3444 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Aminda Suomalainen	4882cb66be	systemd-resolv.conf-generate.bash: who is going to stop me from specifying the same resolver thrice?	2024-04-30 20:21:12 +03:00
Aminda Suomalainen	b9daad6a2f	resolv.conf: explain 127.0.0.54	2024-04-30 20:16:46 +03:00
Aminda Suomalainen	d6e4fd1be7	etc: create systemd-resolv.conf-generate.bash & systemd-resolv.conf-restore.bash, mention them in resolv.conf	2024-04-30 20:05:53 +03:00
Aminda Suomalainen	fa5462212d	aminda-nocron-reboot.service: add zram-generator just in case	2024-04-30 19:10:28 +03:00
Aminda Suomalainen	72ea5ca51e	unbound: fix typo in (1)5 minutes cache, apparently a commit once removed the 1	2024-04-30 17:34:01 +03:00
Aminda Suomalainen	5d4e0e10dd	unbound/min-ttl-hour.conf: also print the stats hourly, not every 15 minutes	2024-04-30 17:26:14 +03:00
Aminda Suomalainen	437b69bd6e	unbound: apparently rename min-ttl.conf.sample to min-ttl-five-min.conf	2024-04-30 17:17:46 +03:00
Aminda Suomalainen	9671adf293	unbound: break statistics interval from logging.conf to min-ttl*	2024-04-30 17:11:32 +03:00
Aminda Suomalainen	819d6a782e	unbound: add mixed-case-queries.conf	2024-04-30 17:11:09 +03:00
Aminda Suomalainen	08de11b594	unbound/min-ttl-hour.conf: fix comment	2024-04-30 06:52:46 +03:00
Aminda Suomalainen	87bedac239	unbound: cut cache.conf.SAMPLE into more descriptive files	2024-04-30 06:45:53 +03:00
Aminda Suomalainen	531cdd82c5	unbound/cache.conf.SAMPLE: fix oversight, logging.conf: reducei nterval to quaterly	2024-04-29 20:48:51 +03:00
Aminda Suomalainen	0d0be5f9bc	unbound/cache.conf: rename to cache.conf.SAMPLE and add scary warnings there	2024-04-29 20:46:00 +03:00
Aminda Suomalainen	c23cba37c3	sway.conf: add sleeps where I think they may be needed for credentials managing or whatever	2024-04-29 17:35:26 +03:00
Aminda Suomalainen	8636aaebe8	desktop files: attempt to trust the $PATH	2024-04-29 14:17:11 +03:00
Aminda Suomalainen	8cc2da0e5c	add a-joplin.desktop for the wrapper	2024-04-29 14:13:46 +03:00
Aminda Suomalainen	b54f55a1bc	document Microsoft Edge recommended policy	2024-04-29 12:39:58 +03:00
Aminda Suomalainen	788143ec01	init-browser-policies.bash: touch Firefox, break LibreWolf, verbose, handle Edge Recommended separately, warn about that too, etc.?	2024-04-29 12:25:17 +03:00
Aminda Suomalainen	d377157b46	init-browser-policies.bash: manage Edge recommended profiles separately	2024-04-29 12:15:26 +03:00
Aminda Suomalainen	64a3f8c370	applications .gitignore applications	2024-04-29 10:29:12 +03:00
Aminda Suomalainen	11c67e16b0	automagicise the desktop files	2024-04-29 10:26:44 +03:00
Aminda Suomalainen	7169ae9c8a	applications/edges: put branch in front of the name ... because I forgot that default applications cut it from the end	2024-04-29 10:20:18 +03:00
Aminda Suomalainen	373ba7799c	applications/README: note subdirectories being allowed	2024-04-29 10:19:37 +03:00
Aminda Suomalainen	7f7789b63d	local/share/applications: add edge beta & dev	2024-04-29 10:10:18 +03:00
Aminda Suomalainen	7d23d01b54	a-microsoft-edge.desktop: attempt to workaround Microsoft Edge disrespecting chrome:apps as new tab page policy	2024-04-29 10:02:08 +03:00
Aminda Suomalainen	a14446ed71	unbound/dns-over-tls.conf: add Cloudflare, Mullvad & Control D ... This is now practically https://www.privacyguides.org/en/dns/ plus Appliedprivacy	2024-04-29 08:29:07 +03:00
Aminda Suomalainen	9430c59d5c	sway: map +Shift+Return to foot, so I have even less concerns about foot server	2024-04-29 07:59:59 +03:00
Aminda Suomalainen	0ee83e9a90	chrony/sources: enable xleave with ~everything ... I was unable to find much information about this, but see the previous commit and Brave Leo said > Yes, it's generally acceptable to use interleaved mode with a public NTP (Network Time Protocol) server, as long as you comply with the server's usage policies. This mode allows for time synchronization while also providing a fallback if the primary time source fails. However, keep in mind that public NTP servers are often subject to heavy traffic, so they may not provide the most accurate or timely synchronization.	2024-04-29 06:55:16 +03:00
Aminda Suomalainen	6f0184b519	chrony/sources/ntppool: enable xleave ... From https://community.ntppool.org/t/chrony-conf-noclientlog-vs-clientloglimit/2263/4 I got the impression it's fine to do and the manual says it's compatible with the basic mode and xleave supporting servers may still reply in basic mode sometimes so this shouldn't break anything	2024-04-29 06:51:27 +03:00
Aminda Suomalainen	0f66e552c1	Revert "nts-servers.sources: no preferring non-ISP servers" ... This reverts commit ff1bc7b3ba.	2024-04-28 20:08:42 +03:00
Aminda Suomalainen	4081c974bb	unbound/cache.conf: make the min ttl an hour in my quest to break DNS	2024-04-28 19:15:42 +03:00
Aminda Suomalainen	23672028d5	unbound/ecs.conf: attempt to send larger subnets than default around	2024-04-28 18:02:18 +03:00
Aminda Suomalainen	d64b4f2001	systemd-resolved: add DNA/Moi & Elisa DNS servers ... I was unable to find authoritative source for what is Telia's DNS	2024-04-28 16:14:30 +03:00
Aminda Suomalainen	581096257f	local/share/applications: add a desktop entry for briar	2024-04-28 13:52:58 +03:00
Aminda Suomalainen	41b88b5cb9	sway/autostart-p2p-communication.conf: point briar to my wrapper	2024-04-28 13:51:38 +03:00
Aminda Suomalainen	44e22716f9	chrony sources: make add .sample to local-servers.sources, make it more useful for me	2024-04-28 10:02:31 +03:00
Aminda Suomalainen	18a04b1351	{firefox,chromium}: disable protections for one.one.one.one ... For some reason they make connection to 1.1.1.1 appear as no or unreachable.	2024-04-28 09:21:29 +03:00
Aminda Suomalainen	55dcb2f2cd	systemd-resolved/98-local-resolver.conf: fix comment talking about alphabet while everything is now numerals	2024-04-28 09:17:07 +03:00
Aminda Suomalainen	35b99a6bc0	systemd-resolved: add 99-lan-resolver.conf.sample for trusted LANs	2024-04-28 09:13:46 +03:00
Aminda Suomalainen	5ab33c154e	systemd-resolved: rename conf files to have a number prefix	2024-04-28 09:13:20 +03:00
Aminda Suomalainen	9375b3c2b2	unbound: add dot-cloudflare.conf	2024-04-27 21:22:28 +03:00
Aminda Suomalainen	2aa221b77f	unbound/cache: take the cache-min-ttl: 3000 challenge ... It will not affect web browsers which are using DoH for ECH eliminating most of breakage and I am just curious on will anything outside of web browser suffer that.	2024-04-27 18:35:22 +03:00
Aminda Suomalainen	652c11391f	unbound/cache.conf: explicitly set serve-expired-reply-ttl to 30	2024-04-27 16:52:39 +03:00
Aminda Suomalainen	d3773468fa	chromium/policies: add doh-{disabled,google}.json	2024-04-27 16:18:40 +03:00
Aminda Suomalainen	a083a9d704	unbound/cache: comment cache-min-ttl=900, add commented 3000	2024-04-27 15:42:29 +03:00
Aminda Suomalainen	30a27f980d	unbound/cache.conf: RFC 8767ish configuration	2024-04-27 15:00:12 +03:00
Aminda Suomalainen	813878a4de	systemd/{iwd,systemd-networkd}.service.d: add appropiate symlinks	2024-04-27 12:25:00 +03:00
Aminda Suomalainen	c59fe1ae53	sudoers.d/nordvpnd: also allow restarting tor-client.service ... I have a suspicion I am adding it to the script sooner or later	2024-04-27 12:21:07 +03:00
Aminda Suomalainen	ef9c4acfc3	sudoers.d/nordvpnd: also allow restarting Tor	2024-04-27 12:10:15 +03:00
Aminda Suomalainen	955e52f5af	yum.repos.d: add google-Chrome.repo to workaround their crontab disliking my system	2024-04-27 10:21:20 +03:00