9c7d0c6210 
							
						 
					 
					
						
						
							
							etc/ssh/config.d: add example.conf  
						
						 
						
						... 
						
						
						
						So I can stop having to dig this from manual every time I want to
configure a new host, and a couple of options I haven't used previously,
but could as they seem nice 
						
						
					 
					
						2021-06-18 13:48:41 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							a5836327c4 
							
						 
					 
					
						
						
							
							etc: pipewire & bluetooth: enable codes, battery reporting  
						
						 
						
						... 
						
						
						
						https://web.archive.org/web/20210614103423/https://www.redpill-linpro.com/techblog/2021/05/31/better-bluetooth-headset-audio-with-msbc.html  
						
						
					 
					
						2021-06-14 13:36:34 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							437a417697 
							
						 
					 
					
						
						
							
							etc/pipewire/…: say that using Pro-audio is enough fix  
						
						 
						
						
						
						
					 
					
						2021-06-14 12:13:57 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							93823eabd6 
							
						 
					 
					
						
						
							
							sysctl.d: add 23-starts-unprivileged-ports.conf  
						
						 
						
						... 
						
						
						
						Self-explanatory within comments. Link list notes to selves contributing
into this version:
* https://kernelnewbies.org/Linux_4.11 
* https://stackoverflow.com/a/51439516 
* https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux#comment90027734_51439516 
* https://developer.apple.com/forums/thread/674179 
* https://news.ycombinator.com/item?id=18302380 
* https://security.stackexchange.com/q/242859 
* https://stackoverflow.com/questions/413807/is-there-a-way-for-non-root-processes-to-bind-to-privileged-ports-on-linux#comment90027734_51439516  
						
						
					 
					
						2021-06-12 21:52:39 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							75731868e7 
							
						 
					 
					
						
						
							
							unbound/dns-over-tls.conf: allow non-Finnish anycast & note being used on servers  
						
						 
						
						
						
						
					 
					
						2021-06-11 19:39:57 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							126918d98d 
							
						 
					 
					
						
						
							
							systemd/limnoria.service: add TZ env & RestartSec  
						
						 
						
						
						
						
					 
					
						2021-06-02 17:50:30 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							30a308d29f 
							
						 
					 
					
						
						
							
							torrc-client: add MapAddress for palladium.libera.chat  
						
						 
						
						... 
						
						
						
						https://libera.chat/guides/connect#verifying-tor-tls-connections  
						
						
					 
					
						2021-05-27 17:50:03 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6576e83901 
							
						 
					 
					
						
						
							
							etc/tor/torrc-client: add irc.ergo.chat  
						
						 
						
						
						
						
					 
					
						2021-05-27 02:52:30 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6f7016a596 
							
						 
					 
					
						
						
							
							torrc-client: add irc.liberta.casa  
						
						 
						
						
						
						
					 
					
						2021-05-22 13:16:26 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c1768cae67 
							
						 
					 
					
						
						
							
							systemd: "rewrite" supybot -> limnoria, move znc, rmdir irc/  
						
						 
						
						
						
						
					 
					
						2021-05-16 18:00:31 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							306270c441 
							
						 
					 
					
						
						
							
							etc/systemd: rm cjdns & miredo, I am unlikely to use them again  
						
						 
						
						
						
						
					 
					
						2021-05-16 11:15:34 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							49facd9d39 
							
						 
					 
					
						
						
							
							etc/dnf.conf: comment tor example  
						
						 
						
						
						
						
					 
					
						2021-05-05 20:43:52 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							aa18d746db 
							
						 
					 
					
						
						
							
							etc/pipewire/README.md: cut a long line into two  
						
						 
						
						
						
						
					 
					
						2021-05-05 11:02:53 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							4b445c2aaf 
							
						 
					 
					
						
						
							
							etc/pipewire: remove the ...example.donotuse  
						
						 
						
						... 
						
						
						
						I am quite sure that the config file has changed so much that the file
wouldn't work anyway and I don't think I really need it with the
important part being in the README.md 
						
						
					 
					
						2021-05-05 11:01:50 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c6a75f0962 
							
						 
					 
					
						
						
							
							ssh/anoncvs.conf: fix typo  
						
						 
						
						
						
						
					 
					
						2021-05-04 16:18:31 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							447e8192c2 
							
						 
					 
					
						
						
							
							etc/default/grub.d: add remember-previous.cfg  
						
						 
						
						
						
						
					 
					
						2021-04-30 20:05:22 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							ad6ac7d45e 
							
						 
					 
					
						
						
							
							dnf.conf: double max_parallel_downloads  
						
						 
						
						
						
						
					 
					
						2021-04-28 12:32:58 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1ad289aa49 
							
						 
					 
					
						
						
							
							unbound/dot-mullvad-adblock.conf: add missing port number  
						
						 
						
						
						
						
					 
					
						2021-04-27 21:40:16 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							41879fe5e8 
							
						 
					 
					
						
						
							
							unbound.conf.d: rm dns-mullvad, add dot-mullvad[-adblock]  
						
						 
						
						
						
						
					 
					
						2021-04-27 21:35:58 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							61d19724fa 
							
						 
					 
					
						
						
							
							resolv.csv: add Mullvad  
						
						 
						
						
						
						
					 
					
						2021-04-27 21:30:46 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e4c9d168ba 
							
						 
					 
					
						
						
							
							yum.repos.d: add tor.repo  
						
						 
						
						
						
						
					 
					
						2021-03-28 09:41:15 +03:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							6f8c7de6af 
							
						 
					 
					
						
						
							
							unbound.conf.d: add 00-insecure-domains.conf (WiFi repeater config)  
						
						 
						
						
						
						
					 
					
						2021-03-14 21:00:32 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							3b4847f447 
							
						 
					 
					
						
						
							
							yum.repos.d/protonvpn-unstable: remove unneeded expansions  
						
						 
						
						... 
						
						
						
						Fixes pkcon complaining 
						
						
					 
					
						2021-03-13 18:29:30 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							134999487f 
							
						 
					 
					
						
						
							
							yum.repos.d: add microsoft-edge-dev.repo  
						
						 
						
						
						
						
					 
					
						2021-03-07 16:46:47 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							93b9bc5ba6 
							
						 
					 
					
						
						
							
							yum.repos.d: move Dino from README to .repo  
						
						 
						
						
						
						
					 
					
						2021-03-07 16:37:15 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							267f68ae80 
							
						 
					 
					
						
						
							
							yum.repos.d: add microsoft-prod.repo  
						
						 
						
						
						
						
					 
					
						2021-03-07 16:36:04 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							e5c259eda6 
							
						 
					 
					
						
						
							
							README.md: write about soft-mixer  
						
						 
						
						
						
						
					 
					
						2021-03-02 12:21:58 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							85d97aec3e 
							
						 
					 
					
						
						
							
							apt/preferences.d/pulseaudio: pin priority -1 backports too  
						
						 
						
						
						
						
					 
					
						2021-03-01 19:08:18 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							51b0b5dde5 
							
						 
					 
					
						
						
							
							sudoers.d/protonvpn: add more paths & potential legacy note  
						
						 
						
						
						
						
					 
					
						2021-02-27 09:02:10 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5903664cb7 
							
						 
					 
					
						
						
							
							yum.repos.d: add protonvpn-unstable.repo  
						
						 
						
						
						
						
					 
					
						2021-02-26 14:10:38 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							f21e22e80f 
							
						 
					 
					
						
						
							
							etc/sudoers.d: fix name, make notes to README.md  
						
						 
						
						
						
						
					 
					
						2021-02-26 11:34:20 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							267dd77604 
							
						 
					 
					
						
						
							
							im.riot.Riot.desktop: add missing word "run"  
						
						 
						
						
						
						
					 
					
						2021-02-19 14:27:16 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							8463fa8f5c 
							
						 
					 
					
						
						
							
							local/share/applications: Riot -> Element  
						
						 
						
						... 
						
						
						
						Package name hasn't changed though so I imagine the icon is the same too 
						
						
					 
					
						2021-02-19 13:59:27 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							95a44d0be9 
							
						 
					 
					
						
						
							
							etc/pipewire: document the volume cutoff (pulseaudio style) workaround  
						
						 
						
						
						
						
					 
					
						2021-02-18 14:51:22 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c8e89a5817 
							
						 
					 
					
						
						
							
							systemd: add coredump.conf.d/biggercores.conf  
						
						 
						
						
						
						
					 
					
						2021-02-18 14:47:23 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							8155bec959 
							
						 
					 
					
						
						
							
							sysctl.d: add 00-quic-go-udp-receive-buffer.conf  
						
						 
						
						... 
						
						
						
						So I will remember it's existence 
						
						
					 
					
						2021-02-13 09:36:28 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							a0c61231f4 
							
						 
					 
					
						
						
							
							systemd/resolved.conf.d: add snopyta-strict.conf  
						
						 
						
						... 
						
						
						
						While posting an example how I would do it I might as well put it here 
						
						
					 
					
						2021-02-10 16:12:42 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							288b010fe5 
							
						 
					 
					
						
						
							
							sshd: move mikaela-prohibit-password.conf to broken/  
						
						 
						
						... 
						
						
						
						Apparently OpenSSH only allows PasswordAuthentication yes within a Match
block. 
						
						
					 
					
						2021-02-02 14:12:43 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1be2720861 
							
						 
					 
					
						
						
							
							sshd: explicitly "terminate" Match blocks by Match All  
						
						 
						
						... 
						
						
						
						https://unix.stackexchange.com/a/303982/17126  & man sshd_config 
						
						
					 
					
						2021-02-02 13:58:35 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							3260950712 
							
						 
					 
					
						
						
							
							sshd/anoncvs.conf: vcs users shouldn't ever be asked for a password  
						
						 
						
						... 
						
						
						
						even if the system would allow that. 
						
						
					 
					
						2021-02-02 13:06:04 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							2711c5975e 
							
						 
					 
					
						
						
							
							NetworkManager.conf.d: add no-search-domains.conf  
						
						 
						
						
						
						
					 
					
						2021-02-02 12:52:34 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							7ad17f8087 
							
						 
					 
					
						
						
							
							sshd/user-permit-password.conf: note on how to allow specific user to use passwords  
						
						 
						
						
						
						
					 
					
						2021-02-01 17:11:06 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							1503367c86 
							
						 
					 
					
						
						
							
							sshd_config & ….d/README: note min version & date  
						
						 
						
						
						
						
					 
					
						2021-01-31 13:51:06 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							f75bc7bd07 
							
						 
					 
					
						
						
							
							sshd/basic-security.conf: remove deprecated option  
						
						 
						
						... 
						
						
						
						> /etc/ssh/sshd_config.d/basic-security.conf line 24: Deprecated option UsePrivilegeSeparation
OpenSSH_8.4p1, OpenSSL 1.1.1i FIPS  8 Dec 2020 
						
						
					 
					
						2021-01-31 13:39:51 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							0151bee9b0 
							
						 
					 
					
						
						
							
							sshd/mikaela-prohibit-password.conf: add AuthenticationMethods publickey  
						
						 
						
						
						
						
					 
					
						2021-01-30 22:15:51 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							f1ea1e17d9 
							
						 
					 
					
						
						
							
							etc/ssh: rm copy  
						
						 
						
						
						
						
					 
					
						2021-01-30 21:35:05 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							0572613d99 
							
						 
					 
					
						
						
							
							etc/ssh: cut sshd_config into multiple .confs  
						
						 
						
						
						
						
					 
					
						2021-01-30 21:31:38 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							c5fa3daf29 
							
						 
					 
					
						
						
							
							sshd_config.d: read Mozilla docs & adjust accordingly  
						
						 
						
						... 
						
						
						
						https://infosec.mozilla.org/guidelines/openssh  
						
						
					 
					
						2021-01-30 21:18:41 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							5211fb772c 
							
						 
					 
					
						
						
							
							sshd_config.d: add anoncvs.conf  
						
						 
						
						
						
						
					 
					
						2021-01-30 21:00:06 +02:00  
					
					
						 
						
							
							
							 
						
					 
				 
			
				
					
						
					 
					
						
						
							
							
								
									
								
							
						
						
						
							
						
						
							de3a0739b4 
							
						 
					 
					
						
						
							
							sshd_config.d: add mikaela-prohibit-password.conf  
						
						 
						
						... 
						
						
						
						Resolves : #88  
						
						
					 
					
						2021-01-30 20:50:21 +02:00