3700 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Aminda Suomalainen	9fff2bb17d	firefox: don't install Dark Reader by default ... I cannot deploy it, so I have to configure it anyway and this means only Bitwarden throws a welcome page at me	2024-05-19 09:07:51 +03:00
Aminda Suomalainen	ea5db5a670	firefox: install Ecosia extension by default for non-{ESR,nightly}	2024-05-19 09:03:51 +03:00
Aminda Suomalainen	a4f3943073	{firefox,chromium}: add small hints of possibly being connected to Russia ... https://krebsonsecurity.com/2021/05/try-this-one-weird-trick-russian-hackers-hate/	2024-05-19 08:32:00 +03:00
Aminda Suomalainen	9b348b16cc	{firefox,chromium}: switch from AdNauseam to uBlock Origin ... I love AdNauseam, but it's a tool for protests and it shows constantly, while uBlock Origin is more sysadmin-friendly deploying silently and not complaining about browser protection or PrivacyBadger etc.	2024-05-19 07:37:33 +03:00
Aminda Suomalainen	b4a1da8423	chromium: move manifestv2 from disable-floc to aminda-extensions	2024-05-19 06:45:40 +03:00
Aminda Suomalainen	6a9798c61b	firefox: restore prefetching ... I accidentally tried it and it's just too significant performance improvement for me to keep disabled. Additionally AdNauseam is making clicks to ads anyway and I think I am still safer than someone who has no tracking protections at all.	2024-05-18 18:44:39 +03:00
Aminda Suomalainen	2351d43020	chromium: enable prefetching and profilemanager	2024-05-18 18:24:45 +03:00
Aminda Suomalainen	bf85d162d1	chromium policy & documentation: cleanup	2024-05-18 18:22:54 +03:00
Aminda Suomalainen	95671fb32d	chromium: doh-private-ecs.json was supposed to be automatic	2024-05-18 16:55:38 +03:00
Aminda Suomalainen	0a4179df0c	Revert "chromium/recommended/{duckduckgo,ecosia}.json: trick Brave & Edge into complying by NewTabPageLocation" ... This reverts commit 7bab72fb3c.	2024-05-18 16:36:46 +03:00
Aminda Suomalainen	c2e0917c3a	unbound/dns-over-tls.conf: remove Quad9 ECS comments	2024-05-18 16:14:57 +03:00
Aminda Suomalainen	bec86d1344	{systemd-resolved,unbound}: add commented unfiltered adguard to appropiate file	2024-05-18 16:12:58 +03:00
Aminda Suomalainen	a7ef548dab	{chromium,unbound}: experimental dot-private-ecs.conf	2024-05-18 16:08:17 +03:00
Aminda Suomalainen	e6696d22f6	Revert "unbound/dns-over-tls.conf: remove ECS and private ECS" ... This reverts commit 78fa2b7b9c.	2024-05-18 15:51:13 +03:00
Aminda Suomalainen	5b4f78f5f4	chromium/doh-google{,64}.json: use get requests ... more as a note that it can be done	2024-05-18 15:35:36 +03:00
Aminda Suomalainen	2ff416d880	{firefox,chromium}: also enable curben-phishing	2024-05-18 14:04:43 +03:00
Aminda Suomalainen	20679e705d	{firefox,chromium}: enable AdNauseam ublock-annoyances & adguard-mobile-app-banners	2024-05-18 13:55:18 +03:00
Aminda Suomalainen	aac0a04564	LibreAwoo: comment the 7 options that policy accepted	2024-05-18 11:04:59 +03:00
Aminda Suomalainen	c68e3f66ab	firefox: attempt to enable http for esr	2024-05-18 10:21:44 +03:00
Aminda Suomalainen	5a88836d59	firefox: Comment/clear network.dns.native_https_query_win10	2024-05-18 09:44:25 +03:00
Aminda Suomalainen	5995ef8f32	firefox/policies.json: attempt to autoconfig, but again not allowed	2024-05-18 09:24:25 +03:00
Aminda Suomalainen	1290db73f5	firefox/policies.json: import more disallowed things from autoconfig, comment disallowed ones, clear location provider	2024-05-18 09:15:10 +03:00
Aminda Suomalainen	c05eedbb78	chromium README: note Bitwarden management options for self-hosters	2024-05-18 08:03:29 +03:00
Aminda Suomalainen	df1458af1f	firefox: use system DNS for ECH (and prefer IPv6 and try image.animation.mode) ... The last is not allowed for stability reasons apparently.	2024-05-18 07:33:10 +03:00
Aminda Suomalainen	38c331494c	chromium/managed: merge enable-ech-ocsp.json into https-everywhere.json ... This will not appear on my blog post. ECH is enough offtopic and OCSP would only bring argument on whether it's useful and is that usefulness more important than privacy leakage to non-ocsp-stapling websites.	2024-05-17 16:15:34 +03:00
Aminda Suomalainen	fb57ae0ea5	firefox & chromium: accidentally silence DuckDuckGo post-install	2024-05-17 14:28:33 +03:00
Aminda Suomalainen	c92ded3ad3	firefox & chromium: add Ruffle.rs	2024-05-17 11:05:31 +03:00
Aminda Suomalainen	9f8eaab73d	init-browser-policies.bash: why am I creating managed & recommended separately? Let's not	2024-05-17 08:31:13 +03:00
Aminda Suomalainen	23bbedf852	.pre-commit-config.yaml: remove deprecated hook fix-encoding-pragma	2024-05-16 21:22:54 +03:00
Aminda Suomalainen	344caa700d	Init-browser-policies.bash: how about not making recursive symlinks in the first place? ... Properly resolves: 0ce24f54d9	2024-05-16 21:04:01 +03:00
Aminda Suomalainen	05a3cb6c08	firefox: allow private ECS	2024-05-16 19:48:39 +03:00
Aminda Suomalainen	38710540f2	firefox & chromium: add missing favicons for DDG & Brave	2024-05-16 19:12:10 +03:00
Aminda Suomalainen	6a916ed3b9	chromium/recommended/{duckduckgo,ecosia}.json: also restore forgotten HomepageIsNewTabPage	2024-05-16 18:51:51 +03:00
Aminda Suomalainen	7bab72fb3c	chromium/recommended/{duckduckgo,ecosia}.json: trick Brave & Edge into complying by NewTabPageLocation	2024-05-16 18:47:22 +03:00
Aminda Suomalainen	006ed65597	Re-integrate Edge policies into Chromium by removing apps-as-homepage.json	2024-05-16 18:35:48 +03:00
Aminda Suomalainen	859f2a9f1d	chromium/duckduckgo.json: fill in DefaultSearchProviderNewTabURL	2024-05-16 18:29:54 +03:00
Aminda Suomalainen	729013c3c1	firefox: install user-agent-string-switcher automatically so I don't have to worry about that for Microsoft Teams ... TODO: proper automagic deployment	2024-05-16 15:37:59 +03:00
Aminda Suomalainen	e6f4bd72ba	firefox: explicitly enable FirefoxAccounts & Screenshots ... I have a feeling I might sometime have a situation where I want to disable at least accounts	2024-05-16 15:16:25 +03:00
Aminda Suomalainen	b36f37196f	firefox: lock DoH again since I don't want to worry about multiple places where to edit it when I inevitably do	2024-05-16 15:13:11 +03:00
Aminda Suomalainen	34799d0776	firefox & curl: default to dns0.eu, but have comment on unfiltered.adguard-dns.con available as well	2024-05-16 15:12:12 +03:00
Aminda Suomalainen	23803ad433	firefox: restore privacy.userContext ... Reverts: 4b7eff36b2	2024-05-16 15:06:04 +03:00
Aminda Suomalainen	5158b52da4	firefox: apparently HTTPS Only mode can be set here contrary to the documentation ... Also generic hardening(?)	2024-05-16 15:03:01 +03:00
Aminda Suomalainen	83d53b8c17	systemd-resolved/10-dot-cloudflare.conf: add malicious domain filtering and alternative SNI	2024-05-15 20:38:49 +03:00
Aminda Suomalainen	ef7584566f	systemd/resolved/10-dot-{443,adguard,dns0}.conf: fix server order	2024-05-15 20:33:23 +03:00
Aminda Suomalainen	7f918cc797	systemd/resolved.conf.d/README: note my scripts existing	2024-05-15 20:29:59 +03:00
Aminda Suomalainen	cb3c944d47	systemd-resolved: note server priority	2024-05-15 20:23:27 +03:00
Aminda Suomalainen	1f5815b54e	hosts/dns: comment the IPv4-as-IPv6 hack, uncomment proper IPv6	2024-05-15 17:44:50 +03:00
Aminda Suomalainen	4b7eff36b2	firefox: remove privacy.userContext policies for stability reasons (Firefox ESR is upset by them)	2024-05-14 15:40:37 +03:00
Aminda Suomalainen	8d34384c78	unbound: mark dot-flushable-cache.conf as .badidea	2024-05-14 15:08:26 +03:00
Aminda Suomalainen	901c634424	unbound: I have been using Fedora for a couple of years, I know where the ca bundle is without attributing to ctrl.blog	2024-05-14 15:07:11 +03:00