929 Commits

Author	SHA1	Message	Date
Aminda Suomalainen	4ff3705df0	firefox: force install peertube companion as a stronger stance against youtube centralization	2024-02-22 19:55:17 +02:00
Aminda Suomalainen	6afb099d1c	chromium: don't enable the labs button ... It has nothing that interesting and is just distraction.	2024-02-21 09:52:00 +02:00
Aminda Suomalainen	c6304ca36a	chromium/doh-dns0: allow fallback to system dns	2024-02-21 09:51:20 +02:00
Aminda Suomalainen	04be9339d5	Chromium: restrict DuckDuckGo to itself and google.com	2024-02-20 14:59:56 +02:00
Aminda Suomalainen	4dbfd94d90	{chromium,firefox}: force install (& pin in Chromium) Snowflake too	2024-02-19 18:00:06 +02:00
Aminda Suomalainen	303f69a671	firefox: actually force_install tab suspender	2024-02-19 16:45:36 +02:00
Aminda Suomalainen	0f95863ea2	systemd/earlyoom.service.d: conflicts, never-fail & dynamicuser=false	2024-02-18 19:44:32 +02:00
Aminda Suomalainen	52b2dd1e69	Chromium policy README.md: linkify extensions	2024-02-17 18:25:37 +02:00
Aminda Suomalainen	11baf2e142	Chromium README.md: add TODO/Inconsistencies	2024-02-16 19:47:58 +02:00
Aminda Suomalainen	a1056807bf	firefox: add peertubeify ... as indiewiki buddy kind of opened the door for it	2024-02-16 19:41:45 +02:00
Aminda Suomalainen	67ddd26f71	browser policies: include indiewiki buddy	2024-02-16 17:13:33 +02:00
Aminda Suomalainen	fe8ac1bbb7	unbound: remove blocklists, deprecated by Browser Policy	2024-02-15 20:47:34 +02:00
Aminda Suomalainen	398cf45bdf	add etc/systemd/oomd.conf.d/	2024-02-14 20:26:10 +02:00
Aminda Suomalainen	f4423b251f	etc: add firefox-esr for Debian	2024-02-14 11:25:44 +02:00
Aminda Suomalainen	22426e858c	firefox & chromium policy READMEs: links to upstream on top	2024-02-12 17:10:51 +02:00
Aminda Suomalainen	c55b2a6aed	{systemd-resolved,unbound}: utilize unfiltered dns0 since nordvpn is unlikely to filter either	2024-02-11 13:37:32 +02:00
Aminda Suomalainen	75d8833b03	firefox/policies.json: fix DDG Start Description & Method	2024-02-11 13:33:27 +02:00
Aminda Suomalainen	75b938f3ce	firefox policies: restore pocket, searchengines	2024-02-11 13:23:04 +02:00
Aminda Suomalainen	3b99fd30b7	Chromium policy README.md: note the PrivacyPass domains	2024-02-11 13:13:13 +02:00
Aminda Suomalainen	2b45c13960	Chromium policy README.md: add forgotten NoScript	2024-02-11 13:11:37 +02:00
Aminda Suomalainen	121aedd2ff	chromium: add noscript	2024-02-10 12:39:19 +02:00
Aminda Suomalainen	d37d9e8019	firefox policies: add noscript	2024-02-10 12:34:52 +02:00
Aminda Suomalainen	e4d223ab42	chromium: default unpin snowflake & silk	2024-02-08 10:54:05 +02:00
Aminda Suomalainen	da0ab06fdf	chromium: install DuckDuckGo by default	2024-02-08 10:46:30 +02:00
Aminda Suomalainen	7afdc0e046	firefox: install DuckDuckGo by default	2024-02-08 10:42:34 +02:00
Aminda Suomalainen	6bd2acac6b	firefox policies.json: clean up advertisements	2024-02-08 10:31:31 +02:00
Aminda Suomalainen	963f266dad	firefox: note that search engine policy is ESR-only	2024-02-08 10:15:26 +02:00
Aminda Suomalainen	fa4395def9	firefox policies.json: add new tab suspender	2024-02-08 10:06:57 +02:00
Aminda Suomalainen	3cd94522df	firefox policies.json: add extensions based on the Chromium one	2024-02-08 10:03:07 +02:00
Aminda Suomalainen	e71446363b	firefox policy README.md: add link to documentation	2024-02-08 09:37:06 +02:00
Aminda Suomalainen	4a849a8811	chromium: add Silk (Privacy Pass) & Snowflake	2024-02-07 17:07:54 +02:00
Aminda Suomalainen	e7f137f282	chromium: rename policies to be in line with my unbound/resolved naming	2024-02-07 10:51:12 +02:00
Aminda Suomalainen	c1af586c26	chromium README: quick explanations	2024-02-07 10:46:57 +02:00
Aminda Suomalainen	5eab48fcd5	chromium README: sort aminda-extensions.json	2024-02-07 10:38:15 +02:00
Aminda Suomalainen	0e26c96b39	chromium: add privacy-manager	2024-02-07 10:34:43 +02:00
Aminda Suomalainen	ce175c5645	etc/init-browser-policies.bash: ln -siv	2024-02-06 11:43:45 +02:00
Aminda Suomalainen	f4c796c5ed	etc: add quick script init-browser-policies.bash	2024-02-05 20:54:17 +02:00
Aminda Suomalainen	e672d04d46	rm etc/install ... Obsolete script that I don't ever remember using	2024-02-05 20:34:45 +02:00
Aminda Suomalainen	8c11a1afce	brave policies	2024-02-05 19:06:35 +02:00
Aminda Suomalainen	f0ee77fa05	add symlinks and README for Vivaldi policies as well	2024-02-05 18:58:50 +02:00
Aminda Suomalainen	3c9a97ed2f	chromium/enable-ech-ocsp.json: additionally enable AdditionalDnsQueryTypesEnabled & BuiltInDnsClientEnabled	2024-02-04 10:29:41 +02:00
Aminda Suomalainen	902f011468	chromium: add multiple mutually incompatible policy files	2024-02-04 10:21:10 +02:00
Aminda Suomalainen	13a8956758	{resolved,unbound}/nordvpn: add dns0 in case it helps with automatic connection issues	2024-02-02 08:51:52 +02:00
Aminda Suomalainen	8e1f947591	etc/opt: edge is chromium	2024-02-01 19:58:11 +02:00
Aminda Suomalainen	82014c0c0c	etc/firefox/policies: add README.md	2024-02-01 19:48:27 +02:00
Aminda Suomalainen	738ddcbfaf	firefox policies: add EnableTrackingProtection	2024-02-01 19:43:03 +02:00
Aminda Suomalainen	f0fe1a93b2	firefox policies: add DoH	2024-02-01 19:36:26 +02:00
Aminda Suomalainen	2c67c85786	rm etc/librewolf: it's not read and overrides LibreWolf customizations	2024-02-01 19:07:40 +02:00
Aminda Suomalainen	f37ec89f3f	etc/firefox/policies/policies.json: initial commit (just PrivacyBadger and LibreAwoo symlink so far)	2024-02-01 18:50:13 +02:00
Aminda Suomalainen	b53f8f6f52	chroium policy: default_unpin fedora user agent	2024-01-31 18:49:16 +02:00
Aminda Suomalainen	e1eae5dd48	chromium policies: throw in Dark Reader and Bitwarden	2024-01-31 14:28:14 +02:00
Aminda Suomalainen	7cb754def8	chrome policies: force_enable HttpsOnlyMode	2024-01-31 14:12:21 +02:00
Aminda Suomalainen	23bcc0e908	test managed chrome profilies	2024-01-31 13:43:10 +02:00
Aminda Suomalainen	bc39daa2ed	unbound/insecure-domains: add norwegianwifi.com ... while it's unlikely for me to run unbound on flight	2024-01-27 13:09:14 +02:00
Aminda Suomalainen	57ac0a8c7a	systemd: add nordvpnd.service.d	2024-01-27 10:20:55 +02:00
Aminda Suomalainen	7c9aaef375	systemd/service.d: add iwd.conf & network-online.conf	2024-01-27 10:19:08 +02:00
Aminda Suomalainen	58bc1dd726	systemd-networkd/wlan: comments for when iwd doesn't manage network	2024-01-27 10:18:18 +02:00
Aminda Suomalainen	e9b77cbc05	etc/iwd/main.conf: disable network configuration	2024-01-27 10:15:54 +02:00
Aminda Suomalainen	73604ae80f	systmed-timesyncd: add {google,facebook}.conf commented	2024-01-26 10:47:18 +02:00
Aminda Suomalainen	cc76eb7d5c	timesyncd.conf.d/finland: add ntp.miuku.net ... It would have NTS and this is hoping for systemd-timesyncd to support it one day	2024-01-26 10:44:55 +02:00
Aminda Suomalainen	e3381049b5	systemd-timesyncd/hetzner: replace with individual servers	2024-01-26 10:43:07 +02:00
Aminda Suomalainen	3b3f1c5193	chrony/ntppool.sources: add zone links to comments	2024-01-25 09:40:34 +02:00
Aminda Suomalainen	e2e130ea5d	chrony/sources.d/hetzner.sources: replace pool with individual servers	2024-01-24 20:32:23 +02:00
Aminda Suomalainen	ff1bc7b3ba	nts-servers.sources: no preferring non-ISP servers	2024-01-24 20:00:22 +02:00
Aminda Suomalainen	e246d21038	chrony/sources: add the ntppool.sources although commented	2024-01-24 18:04:15 +02:00
Aminda Suomalainen	48976cacce	chrony/sources.d: prefer ISP and CF ... The ISP should be closest server to sync to and Cloudflare is anycast with potentially lower stratum than the other nts servers. 'nts' implies 'require' and 'trust' already and other servers get picked over lower stratum although higher distance.	2024-01-24 10:57:52 +02:00
Aminda Suomalainen	8a93a2a9ac	unbound: another accidental rewrite of nordvpn.conf, now with IPv6	2024-01-23 09:20:13 +02:00
Aminda Suomalainen	e5fb27a15e	nts-servers.sources: System76 is actually not an NTS pool	2024-01-22 12:56:20 +02:00
Aminda Suomalainen	9e0333908d	nts-servers.sources: bring the uncommented Finnish server closer to top	2024-01-22 12:53:53 +02:00
Aminda Suomalainen	9c90a36069	chrony/nts-servers.sources: update System76 entries, increase their line numbers	2024-01-22 12:52:44 +02:00
Aminda Suomalainen	7a2b36864b	systemd-resolved/nordvpn.conf: add what appears to be their IPv6	2024-01-20 12:41:21 +02:00
Aminda Suomalainen	62fc911835	systemd-resolved: accidentally rewrit nordvpn.conf ... Now accounting for precense of unbound as a maybe fallback resolver	2024-01-20 12:35:23 +02:00
Aminda Suomalainen	7ec7937d2f	chrony: add ntp.miuku.net	2024-01-17 13:16:37 +02:00
Aminda Suomalainen	ddbd1acca0	ssh: disable RSA host key	2024-01-12 13:50:49 +02:00
Aminda Suomalainen	53c78384e0	etc/apt/sources.list: rm ubuntu* ... Seems pretty outdated and I cannot see the purpose.	2024-01-07 12:33:53 +02:00
Aminda Suomalainen	2b4487fccb	etc/sources.list.d: add untested nordvpn.list for the only Debian around	2024-01-07 12:29:49 +02:00
Aminda Suomalainen	7748d64ad7	systemd: deduplicate qbittorrent, add qbittorrent-nox@.service overrides	2024-01-06 12:34:44 +02:00
Aminda Suomalainen	86575ddd37	etc/sudoers.d/lecture: rewrite comment including superuser & serverfault links	2024-01-05 13:17:22 +02:00
Aminda Suomalainen	0f5dceed49	etc/sudoers.d: add nordvpn	2024-01-05 12:56:06 +02:00
Aminda Suomalainen	39dffa8939	systemd service.d: move common explanations from never-fail.conf to README.md	2024-01-04 12:35:48 +02:00
Aminda Suomalainen	d99566d26f	systemd/service.d: add nordvpn.conf	2024-01-04 12:31:11 +02:00
Aminda Suomalainen	8a73d0fd63	unbound.conf.d: add nordvpn.conf	2024-01-04 12:28:38 +02:00
Aminda Suomalainen	aa97b82e31	systemd-resolved: add nordvpn.conf	2024-01-04 12:25:53 +02:00
Aminda Suomalainen	8771c98645	etc/yum.repos.d/brave-*: remove unknown option autorefresh	2024-01-04 07:45:11 +02:00
Aminda Suomalainen	09b64835f7	etc/yum.repos.d/nordvpn.repo: initial commit ... I don't want to use their curlbash and I am considering a Revolut plan that would include their standard plan as well	2024-01-03 16:54:59 +02:00
Aminda Suomalainen	bb60cbe8e6	yum/repos.d/librewolf-repo.repo: correct repo name	2024-01-03 16:53:38 +02:00
Aminda Suomalainen	e4c6ff7569	etc/sudoers.d: add lecture for always giving the first time lecture	2024-01-02 10:54:53 +02:00
Aminda Suomalainen	9a0895e412	unbound: merge dot-quad9-ecs.conf into dot-quad9.conf	2023-12-31 16:38:05 +02:00
Aminda Suomalainen	dba9d4c908	unbound/dot-dns0-*.conf: merge to dot-dns0.conf	2023-12-30 15:46:22 +02:00
Aminda Suomalainen	a6dd953817	etc/dracut.conf.d/10-asahi.conf: workaround F40 kernel update failures	2023-12-29 13:26:25 +02:00
Aminda Suomalainen	feef4cbba5	bluetooth.service.d: clarify comments on tested distros & ponder name	2023-12-28 21:30:26 +02:00
Aminda Suomalainen	be618810c5	bluetooth.service.d: drop fedora- from experimental.conf	2023-12-28 21:28:27 +02:00
Aminda Suomalainen	f31cb882a5	practically rewrite etc/resolv.conf	2023-12-26 10:51:30 +02:00
Aminda Suomalainen	9d69584103	Revert "systemd/service.d: add for-network-online.conf so the service is enabled for that" ... This reverts commit 0dc32a525a.	2023-12-25 21:26:10 +02:00
Aminda Suomalainen	fc91247cd1	Revert "yggdrasil.service.d: also allow yggdrasil to start before network-online" ... This reverts commit fbc82b81f4.	2023-12-25 21:25:44 +02:00
Aminda Suomalainen	68fc6be7b9	Revert "unbound.service.d: add the for-network-online.conf" ... This reverts commit 6ba99feb58.	2023-12-25 21:25:22 +02:00
Aminda Suomalainen	85dbc413f0	systemd/system: write tlp-masker.bash instead of having symlinks to /dev/null	2023-12-25 17:27:30 +02:00
Aminda Suomalainen	7d8fe8c1fa	systemd/system/README: attempt to fix formatting	2023-12-25 17:03:14 +02:00
Aminda Suomalainen	0327162daa	systemd-resolved: double dnssec	2023-12-25 15:48:23 +02:00
Aminda Suomalainen	f8f71d77a2	resolv.conf: add systemd-resolved default as a comment too	2023-12-25 15:40:41 +02:00