42 +03:00
40dceee1b6
NetworkManager: comment no-mac-randomizing.conf to help prevent accidental enabling
2024-08-11 09:16:37 +03:00
5971eb9fd7
iwd & NetworkManager: clarify comments, note ManagementFrameProtection=1 being necessary for my home
2024-08-11 08:50:10 +03:00
63a762c200
NetworkManager: move keyfile from samples/, add rename=true
2024-08-11 08:46:27 +03:00
a66f30dc2e
NetworkManager: enable systemd-resolved DoT, use NM for iwd autoconnect
2024-08-11 08:31:45 +03:00
a4e527f6ec
dnf.conf: add debuglevel=10
2024-08-11 06:46:17 +03:00
ae144a1132
systemd-resolved: add the missing Domains rule
2024-08-10 12:22:42 +03:00
4c41a4cb56
systemd-resolved & unbound: add google dns for when everything is broken and you just want connected
2024-08-10 12:22:18 +03:00
8702c16ac0
adjust resolv.conf order in the generator scripts
2024-08-10 11:32:22 +03:00
e26e2cd92d
aminda-nocron-reboot.service: late load microcode update
2024-08-10 09:41:56 +03:00
c5a0a6f95f
pacman.conf: initial commit
2024-08-10 09:02:10 +03:00
0a0c8822af
systemd: note that reflector.service is due for removal, add reflector.service.d
2024-08-10 08:57:55 +03:00
9e676e52c1
etc: add symlink chrony.conf to chrony/chrony.conf
2024-08-10 08:40:19 +03:00
5103f93a22
dracut: operation btrfs convert failed
...
In the end I was unable to get the chrooted system bootable and I gave up deciding to reinstall, but apparently these changes were left here and I either need to commit them or stash and drop, and I generally think there may be value found in such of things later, so commit it is
2024-08-09 18:01:51 +03:00
cab85e4bf8
init-browser-policies.bash: use the capital X in setfacl here as well
2024-08-08 14:34:12 +03:00
d23c2a0ad3
pass capital X to setfacl in context of directories
2024-08-08 14:29:03 +03:00
880515f1f3
kgx-tmux.desktop: fix Debian compatibility
2024-08-08 09:25:56 +03:00
3a7f029252
90-cpuquota.conf: restrict CPUQuota further down to 90 %
...
My actual running configuration was 100 % while apparently this says 180 %
2024-08-08 08:46:14 +03:00
b859fc5ed5
firefox/policies.json: force instalkl new tab suspender, fix typo
2024-08-08 06:58:09 +03:00
9cdd99fdb1
firefox: disable telemetry over Anonym/'privacy preserving attribution'
...
Ref: mozilla/policy-templates#1130
2024-08-05 07:49:48 +03:00
9bca567950
{firefox,chromium}: add/restore New Tab Suspender, Dark Reader and OpenDyslexic
2024-08-02 15:30:32 +03:00
e1f6745439
Replace limits.d/00-cputime.conf with systemd/app.slice.d/90-cpulimit.conf
2024-08-02 13:40:09 +03:00
c47faaf25e
systemd-resolved: enforce DoT for files explicitly supporting it, demand DNSSEC from LAN resolver
2024-08-01 19:12:07 +03:00
b470649d3a
etc/security/limits.d/00-cputime.conf: initial commit
2024-07-31 23:28:38 +03:00
6a759bfd11
aminda-nocron-reboot.service: add systemd-oomd
2024-07-31 14:54:25 +03:00
84c0452463
systemd: finally add oomd configuration
2024-07-31 14:52:46 +03:00
f18a66faef
init-browser-policies.bash: let's be honest, there ln flags are far more memorable
2024-07-31 11:04:19 +03:00
45fb267570
etc/init-browser-policies.bash: add suspicion of another Google Chrome
2024-07-31 11:03:13 +03:00
62d52df660
init-browser-policies.bash: setfacl
2024-07-31 10:58:44 +03:00
70ae6b36a5
systemd-resolved & unbound: let's not pretend I am not using Quad9 ECS
2024-07-31 10:23:36 +03:00
aa03a16c49
DNS: fail fast when you inevitably fail
2024-07-30 20:43:33 +03:00
ff67c229b9
shut up goenv
2024-07-30 14:14:37 +03:00
8a52d849bc
systemd-networkd: clean up lines I always clean up anyway
2024-07-30 14:08:44 +03:00
8e8a10b9ed
{bash,zsh}rc & profile: comment to future wondering of missing openssl
...
Co-authored-by: Tessu Suomalainen <soopeli@aminda.eu>
2024-07-30 11:28:49 +03:00
e5bd31559b
{pre-commit,*.json}: use tabs for intendion
2024-07-29 09:22:14 +03:00