Commit Graph

1543 Commits

Author SHA1 Message Date
83dc96181f
systemd: Enable irregularly regular btrfs balances 2024-09-03 13:42:52 +03:00
92ce0a7027
dnscrypt-proxy.service.d: never-fail.conf 2024-09-02 10:02:13 +03:00
ab7fd36397
recreate etc/dnscrypt-proxy/ 2024-09-02 10:00:45 +03:00
dc64cb258e
firefox: quit when quit, don't lock frozen system further 2024-09-02 09:47:46 +03:00
03b37c2396
nordvpn.list: specify keyring location 2024-08-31 13:31:45 +03:00
03a0091828
apt/sources.list.d: add documentation links 2024-08-31 13:30:07 +03:00
46515474aa
iwd/main.conf: fix comment? 2024-08-30 11:44:33 +03:00
96e8aeaad4
sources.list.d: add fpf-apt-tools.list tor.list yggdrasil.list 2024-08-30 09:05:59 +03:00
d5060ef0c8
sources.list.d: add unstable.list (symlink) 2024-08-30 08:31:47 +03:00
437a1bdbe1
fstab: note btrfs being a thing for swapfiles 2024-08-28 14:47:47 +03:00
e1c3079fde
aminda-nocron-reboot.service.d/swapoff 2024-08-23 13:44:48 +03:00
2c6c664ccb
firefox & geoclue: point to api.beacondb.net for beacondb
Functionally identical without need to change, but pointed out for scaling up and routing traffic differently if necessary.

Ref: https://matrix.to/#/matrix.org/$nh0IGqWhdROr-xXAMD9hZxMqyUDgfy6DOabKzh6YPaQ?via=matrix.org&via=tchncs.de&via=nitro.chat
2024-08-19 18:43:37 +03:00
74e5d2f825
systemd/reflector: restart on failure 2024-08-18 09:39:38 +03:00
18c3a87459
unbound.conf: note Arch trusted key 2024-08-16 08:42:16 +03:00
b1a25ac3a2
aminda-nocron-reboot.service: apparently firewall-cmd needs home zone specified separately when NetworkManager is present 2024-08-15 09:01:38 +03:00
be0f664bcc
sudoers.d/nordvpnd: add NetworkManager restarting 2024-08-13 07:08:49 +03:00
a0419bda15
sudoers.d/password-feedback: fix the syntax error of missing capital D
Apparently it was my fault and not Fedora and Arch not shipping that module (like Fedora is missing insults, while that suspiciously isn't treated as a syntax error
2024-08-12 15:27:59 +03:00
7d548e20e6
sudoers.d: add modelines, remove prettier comment 2024-08-12 15:22:44 +03:00
060b48d9eb
sudoers.d/sudoers-group: I am looking at you not including this, Arch 2024-08-12 15:22:23 +03:00
9ef3faffaf
sudoers.d: add always-ask-password & password-feedback 2024-08-12 15:06:50 +03:00
61b9fb9e6a
etc/yum.repos.d: add dangerzone.repo 2024-08-12 14:56:59 +03:00
e2a1fd5070
Firefox & LibreAwoo: point to Codeberg 2024-08-12 10:01:42 +03:00
40dceee1b6
NetworkManager: comment no-mac-randomizing.conf to help prevent accidental enabling 2024-08-11 09:16:37 +03:00
5971eb9fd7
iwd & NetworkManager: clarify comments, note ManagementFrameProtection=1 being necessary for my home 2024-08-11 08:50:10 +03:00
63a762c200
NetworkManager: move keyfile from samples/, add rename=true 2024-08-11 08:46:27 +03:00
a66f30dc2e
NetworkManager: enable systemd-resolved DoT, use NM for iwd autoconnect 2024-08-11 08:31:45 +03:00
a4e527f6ec
dnf.conf: add debuglevel=10 2024-08-11 06:46:17 +03:00
ae144a1132
systemd-resolved: add the missing Domains rule 2024-08-10 12:22:42 +03:00
4c41a4cb56
systemd-resolved & unbound: add google dns for when everything is broken and you just want connected 2024-08-10 12:22:18 +03:00
8702c16ac0
adjust resolv.conf order in the generator scripts 2024-08-10 11:32:22 +03:00
e26e2cd92d
aminda-nocron-reboot.service: late load microcode update 2024-08-10 09:41:56 +03:00
c5a0a6f95f
pacman.conf: initial commit 2024-08-10 09:02:10 +03:00
0a0c8822af
systemd: note that reflector.service is due for removal, add reflector.service.d 2024-08-10 08:57:55 +03:00
9e676e52c1
etc: add symlink chrony.conf to chrony/chrony.conf 2024-08-10 08:40:19 +03:00
5103f93a22
dracut: operation btrfs convert failed
In the end I was unable to get the chrooted system bootable and I gave up deciding to reinstall, but apparently these changes were left here and I either need to commit them or stash and drop, and I generally think there may be value found in such of things later, so commit it is
2024-08-09 18:01:51 +03:00
cab85e4bf8
init-browser-policies.bash: use the capital X in setfacl here as well 2024-08-08 14:34:12 +03:00
d23c2a0ad3
pass capital X to setfacl in context of directories 2024-08-08 14:29:03 +03:00
880515f1f3
kgx-tmux.desktop: fix Debian compatibility 2024-08-08 09:25:56 +03:00
3a7f029252
90-cpuquota.conf: restrict CPUQuota further down to 90 %
My actual running configuration was 100 % while apparently this says 180 %
2024-08-08 08:46:14 +03:00
b859fc5ed5
firefox/policies.json: force instalkl new tab suspender, fix typo 2024-08-08 06:58:09 +03:00
9cdd99fdb1
firefox: disable telemetry over Anonym/'privacy preserving attribution'
Ref: mozilla/policy-templates#1130
2024-08-05 07:49:48 +03:00
9bca567950
{firefox,chromium}: add/restore New Tab Suspender, Dark Reader and OpenDyslexic 2024-08-02 15:30:32 +03:00
e1f6745439
Replace limits.d/00-cputime.conf with systemd/app.slice.d/90-cpulimit.conf 2024-08-02 13:40:09 +03:00
c47faaf25e
systemd-resolved: enforce DoT for files explicitly supporting it, demand DNSSEC from LAN resolver 2024-08-01 19:12:07 +03:00
b470649d3a
etc/security/limits.d/00-cputime.conf: initial commit 2024-07-31 23:28:38 +03:00
6a759bfd11
aminda-nocron-reboot.service: add systemd-oomd 2024-07-31 14:54:25 +03:00
84c0452463
systemd: finally add oomd configuration 2024-07-31 14:52:46 +03:00
f18a66faef
init-browser-policies.bash: let's be honest, there ln flags are far more memorable 2024-07-31 11:04:19 +03:00
45fb267570
etc/init-browser-policies.bash: add suspicion of another Google Chrome 2024-07-31 11:03:13 +03:00
62d52df660
init-browser-policies.bash: setfacl 2024-07-31 10:58:44 +03:00