Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
2,693 Commits 1 Branch 0 Tags 5.9 MiB
Commit Graph

866 Commits

Author SHA1 Message Date
Aminda Suomalainen 9853513f01
dnf: disable DeltaRPMs 2023-11-27 09:12:45 +02:00
Aminda Suomalainen 91428c51af
systemd-resolved: git rm dot-nextdns.conf 2023-11-26 16:23:31 +02:00
Aminda Suomalainen 1abfd94f01
systemd-resolved/dot-dns0: merge lines 2023-11-26 16:23:12 +02:00
Aminda Suomalainen b583b8a6d4
systemd-resolved/*.conf: add appliedprivacy DoTo443 as a comment 2023-11-26 16:19:55 +02:00
Aminda Suomalainen dee168e287
systemd-resolved: merge provider configs 2023-11-26 16:18:15 +02:00
Aminda Suomalainen fa3fc72afb
systemd-resolved: cleanup configs I don't recommend 2023-11-26 16:12:38 +02:00
Aminda Suomalainen 16ddfd92e8
chrony/sources.d: rethink yggdrasil.sources 2023-11-22 11:28:21 +02:00
Aminda Suomalainen 865e816384
chrony/finland.sources: enable xleave for the known Chrony 2023-11-22 10:17:32 +02:00
Aminda Suomalainen 88f443911f
chrony/yggdrasil.sources: comment kincarron, unlikely to return in near future 2023-11-22 08:38:40 +02:00
Aminda Suomalainen b9bc665e07
chrony/nts-servers.sources: comment sources not in Finland 2023-11-22 08:38:12 +02:00
Aminda Suomalainen 6918ac27d4
yum.repos.d: add mullvad.repo 2023-11-20 21:27:48 +02:00
Aminda Suomalainen da99ce785f
chrony/conf.d: add .FIXME suffix to ca-certificates.conf, clarifying comments 2023-11-16 20:19:39 +02:00
Aminda Suomalainen 428802a4fd
unbound: rm mullvad configuration 
It's wrong and I am not currently using it
 2023-11-12 12:51:54 +02:00
Aminda Suomalainen e825c1dac3
systemd-resolved: dot-mullvad.conf: update domains, add commented other server options 2023-11-12 12:51:07 +02:00
Aminda Suomalainen 60b3c620fb
systemd-resolved: rm dot-mullvad-adblock.conf 2023-11-12 12:46:35 +02:00
Aminda Suomalainen f64b94894c
resolv.tsv: update Mullvad addresses 2023-11-12 12:45:43 +02:00
Aminda Suomalainen 4f2f41762c
etc/yum.repos.d: note LibreWolf upstream documentation 2023-11-11 18:27:55 +02:00
Aminda Suomalainen 35b90b6d06
resolv.tsv: update/add/fix Mullvad offering 2023-11-10 15:14:42 +02:00
Aminda Suomalainen d2c6f99401
ssh_config: remove deprecated option useroaming 
Even Debian Bookworm mentions it as deprecated in ssh -vvv and I seriously doubt I have such old SSH running anywhere
 2023-10-28 22:27:06 +03:00
Aminda Suomalainen 4f87dd6221
samba/playstation2.conf: specify hosts allow 2023-10-28 20:35:08 +03:00
Aminda Suomalainen ad59c45eb3
yum.repos.d/README.md: update Yggdrasil address 2023-10-28 18:12:51 +03:00
Aminda Suomalainen b6ecd1b173
systemd-resolved: keep DNSSEC enabled 2023-10-21 11:27:07 +03:00
Aminda Suomalainen 7b4d791d07
flatpak-update.timer: increase frequency 2023-10-19 10:43:55 +03:00
Aminda Suomalainen 94c23e2f7d
etc/nginx: fix line endings and indentation 
UNTESTED! TODO WIP etc.?
 2023-10-19 09:27:55 +03:00
Aminda Suomalainen 90edac262a
resolved.conf.d: add dot-dns0-appliedprivacy.conf in style of quad9-ecs-appliedprivacy 2023-10-14 19:18:45 +03:00
Aminda Suomalainen 79210446ed
local/share/applications: add SteamOS-kscreenlocker.desktop symlink 2023-10-09 12:54:34 +03:00
Aminda Suomalainen 5419ff1bc7
move submodule to submodules/ 2023-10-09 12:50:52 +03:00
Aminda Suomalainen b8f1aa69dd
unbound/00-insecure-domains.conf: add router.asus.com 2023-10-07 13:10:07 +03:00
Aminda Suomalainen 1eeef2f511
resolved: add dot-quad9-ecs-appliedprivacy.conf for Steam Deck purposes 2023-10-01 19:06:46 +03:00
Aminda Suomalainen 5297140958
systemd/limnoria.service: place limit on memory, commented cpuquote 2023-10-01 10:47:06 +03:00
Aminda Suomalainen 024fd40e87
git rm etc/hosts.append 
https://gitea.blesmrt.net/mikaela/gist/src/branch/master/DNS/blocklist.txt
 2023-09-30 17:39:47 +03:00
Aminda Suomalainen d7acebbe45
chrony/sources.d/yggdrasil: remove Teknologia Avoimeksi 2023-09-30 17:38:45 +03:00
Aminda Suomalainen 10a841acfe
systemd/journald.conf.d: add 00-journal-size.conf 2023-09-29 15:06:41 +03:00
Aminda Suomalainen c32910df57
systemd/syncplay-server.service: use venv 
Resolves: #145

Thanks again @EchedeyLR
 2023-09-29 10:57:06 +03:00
Aminda Suomalainen a4b7bdb51a
systemd/limnoria: use venv & update Ergo's name 
Thanks @EchedeyLR (ref: mikaela/shell-things#145)
 2023-09-29 10:39:44 +03:00
Aminda Suomalainen 2c47aaae48
sshd_config.d/README.md: fix formatting, note priority 2023-09-28 14:35:21 +03:00
Aminda Suomalainen c0fcc82c4d
sshd_config: add 00- prefix to basic-security.conf as apparently first wins in ssh 2023-09-28 14:34:13 +03:00
Aminda Suomalainen f20e23df42
sshd_config.d: maybe keyed root login is fine in special case of SteamOS on Steam Deck? 2023-09-27 18:02:50 +03:00
Aminda Suomalainen 71a8913d37
update submodule etc/chrony/sources.d/jauderho-nts-servers 2023-09-27 12:21:32 +03:00
Aminda Suomalainen dfcbc7e971
systemd/timesyncd.conf.d: sync sources from Chrony 
This is for SteamOS, although without Yggdrasil (that I am not hacking in
yet) and NTS which systemd-timesyncd doesn't do to my knowledge
 2023-09-27 12:16:55 +03:00
Aminda Suomalainen 9429b48aaa
etc/iwd/main.conf: throw in comments on defaults 2023-09-26 17:33:12 +03:00
Aminda Suomalainen ce7ab5ea40
grub/forcefsck: add fsck.repair=yes 2023-09-24 17:26:40 +03:00
Aminda Suomalainen 49d6dfc766
update submodule etc/chrony/sources.d/jauderho-nts-servers 2023-09-17 20:29:37 +03:00
Aminda Suomalainen 24eb3890c2
systemd-resolved: prefer IPv6 over IPv4 2023-09-10 11:16:57 +03:00
Aminda Suomalainen 1e3a7f8fa3
systemd-resolved/dns-over-tls.conf: drop appliedprivacy#443 to the bottom of the list 
Apparently systemd-resolved wants to go in strict order and thus it's always sending my queries to distant Austria instead of neighbouring regions
 2023-09-10 11:10:39 +03:00
Aminda Suomalainen e2829267d7
systemd: add debugging & symlinks for networkd, resolved, never-fail networkd 2023-09-10 11:07:11 +03:00
Aminda Suomalainen c7b5330dfb
systemd/resolved/dot: add missing bracket, remove extra ones 
Apparently IPv6 must only be surrounded by brackets, otherwise it's invalid syntax
 2023-09-10 09:52:59 +03:00
Aminda Suomalainen 1d8e457f97
systemd-resolved: add dns-over-tls.conf mimicing unbound's equivalent 2023-09-10 09:31:35 +03:00
Aminda Suomalainen 4d68dd7e7f
systemd: add journald.conf.d/.gitignore as a placeholder 2023-08-24 16:12:43 +03:00
Aminda Suomalainen 27dacbf5f8
systemd-networkd: add commented RequiredFamilyForOnline= under [Link] 2023-08-23 14:40:18 +03:00
Aminda Suomalainen 2e1a5cbfe1
chrony: add ca-certificates.conf to explicitly specify their location 2023-08-20 11:13:51 +03:00
Aminda Suomalainen 5120a7aff8
update submodule jauderho-nts-servers 2023-08-20 11:13:28 +03:00
Aminda Suomalainen 78bb0cdcc8
etc/resolv.tsv: add Applied Privacy 2023-08-05 12:36:20 +03:00
Aminda Suomalainen 9fdeb56762
unbound.service.d: add fedora-network-pre.conf 2023-08-04 13:09:58 +03:00
Aminda Suomalainen 34b4ffb8ac
unbound/dns-over-tls.conf: cut to 443 and private ECS capable non-filtering servers 2023-08-04 12:45:03 +03:00
Aminda Suomalainen d024ac1234
Revert "rm etc/unbound/unbound.conf.d/dns-over-tls.conf" 
This reverts commit e9998f4079.
 2023-08-04 12:27:41 +03:00
Aminda Suomalainen db6bdd6222
unbound.service.d: override to require dnsproxy for starting 2023-08-03 12:43:10 +03:00
Aminda Suomalainen 6fdfad9e93
dnsproxy.service: return to network-pre.target 2023-08-03 12:41:58 +03:00
Aminda Suomalainen 5acec4c00e
dnsproxy.service: second-guess to start after network-noline.target and before unbound.service? 2023-08-03 12:15:24 +03:00
Aminda Suomalainen 809d723293
systemd: fix symlinks to never-fail.conf 
Technically they would still work through the yggdrasil symlink, but I don't like it
 2023-08-03 11:54:01 +03:00
Aminda Suomalainen bbd7a02b60
dnsproxy.service: start before network management and hope it handles dynamic network conditions 2023-08-03 11:50:52 +03:00
Aminda Suomalainen 918bdc2a97
systemd: move never-fail to more appropiate location 2023-08-03 11:50:12 +03:00
Aminda Suomalainen f3c9d1006b
update submodule etc/chrony/sources.d/jauderho-nts-servers 2023-07-29 21:31:46 +03:00
Aminda Suomalainen 2738d239ce
etc/yum.repos.d: add librewolf-repo.repo 2023-07-13 12:24:14 +03:00
Aminda Suomalainen eab5c3b07e
systemd/network: add number prefixes as per man systemd.network 2023-07-05 10:57:03 +03:00
Aminda Suomalainen 5749b2c0fa
update submodule etc/chrony/sources.d/jauderho-nts-servers 2023-07-04 11:46:33 +03:00
Aminda Suomalainen a13a0dd86b
systemd-networkd: match naming with types 2023-07-04 11:45:29 +03:00
Aminda Suomalainen 8cc9353374
systemd-networkd: configure based on type rather than name, add a comment on MACAddress matching 
Resolves: warnings on potentially unpredictable interface names.
 2023-07-04 11:24:29 +03:00
Aminda Suomalainen d3c613bc41
etc/iwd/main.conf: add spacing, comment AddressRandomization=disabled for Realtek 2023-06-25 17:58:41 +03:00
Aminda Suomalainen 30253761b3
systemd/network: enable IPv6 Privacy Extensions and link-local stable-privacy 2023-06-25 14:13:00 +03:00
Aminda Suomalainen cbdfc0f46d
systemd-networkd: unmanage wlan0 2023-06-25 10:36:29 +03:00
Aminda Suomalainen 6159876f05
unbound/blocklist.conf: add {reddit,twitter}.com to support the protest 2023-06-11 18:53:16 +03:00
Aminda Suomalainen f61d8c3edb
systemd/dnsproxy.service: use the same DNS0 for bootstrap as DoH 2023-06-11 08:56:04 +03:00
Aminda Suomalainen c54a8c0a10
update submodule etc/chrony/sources.d/jauderho-nts-servers 2023-06-10 08:20:22 +03:00
Aminda Suomalainen 7ac9b9a7cc
etc/unbound/blocklist: remove duplicates, add graph.facebook.com 
`local-zone: "google-analytics.com." always_refuse` implies subdomains
 2023-06-06 12:09:48 +03:00
Aminda Suomalainen 5d00ccaf6b
unbound: add blocklist-tld.conf mainly for zip & mov 2023-05-28 10:36:52 +03:00
Aminda Suomalainen 1b1514f993
systemd: add masks required by tlp as a note to self 2023-05-25 07:48:22 +03:00
Aminda Suomalainen 8fb52ec8f2
add shfmt 2023-05-18 11:58:51 +03:00
Aminda Suomalainen 687a6433bb
add & run prettier-plugin-nginx 2023-05-18 11:35:13 +03:00
Aminda Suomalainen e0dc070cd1
etc/nginx: append .nginx to file names 
in preparation of prettier-nginx
 2023-05-18 11:17:24 +03:00
Aminda Suomalainen ca2956b678
unbound/blocklist: note encrypted client hello 2023-05-13 17:17:20 +03:00
Aminda Suomalainen 603ac4a011
unbound/blocklist.conf: remove Mozilla Telemetry 2023-05-13 17:16:17 +03:00
Aminda Suomalainen fdeab81c2b
unbound/blocklist.conf: add matrix.to as dared by !KMbEUhVQHLwZHmwzKX:matrix.org 2023-05-13 17:14:45 +03:00
Aminda Suomalainen 19f3a0b720
update submodule jauderho-nts-servers 2023-05-12 09:30:28 +03:00
Aminda Suomalainen 58ead9302c
etc/apt/sources.list: keep adding non-free-firmwares 
Fixes: 94d26e811a
Resolves: #159
 2023-05-12 09:29:32 +03:00
Aminda Suomalainen 42f1c58fa0
etc/yum.repos.d: add vivaldi 2023-05-08 20:54:22 +03:00
Aminda Suomalainen 442a4fb89a
update submodules 2023-05-04 15:57:12 +03:00
Aminda Suomalainen 94d26e811a
etc/apt/sources.list: enable non-free-firmware for Debians 
Resolves: #159
 2023-04-10 17:07:48 +03:00
Aminda Suomalainen 8309e9254e
ssh_config: StrictHostKeyChecking accept-new 2023-04-03 11:03:48 +03:00
Aminda Suomalainen 0a5e526cc5
systemd-networkd/eth0: don't require being up 
Resolves: #157
 2023-03-31 13:33:27 +03:00
Aminda Suomalainen 5f6bddfe8a
systemd: add NetworkManager-wait-online.service & systemd-networkd-wait-online.service to refresh my memory 2023-03-25 18:32:23 +02:00
Aminda Suomalainen bae5e38347
etc/samba/playstation2.conf: apparently both log level & syslog lines are needed 2023-03-25 12:12:57 +02:00
Aminda Suomalainen 3e9331c84f
etc/samba/playstation2.conf: move deadtime & keepalive to [global] 2023-03-25 12:05:43 +02:00
Aminda Suomalainen 4757f05060
etc/samba/playstation2.conf: fix logging? 2023-03-25 12:03:54 +02:00
Aminda Suomalainen f43106f002
etc/samba/playstation2.conf: enable logging 2023-03-25 11:55:54 +02:00
Aminda Suomalainen e491a114a1
etc/samba/playstation2.conf: disable deadtime, shorten keepalive 2023-03-25 11:46:33 +02:00
Aminda Suomalainen 7ea097c6fe
etc/resolv.conf: search for . 
Resolves: #156
 2023-03-24 10:37:52 +02:00
Aminda Suomalainen 6333883dc3
etc/samba/playstation2.conf: document issues coming up with real hardware 2023-03-14 16:57:14 +02:00
Aminda Suomalainen 30684318aa
etc/resolv.tsv: test ECS support of some empty fields 2023-03-11 15:54:04 +02:00
Aminda Suomalainen 33301bb8e5
etc/chrony/sources.d: update submodule 2023-03-11 08:18:48 +02:00
Aminda Suomalainen cc0e5514ab
etc/chrony/sources.d: update submodule, add license information, add German servers 2023-03-10 09:49:35 +02:00
Aminda Suomalainen 4f7d891f68
jauderho-nts-servers: update submodule 2023-03-09 11:45:58 +02:00
Aminda Suomalainen 1b113e0c3e
etc/systemd/network: add commented DHCP=yes 2023-03-07 15:02:13 +02:00
Aminda Suomalainen 514ed85374
etc/systemd/network: update samples and comments to reflect my current views 2023-03-07 14:46:28 +02:00
Aminda Suomalainen d51d8e810a
update submodule, symlink 2023-03-07 12:08:53 +02:00
Aminda Suomalainen a80342b82b
etc/samba/playstation2.conf: rename share to PS2SMB, update comments 2023-03-03 17:14:19 +02:00
Aminda Suomalainen e265916ba1
etc/samba/playstation2.conf: initial commit 2023-03-03 09:54:02 +02:00
Aminda Suomalainen e9998f4079
rm etc/unbound/unbound.conf.d/dns-over-tls.conf 
I think the file is inherently flawed due to different types of filtering/non-filtering resolvers, different locations, unknown ECS policies etc. Importantly I am not actively looking at this and just came across old version running in production
 2023-02-26 09:15:19 +02:00
Aminda Suomalainen 5350804d41
etc/resolv.tsv: remove /fi/ from DNS0.eu ECS links 2023-02-25 14:33:52 +02:00
Aminda Suomalainen e839c83f53
etc/resolv.tsv: add EDNS Client-Subnet support & sources 2023-02-25 14:12:39 +02:00
Aminda Suomalainen e520e78c1a
etc/resolv.tsv: add/update AdGuard 2023-02-25 13:58:47 +02:00
Aminda Suomalainen 06f6f2f2a6
etc/resolv.conf: uncomment trust-ad 
less dd to press when actually applying this
 2023-02-24 08:43:41 +02:00
Aminda Suomalainen faf242d8ca
etc/yum.repos.d: add brave beta & nightly 
Yes, the upstream instructions say nightly and beta have the same key
 2023-02-23 21:28:52 +02:00
Aminda Suomalainen 0cfb5859ad
dnsproxy: remove --user that doesn't apply anymore 2023-02-23 14:31:48 +02:00
Aminda Suomalainen 4761b94331
dnsproxy.service: convert to system service 2023-02-23 14:25:12 +02:00
Aminda Suomalainen 9bdc67dd29
unbound & systmed-resolved: add DNS0 open 
Ref: #153
 2023-02-23 10:11:03 +02:00
Aminda Suomalainen cc5e7b7225
unbound: add DNS0 & DNS0 zero DoT config 
Resolves: #153
 2023-02-22 10:58:04 +02:00
Aminda Suomalainen a2c3d9248d
fix ends of lines 2023-02-21 20:11:35 +02:00
Aminda Suomalainen b39b5db0d4
run prettier on markdown again? 2023-02-21 19:33:31 +02:00
Aminda Suomalainen 2e6a03d402
sastisfy editorconfig check 2023-02-21 19:08:54 +02:00
Aminda Suomalainen 19994e3286
run prettier 2023-02-21 17:54:39 +02:00
Aminda Suomalainen fcb57144c9
chmod -x *.desktop && add .pre-commit-config.yaml 2023-02-21 16:16:33 +02:00
Aminda Suomalainen 1706269308
etc/resolv.tsv: add dns0 open 
Resolves: #154
 2023-02-21 12:57:55 +02:00
Aminda Suomalainen 1385bf6105
ssh_config: comment ProxyCommand 
I just keep disabling it anyway so it's more harm than good
 2023-02-21 10:11:34 +02:00
Aminda Suomalainen 4a20f75d3c
etc/systemd/resolved.conf.d: add DNS0 DoT configs 
Their website already had the correct syntax for the entries

Ref: #153
 2023-02-20 11:49:31 +02:00
Aminda Suomalainen 8e3244f785
etc/resolv.tsv: add mobileconfig links 
This is just the official ones I found, I could link to encrypted-dns.party, but that is a task for later, I can find it without this file

Resolves: #152
 2023-02-20 11:43:32 +02:00
Aminda Suomalainen 5ee54038de
etc/ssh/ssh_config: retab 2023-02-17 17:29:45 +02:00
Aminda Suomalainen ff524fec97
etc/yum.repos.d: add fedora-crystal.repo 2023-02-13 17:47:23 +02:00
Aminda Suomalainen 1b243c279d
resolv.tsv: fix formatting 2023-02-13 11:52:43 +02:00
Aminda Suomalainen 4257bf5341
etc: resolv.csv -> resolv.tsv 2023-02-13 11:44:36 +02:00
Aminda Suomalainen 8ab861d791
etc/iwd/main.conf: uncomment "AddressRandomizationRange=nic" and update comment 2023-02-10 22:04:12 +02:00
Aminda Suomalainen 421087e536
etc/resolv.csv: add DNS0.eu 
Resolves: #150
 2023-02-09 11:56:09 +02:00
Aminda Suomalainen 47eaebeece
etc/chrony/sources.d: submodule the curated NTS server list gist for future discoverability 
This repository is random anyway and has files that don't belong such as resolv.csv
 2023-02-06 10:43:46 +02:00
Aminda Suomalainen 36c2688cec
etc/systemd/system/unbound.service.d/never-fail.conf: unbound isn't allowed to fail either 2023-02-03 10:59:31 +02:00
Aminda Suomalainen 3439b284a7
etc/iwd/main.conf: note that AddressRandomizationRange=nic has 254 possible addresses 2023-01-28 18:37:43 +02:00
Aminda Suomalainen 6b2cb6575b
etc/iwd/main.conf: add a comment(ed/) on AddressRandomizationRange=nic 2023-01-27 13:21:32 +02:00
Aminda Suomalainen ebc01c16eb
{etc,var/lib/}iwd/: read manual, adjust accordingly 2023-01-27 10:51:51 +02:00
Aminda Suomalainen d2dc35b2d1
etc/iwd/main.conf: add egrep to the check/refresh command 2023-01-22 21:06:46 +02:00
Aminda Suomalainen 86b2bbabcb
etc/iwd/main.conf: fix comment typos, remove unnecessary section 
Channel ranking on Lumina was unrelated to 5 GHz not getting used.
 2023-01-22 21:02:15 +02:00
Aminda Suomalainen a92c1444c7
etc/iwd/main.conf: mention iw dev wlan0 scan 2023-01-22 17:43:47 +02:00
Aminda Suomalainen da914331ea
etc/iwd/main.conf: update the comment on how I perceive Country to work 2023-01-22 17:13:54 +02:00
Aminda Suomalainen 825f2745de
etc/iwd/main.conf: request regdom/Country FI 2023-01-22 08:11:03 +02:00
Aminda Suomalainen 53dcbb1d28
etc/iwd: attempt to prefer 5&6 GHz over 2.4 GHz 2023-01-21 18:32:44 +02:00
Aminda Suomalainen edadd1f453
etc/iwd/main.conf: initial commit 2023-01-06 14:50:14 +02:00
Aminda Suomalainen 3aa962024e
etc/NetworkManager/conf.d/iwd.conf: add wifi.iwd.autoconnect=true 
This seems to affect nothing though
 2023-01-06 14:02:55 +02:00
Aminda Suomalainen caa0d5e185
etc/ssh/ssh_config: add VisualHostKey yes 2022-12-19 19:42:10 +02:00
Aminda Suomalainen c9251b5acd
chrony/conf.d: add require-nts.conf 
Resolves: #148
 2022-12-06 14:47:45 +02:00
Aminda Suomalainen 6cf6426df6
etc/chrony/sources.d/dna-moi: turn to pool of 3 2022-12-05 13:21:52 +02:00
Aminda Suomalainen 28068278c4
chrony/sources.d/finland.sources: add mikes time{1,2,3} 2022-12-05 12:49:23 +02:00
Aminda Suomalainen 77dfbf59af
etc/dnf/dnf.conf: add a commented cachedir for zaldaryn 2022-11-30 17:56:17 +02:00