Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
3,054 Commits 1 Branch 0 Tags 5.9 MiB
Commit Graph

3054 Commits

Author SHA1 Message Date
Aminda Suomalainen 9375b3c2b2
unbound: add dot-cloudflare.conf 2024-04-27 21:22:28 +03:00
Aminda Suomalainen 2aa221b77f
unbound/cache: take the cache-min-ttl: 3000 challenge 
It will not affect web browsers which are using DoH for ECH eliminating most of breakage and I am just curious on will anything outside of web browser suffer that.
 2024-04-27 18:35:22 +03:00
Aminda Suomalainen 652c11391f
unbound/cache.conf: explicitly set serve-expired-reply-ttl to 30 2024-04-27 16:52:39 +03:00
Aminda Suomalainen d3773468fa
chromium/policies: add doh-{disabled,google}.json 2024-04-27 16:18:40 +03:00
Aminda Suomalainen a083a9d704
unbound/cache: comment cache-min-ttl=900, add commented 3000 2024-04-27 15:42:29 +03:00
Aminda Suomalainen 30a27f980d
unbound/cache.conf: RFC 8767ish configuration 2024-04-27 15:00:12 +03:00
Aminda Suomalainen 813878a4de
systemd/{iwd,systemd-networkd}.service.d: add appropiate symlinks 2024-04-27 12:25:00 +03:00
Aminda Suomalainen c59fe1ae53
sudoers.d/nordvpnd: also allow restarting tor-client.service 
I have a suspicion I am adding it to the script sooner or later
 2024-04-27 12:21:07 +03:00
Aminda Suomalainen ef9c4acfc3
sudoers.d/nordvpnd: also allow restarting Tor 2024-04-27 12:10:15 +03:00
Aminda Suomalainen 955e52f5af
yum.repos.d: add google-Chrome.repo to workaround their crontab disliking my system 2024-04-27 10:21:20 +03:00
Aminda Suomalainen 8fe7ff55e6
chromium: add managed black-theme-colour & recommended apps-as-homepage, disable-default-browser-check 2024-04-27 10:08:43 +03:00
Aminda Suomalainen b76b7cac5c
systemd/user: review vpn wants, rm transmission-daemon copy-paste 2024-04-27 08:34:46 +03:00
Aminda Suomalainen 2113b593e7
Chromium & Firefox: force Bitwarden (for passkeys) 2024-04-27 08:32:39 +03:00
Aminda Suomalainen da85d0d9c7
firefox & chromium: allow PrivacyPass attestor & Keyoxide.org 2024-04-27 08:31:05 +03:00
Aminda Suomalainen 61dc3706ab
systemd/{chrony,i2pd,yggdrasil}.service.d/mullvad-exclude.conf: fix mistakes and Requires= 2024-04-26 17:43:37 +03:00
Aminda Suomalainen 1b64bc5e13
systemd/service.d: fix typo & use Requires= where appropiate 2024-04-26 17:38:33 +03:00
Aminda Suomalainen db7de1c3e4
systemd/service.d/unbound-wanted.conf: break circular skipping by removing After= 2024-04-26 17:35:31 +03:00
Aminda Suomalainen 7f410148e3
aminda-nocron-rebootish.service: repeat that dns should be running 2024-04-26 16:13:39 +03:00
Aminda Suomalainen 1d7308e74e
unbound: explicitly enable ede and it's log 2024-04-26 13:53:50 +03:00
Aminda Suomalainen ed21eb03cd
.pre-commit-config.yaml: switch to rbubley's prettier mirror 2024-04-26 13:25:45 +03:00
Aminda Suomalainen 2f585209e7
matterbridge-cleanup.timer: use more human friendly term minutely on OnCalendar= 2024-04-26 13:21:20 +03:00
Aminda Suomalainen 65f58dc224
systemd: aminda-nocron-rebootish.{service,timer} is a delayed variant of -ish 2024-04-26 13:16:33 +03:00
Aminda Suomalainen c55b20a89a
move systemd user units from conf/systemd/user to etc/systemd/user 
symlink remains to show what is the correct location
 2024-04-26 13:05:08 +03:00
Aminda Suomalainen b36fe67bc3
systemd/user: attempt to flatpak-update-user.{service,timer} 2024-04-26 13:03:05 +03:00
Aminda Suomalainen b8f720fa7f
aminda-nocron-reboot.timer: fix typo in comment 2024-04-26 12:48:47 +03:00
Aminda Suomalainen 9e38fdf223
aminda-nocron-reboot.timer: add RemainAfterElapse=false 2024-04-26 12:37:55 +03:00
Aminda Suomalainen 90b64c9543
systemd: rename aminda-nocron -> aminda-nocron-reboot for clarity 
also opens up aminda-nocron-hourly etc.
 2024-04-26 12:30:58 +03:00
Aminda Suomalainen b0ec7cffde
chromium/README: EnableOnlineRevocationChecks does also enable CRL 2024-04-26 11:27:11 +03:00
Aminda Suomalainen 16d2f74135
systemd/aminda-nocron.service: explicitly start DNS too 2024-04-26 11:08:15 +03:00
Aminda Suomalainen def77bc4c3
systemd: add aminmda-nocron.{service,timer} for my @reboot crontabs for cronless systems (SteamOS) 2024-04-26 10:43:08 +03:00
Aminda Suomalainen 901dbfe138
etc/hosts: attempt to increase legibility by adding leading and trailing # 2024-04-25 19:45:11 +03:00
Aminda Suomalainen 21b59adfd2
etc/hosts/hostname: copy Debian behaviour as a good practice 2024-04-25 19:40:56 +03:00
Aminda Suomalainen 7c3da50491
{bash,zshrc}: prepare for alias 2024-04-25 17:39:20 +03:00
Aminda Suomalainen daae569442
chmod: fix SC quoting, add verbosity for less dangerous things 2024-04-25 17:37:26 +03:00
Aminda Suomalainen fb65f717fc
etc: cleanup symlinks/files handled by init-browser-policies.bash 
They brought no value to me, just confused me in git forges by clicktrapping me and not following the symlinks
 2024-04-25 17:31:09 +03:00
Aminda Suomalainen 6375d55b8f
systemd-resolved/mullvad: default to base for consistency with unbound 2024-04-25 17:27:55 +03:00
Aminda Suomalainen 17e0b68d20
unbound: add dot-mullvad.conf defalting on base 
I found myself missing this on an old family PC that has limited resources and as I didn't have this file at hand, I just went with AdGuard which will work too.
 2024-04-25 17:24:41 +03:00
Aminda Suomalainen a17ff2903a
unbound/nordvpn-domains.conf: add comments/sources, fix duplicate zone, add missing domains 2024-04-25 15:07:37 +03:00
Aminda Suomalainen bbeb1d3e02
unbound/nordvpn: rename, send only their domains to them 2024-04-25 14:34:47 +03:00
Aminda Suomalainen 046b9c5f1a
systemd: use more descriptive drop-in name unbound-wanted.conf instead of unbound.conf 2024-04-25 14:10:26 +03:00
Aminda Suomalainen 82214710c1
update submodule jauderho-nts-servers 2024-04-25 14:03:03 +03:00
Aminda Suomalainen 1ea9fff29a
chromium: declare more things as .badidea 2024-04-25 14:01:54 +03:00
Aminda Suomalainen f87c4899b6
chromium: add dns-over-https.json.badidea and declare it as a bad idea 2024-04-25 13:57:01 +03:00
Aminda Suomalainen 861b35c25f
systemd-resolved: add the other applied-privacy.net port too 2024-04-25 13:47:18 +03:00
Aminda Suomalainen 342e3116a6
systemd-resolved: another attempt at local resolvers 2024-04-25 13:45:37 +03:00
Aminda Suomalainen d17ad34650
unbound/dns-over-tls.conf: note Applied Privacy does no ECS, add 853, add Quad9 unfiltered (ECS commented) 2024-04-25 13:26:01 +03:00
Aminda Suomalainen 52b0807fcb
systemd/yggdrasil.service.d: rename nordvpnd to restore-ipv6.conf 2024-04-25 12:52:30 +03:00
Aminda Suomalainen 520470e3dd
systemd: add firewalld-icmpv6.conf as drop-in 2024-04-25 12:51:03 +03:00
Aminda Suomalainen 5869247cc3
cron: add firewalld icmpv6 allowing 2024-04-25 12:46:17 +03:00
Aminda Suomalainen 45cf5ecf61
opt/chromium/policies/managed: update documentation about working preferred over ECH enforced 2024-04-25 11:00:40 +03:00