1009 Commits

Author	SHA1	Message	Date
Aminda Suomalainen	7a2b36864b	systemd-resolved/nordvpn.conf: add what appears to be their IPv6	2024-01-20 12:41:21 +02:00
Aminda Suomalainen	62fc911835	systemd-resolved: accidentally rewrit nordvpn.conf ... Now accounting for precense of unbound as a maybe fallback resolver	2024-01-20 12:35:23 +02:00
Aminda Suomalainen	7ec7937d2f	chrony: add ntp.miuku.net	2024-01-17 13:16:37 +02:00
Aminda Suomalainen	ddbd1acca0	ssh: disable RSA host key	2024-01-12 13:50:49 +02:00
Aminda Suomalainen	53c78384e0	etc/apt/sources.list: rm ubuntu* ... Seems pretty outdated and I cannot see the purpose.	2024-01-07 12:33:53 +02:00
Aminda Suomalainen	2b4487fccb	etc/sources.list.d: add untested nordvpn.list for the only Debian around	2024-01-07 12:29:49 +02:00
Aminda Suomalainen	7748d64ad7	systemd: deduplicate qbittorrent, add qbittorrent-nox@.service overrides	2024-01-06 12:34:44 +02:00
Aminda Suomalainen	86575ddd37	etc/sudoers.d/lecture: rewrite comment including superuser & serverfault links	2024-01-05 13:17:22 +02:00
Aminda Suomalainen	0f5dceed49	etc/sudoers.d: add nordvpn	2024-01-05 12:56:06 +02:00
Aminda Suomalainen	39dffa8939	systemd service.d: move common explanations from never-fail.conf to README.md	2024-01-04 12:35:48 +02:00
Aminda Suomalainen	d99566d26f	systemd/service.d: add nordvpn.conf	2024-01-04 12:31:11 +02:00
Aminda Suomalainen	8a73d0fd63	unbound.conf.d: add nordvpn.conf	2024-01-04 12:28:38 +02:00
Aminda Suomalainen	aa97b82e31	systemd-resolved: add nordvpn.conf	2024-01-04 12:25:53 +02:00
Aminda Suomalainen	8771c98645	etc/yum.repos.d/brave-*: remove unknown option autorefresh	2024-01-04 07:45:11 +02:00
Aminda Suomalainen	09b64835f7	etc/yum.repos.d/nordvpn.repo: initial commit ... I don't want to use their curlbash and I am considering a Revolut plan that would include their standard plan as well	2024-01-03 16:54:59 +02:00
Aminda Suomalainen	bb60cbe8e6	yum/repos.d/librewolf-repo.repo: correct repo name	2024-01-03 16:53:38 +02:00
Aminda Suomalainen	e4c6ff7569	etc/sudoers.d: add lecture for always giving the first time lecture	2024-01-02 10:54:53 +02:00
Aminda Suomalainen	9a0895e412	unbound: merge dot-quad9-ecs.conf into dot-quad9.conf	2023-12-31 16:38:05 +02:00
Aminda Suomalainen	dba9d4c908	unbound/dot-dns0-*.conf: merge to dot-dns0.conf	2023-12-30 15:46:22 +02:00
Aminda Suomalainen	a6dd953817	etc/dracut.conf.d/10-asahi.conf: workaround F40 kernel update failures	2023-12-29 13:26:25 +02:00
Aminda Suomalainen	feef4cbba5	bluetooth.service.d: clarify comments on tested distros & ponder name	2023-12-28 21:30:26 +02:00
Aminda Suomalainen	be618810c5	bluetooth.service.d: drop fedora- from experimental.conf	2023-12-28 21:28:27 +02:00
Aminda Suomalainen	f31cb882a5	practically rewrite etc/resolv.conf	2023-12-26 10:51:30 +02:00
Aminda Suomalainen	9d69584103	Revert "systemd/service.d: add for-network-online.conf so the service is enabled for that" ... This reverts commit 0dc32a525a.	2023-12-25 21:26:10 +02:00
Aminda Suomalainen	fc91247cd1	Revert "yggdrasil.service.d: also allow yggdrasil to start before network-online" ... This reverts commit fbc82b81f4.	2023-12-25 21:25:44 +02:00
Aminda Suomalainen	68fc6be7b9	Revert "unbound.service.d: add the for-network-online.conf" ... This reverts commit 6ba99feb58.	2023-12-25 21:25:22 +02:00
Aminda Suomalainen	85dbc413f0	systemd/system: write tlp-masker.bash instead of having symlinks to /dev/null	2023-12-25 17:27:30 +02:00
Aminda Suomalainen	7d8fe8c1fa	systemd/system/README: attempt to fix formatting	2023-12-25 17:03:14 +02:00
Aminda Suomalainen	0327162daa	systemd-resolved: double dnssec	2023-12-25 15:48:23 +02:00
Aminda Suomalainen	f8f71d77a2	resolv.conf: add systemd-resolved default as a comment too	2023-12-25 15:40:41 +02:00
Aminda Suomalainen	4286b4a22f	systemd: add start-unbound.service	2023-12-25 15:39:35 +02:00
Aminda Suomalainen	fbc82b81f4	yggdrasil.service.d: also allow yggdrasil to start before network-online	2023-12-25 12:41:46 +02:00
Aminda Suomalainen	214966ae54	unbound.service.d: rm WRONG fedora-network-pre.conf	2023-12-25 12:40:40 +02:00
Aminda Suomalainen	6ba99feb58	unbound.service.d: add the for-network-online.conf	2023-12-25 12:39:58 +02:00
Aminda Suomalainen	0dc32a525a	systemd/service.d: add for-network-online.conf so the service is enabled for that	2023-12-25 12:38:05 +02:00
Aminda Suomalainen	5f6e07f353	etc/…/dnf.conf: note RPMCoW plugin in comment on delta RPMs	2023-12-18 09:00:49 +02:00
Aminda Suomalainen	3f0557b1d0	move & update pipewire-media-session notes to wireplumber	2023-12-17 21:56:45 +02:00
Aminda Suomalainen	2222ebd249	wireplumber: note package pipewire-codec-aptx	2023-12-17 21:48:57 +02:00
Aminda Suomalainen	e9fe061b2c	etc/sudoers.d: add insults	2023-12-15 13:04:08 +02:00
Aminda Suomalainen	dc1fa5e65d	wireplumber/61-more-codecs.lua: note that all disables HQ playback	2023-11-30 10:43:01 +02:00
Aminda Suomalainen	b770e2f51d	etc/wireplumber: don't artificially restrict codecs	2023-11-30 10:38:06 +02:00
Aminda Suomalainen	90556db965	bluetooth.service.d: add steamos-experimental.conf	2023-11-29 09:54:28 +02:00
Aminda Suomalainen	88bfa88985	experimental wireplumber configuration	2023-11-29 09:44:35 +02:00
Aminda Suomalainen	9853513f01	dnf: disable DeltaRPMs	2023-11-27 09:12:45 +02:00
Aminda Suomalainen	91428c51af	systemd-resolved: git rm dot-nextdns.conf	2023-11-26 16:23:31 +02:00
Aminda Suomalainen	1abfd94f01	systemd-resolved/dot-dns0: merge lines	2023-11-26 16:23:12 +02:00
Aminda Suomalainen	b583b8a6d4	systemd-resolved/*.conf: add appliedprivacy DoTo443 as a comment	2023-11-26 16:19:55 +02:00
Aminda Suomalainen	dee168e287	systemd-resolved: merge provider configs	2023-11-26 16:18:15 +02:00
Aminda Suomalainen	fa3fc72afb	systemd-resolved: cleanup configs I don't recommend	2023-11-26 16:12:38 +02:00
Aminda Suomalainen	16ddfd92e8	chrony/sources.d: rethink yggdrasil.sources	2023-11-22 11:28:21 +02:00
Aminda Suomalainen	865e816384	chrony/finland.sources: enable xleave for the known Chrony	2023-11-22 10:17:32 +02:00
Aminda Suomalainen	88f443911f	chrony/yggdrasil.sources: comment kincarron, unlikely to return in near future	2023-11-22 08:38:40 +02:00
Aminda Suomalainen	b9bc665e07	chrony/nts-servers.sources: comment sources not in Finland	2023-11-22 08:38:12 +02:00
Aminda Suomalainen	6918ac27d4	yum.repos.d: add mullvad.repo	2023-11-20 21:27:48 +02:00
Aminda Suomalainen	da99ce785f	chrony/conf.d: add .FIXME suffix to ca-certificates.conf, clarifying comments	2023-11-16 20:19:39 +02:00
Aminda Suomalainen	428802a4fd	unbound: rm mullvad configuration ... It's wrong and I am not currently using it	2023-11-12 12:51:54 +02:00
Aminda Suomalainen	e825c1dac3	systemd-resolved: dot-mullvad.conf: update domains, add commented other server options	2023-11-12 12:51:07 +02:00
Aminda Suomalainen	60b3c620fb	systemd-resolved: rm dot-mullvad-adblock.conf	2023-11-12 12:46:35 +02:00
Aminda Suomalainen	f64b94894c	resolv.tsv: update Mullvad addresses	2023-11-12 12:45:43 +02:00
Aminda Suomalainen	4f2f41762c	etc/yum.repos.d: note LibreWolf upstream documentation	2023-11-11 18:27:55 +02:00
Aminda Suomalainen	35b90b6d06	resolv.tsv: update/add/fix Mullvad offering	2023-11-10 15:14:42 +02:00
Aminda Suomalainen	d2c6f99401	ssh_config: remove deprecated option useroaming ... Even Debian Bookworm mentions it as deprecated in ssh -vvv and I seriously doubt I have such old SSH running anywhere	2023-10-28 22:27:06 +03:00
Aminda Suomalainen	4f87dd6221	samba/playstation2.conf: specify hosts allow	2023-10-28 20:35:08 +03:00
Aminda Suomalainen	ad59c45eb3	yum.repos.d/README.md: update Yggdrasil address	2023-10-28 18:12:51 +03:00
Aminda Suomalainen	b6ecd1b173	systemd-resolved: keep DNSSEC enabled	2023-10-21 11:27:07 +03:00
Aminda Suomalainen	7b4d791d07	flatpak-update.timer: increase frequency	2023-10-19 10:43:55 +03:00
Aminda Suomalainen	94c23e2f7d	etc/nginx: fix line endings and indentation ... UNTESTED! TODO WIP etc.?	2023-10-19 09:27:55 +03:00
Aminda Suomalainen	90edac262a	resolved.conf.d: add dot-dns0-appliedprivacy.conf in style of quad9-ecs-appliedprivacy	2023-10-14 19:18:45 +03:00
Aminda Suomalainen	79210446ed	local/share/applications: add SteamOS-kscreenlocker.desktop symlink	2023-10-09 12:54:34 +03:00
Aminda Suomalainen	5419ff1bc7	move submodule to submodules/	2023-10-09 12:50:52 +03:00
Aminda Suomalainen	b8f1aa69dd	unbound/00-insecure-domains.conf: add router.asus.com	2023-10-07 13:10:07 +03:00
Aminda Suomalainen	1eeef2f511	resolved: add dot-quad9-ecs-appliedprivacy.conf for Steam Deck purposes	2023-10-01 19:06:46 +03:00
Aminda Suomalainen	5297140958	systemd/limnoria.service: place limit on memory, commented cpuquote	2023-10-01 10:47:06 +03:00
Aminda Suomalainen	024fd40e87	git rm etc/hosts.append ... https://gitea.blesmrt.net/mikaela/gist/src/branch/master/DNS/blocklist.txt	2023-09-30 17:39:47 +03:00
Aminda Suomalainen	d7acebbe45	chrony/sources.d/yggdrasil: remove Teknologia Avoimeksi	2023-09-30 17:38:45 +03:00
Aminda Suomalainen	10a841acfe	systemd/journald.conf.d: add 00-journal-size.conf	2023-09-29 15:06:41 +03:00
Aminda Suomalainen	c32910df57	systemd/syncplay-server.service: use venv ... Resolves: #145 Thanks again @EchedeyLR	2023-09-29 10:57:06 +03:00
Aminda Suomalainen	a4b7bdb51a	systemd/limnoria: use venv & update Ergo's name ... Thanks @EchedeyLR (ref: mikaela/shell-things#145)	2023-09-29 10:39:44 +03:00
Aminda Suomalainen	2c47aaae48	sshd_config.d/README.md: fix formatting, note priority	2023-09-28 14:35:21 +03:00
Aminda Suomalainen	c0fcc82c4d	sshd_config: add 00- prefix to basic-security.conf as apparently first wins in ssh	2023-09-28 14:34:13 +03:00
Aminda Suomalainen	f20e23df42	sshd_config.d: maybe keyed root login is fine in special case of SteamOS on Steam Deck?	2023-09-27 18:02:50 +03:00
Aminda Suomalainen	71a8913d37	update submodule etc/chrony/sources.d/jauderho-nts-servers	2023-09-27 12:21:32 +03:00
Aminda Suomalainen	dfcbc7e971	systemd/timesyncd.conf.d: sync sources from Chrony ... This is for SteamOS, although without Yggdrasil (that I am not hacking in yet) and NTS which systemd-timesyncd doesn't do to my knowledge	2023-09-27 12:16:55 +03:00
Aminda Suomalainen	9429b48aaa	etc/iwd/main.conf: throw in comments on defaults	2023-09-26 17:33:12 +03:00
Aminda Suomalainen	ce7ab5ea40	grub/forcefsck: add fsck.repair=yes	2023-09-24 17:26:40 +03:00
Aminda Suomalainen	49d6dfc766	update submodule etc/chrony/sources.d/jauderho-nts-servers	2023-09-17 20:29:37 +03:00
Aminda Suomalainen	24eb3890c2	systemd-resolved: prefer IPv6 over IPv4	2023-09-10 11:16:57 +03:00
Aminda Suomalainen	1e3a7f8fa3	systemd-resolved/dns-over-tls.conf: drop appliedprivacy#443 to the bottom of the list ... Apparently systemd-resolved wants to go in strict order and thus it's always sending my queries to distant Austria instead of neighbouring regions	2023-09-10 11:10:39 +03:00
Aminda Suomalainen	e2829267d7	systemd: add debugging & symlinks for networkd, resolved, never-fail networkd	2023-09-10 11:07:11 +03:00
Aminda Suomalainen	c7b5330dfb	systemd/resolved/dot: add missing bracket, remove extra ones ... Apparently IPv6 must only be surrounded by brackets, otherwise it's invalid syntax	2023-09-10 09:52:59 +03:00
Aminda Suomalainen	1d8e457f97	systemd-resolved: add dns-over-tls.conf mimicing unbound's equivalent	2023-09-10 09:31:35 +03:00
Aminda Suomalainen	4d68dd7e7f	systemd: add journald.conf.d/.gitignore as a placeholder	2023-08-24 16:12:43 +03:00
Aminda Suomalainen	27dacbf5f8	systemd-networkd: add commented RequiredFamilyForOnline= under [Link]	2023-08-23 14:40:18 +03:00
Aminda Suomalainen	2e1a5cbfe1	chrony: add ca-certificates.conf to explicitly specify their location	2023-08-20 11:13:51 +03:00
Aminda Suomalainen	5120a7aff8	update submodule jauderho-nts-servers	2023-08-20 11:13:28 +03:00
Aminda Suomalainen	78bb0cdcc8	etc/resolv.tsv: add Applied Privacy	2023-08-05 12:36:20 +03:00
Aminda Suomalainen	9fdeb56762	unbound.service.d: add fedora-network-pre.conf	2023-08-04 13:09:58 +03:00
Aminda Suomalainen	34b4ffb8ac	unbound/dns-over-tls.conf: cut to 443 and private ECS capable non-filtering servers	2023-08-04 12:45:03 +03:00
Aminda Suomalainen	d024ac1234	Revert "rm etc/unbound/unbound.conf.d/dns-over-tls.conf" ... This reverts commit e9998f4079.	2023-08-04 12:27:41 +03:00
Aminda Suomalainen	db6bdd6222	unbound.service.d: override to require dnsproxy for starting	2023-08-03 12:43:10 +03:00
Aminda Suomalainen	6fdfad9e93	dnsproxy.service: return to network-pre.target	2023-08-03 12:41:58 +03:00
Aminda Suomalainen	5acec4c00e	dnsproxy.service: second-guess to start after network-noline.target and before unbound.service?	2023-08-03 12:15:24 +03:00
Aminda Suomalainen	809d723293	systemd: fix symlinks to never-fail.conf ... Technically they would still work through the yggdrasil symlink, but I don't like it	2023-08-03 11:54:01 +03:00
Aminda Suomalainen	bbd7a02b60	dnsproxy.service: start before network management and hope it handles dynamic network conditions	2023-08-03 11:50:52 +03:00
Aminda Suomalainen	918bdc2a97	systemd: move never-fail to more appropiate location	2023-08-03 11:50:12 +03:00
Aminda Suomalainen	f3c9d1006b	update submodule etc/chrony/sources.d/jauderho-nts-servers	2023-07-29 21:31:46 +03:00
Aminda Suomalainen	2738d239ce	etc/yum.repos.d: add librewolf-repo.repo	2023-07-13 12:24:14 +03:00
Aminda Suomalainen	eab5c3b07e	systemd/network: add number prefixes as per man systemd.network	2023-07-05 10:57:03 +03:00
Aminda Suomalainen	5749b2c0fa	update submodule etc/chrony/sources.d/jauderho-nts-servers	2023-07-04 11:46:33 +03:00
Aminda Suomalainen	a13a0dd86b	systemd-networkd: match naming with types	2023-07-04 11:45:29 +03:00
Aminda Suomalainen	8cc9353374	systemd-networkd: configure based on type rather than name, add a comment on MACAddress matching ... Resolves: warnings on potentially unpredictable interface names.	2023-07-04 11:24:29 +03:00
Aminda Suomalainen	d3c613bc41	etc/iwd/main.conf: add spacing, comment AddressRandomization=disabled for Realtek	2023-06-25 17:58:41 +03:00
Aminda Suomalainen	30253761b3	systemd/network: enable IPv6 Privacy Extensions and link-local stable-privacy	2023-06-25 14:13:00 +03:00
Aminda Suomalainen	cbdfc0f46d	systemd-networkd: unmanage wlan0	2023-06-25 10:36:29 +03:00
Aminda Suomalainen	6159876f05	unbound/blocklist.conf: add {reddit,twitter}.com to support the protest	2023-06-11 18:53:16 +03:00
Aminda Suomalainen	f61d8c3edb	systemd/dnsproxy.service: use the same DNS0 for bootstrap as DoH	2023-06-11 08:56:04 +03:00
Aminda Suomalainen	c54a8c0a10	update submodule etc/chrony/sources.d/jauderho-nts-servers	2023-06-10 08:20:22 +03:00
Aminda Suomalainen	7ac9b9a7cc	etc/unbound/blocklist: remove duplicates, add graph.facebook.com ... `local-zone: "google-analytics.com." always_refuse` implies subdomains	2023-06-06 12:09:48 +03:00
Aminda Suomalainen	5d00ccaf6b	unbound: add blocklist-tld.conf mainly for zip & mov	2023-05-28 10:36:52 +03:00
Aminda Suomalainen	1b1514f993	systemd: add masks required by tlp as a note to self	2023-05-25 07:48:22 +03:00
Aminda Suomalainen	8fb52ec8f2	add shfmt	2023-05-18 11:58:51 +03:00
Aminda Suomalainen	687a6433bb	add & run prettier-plugin-nginx	2023-05-18 11:35:13 +03:00
Aminda Suomalainen	e0dc070cd1	etc/nginx: append .nginx to file names ... in preparation of prettier-nginx	2023-05-18 11:17:24 +03:00
Aminda Suomalainen	ca2956b678	unbound/blocklist: note encrypted client hello	2023-05-13 17:17:20 +03:00
Aminda Suomalainen	603ac4a011	unbound/blocklist.conf: remove Mozilla Telemetry	2023-05-13 17:16:17 +03:00
Aminda Suomalainen	fdeab81c2b	unbound/blocklist.conf: add matrix.to as dared by !KMbEUhVQHLwZHmwzKX:matrix.org	2023-05-13 17:14:45 +03:00
Aminda Suomalainen	19f3a0b720	update submodule jauderho-nts-servers	2023-05-12 09:30:28 +03:00
Aminda Suomalainen	58ead9302c	etc/apt/sources.list: keep adding non-free-firmwares ... Fixes: 94d26e811a Resolves: #159	2023-05-12 09:29:32 +03:00
Aminda Suomalainen	42f1c58fa0	etc/yum.repos.d: add vivaldi	2023-05-08 20:54:22 +03:00
Aminda Suomalainen	442a4fb89a	update submodules	2023-05-04 15:57:12 +03:00
Aminda Suomalainen	94d26e811a	etc/apt/sources.list: enable non-free-firmware for Debians ... Resolves: #159	2023-04-10 17:07:48 +03:00
Aminda Suomalainen	8309e9254e	ssh_config: StrictHostKeyChecking accept-new	2023-04-03 11:03:48 +03:00
Aminda Suomalainen	0a5e526cc5	systemd-networkd/eth0: don't require being up ... Resolves: #157	2023-03-31 13:33:27 +03:00
Aminda Suomalainen	5f6bddfe8a	systemd: add NetworkManager-wait-online.service & systemd-networkd-wait-online.service to refresh my memory	2023-03-25 18:32:23 +02:00
Aminda Suomalainen	bae5e38347	etc/samba/playstation2.conf: apparently both log level & syslog lines are needed	2023-03-25 12:12:57 +02:00
Aminda Suomalainen	3e9331c84f	etc/samba/playstation2.conf: move deadtime & keepalive to [global]	2023-03-25 12:05:43 +02:00
Aminda Suomalainen	4757f05060	etc/samba/playstation2.conf: fix logging?	2023-03-25 12:03:54 +02:00
Aminda Suomalainen	f43106f002	etc/samba/playstation2.conf: enable logging	2023-03-25 11:55:54 +02:00
Aminda Suomalainen	e491a114a1	etc/samba/playstation2.conf: disable deadtime, shorten keepalive	2023-03-25 11:46:33 +02:00
Aminda Suomalainen	7ea097c6fe	etc/resolv.conf: search for . ... Resolves: #156	2023-03-24 10:37:52 +02:00
Aminda Suomalainen	6333883dc3	etc/samba/playstation2.conf: document issues coming up with real hardware	2023-03-14 16:57:14 +02:00
Aminda Suomalainen	30684318aa	etc/resolv.tsv: test ECS support of some empty fields	2023-03-11 15:54:04 +02:00
Aminda Suomalainen	33301bb8e5	etc/chrony/sources.d: update submodule	2023-03-11 08:18:48 +02:00
Aminda Suomalainen	cc0e5514ab	etc/chrony/sources.d: update submodule, add license information, add German servers	2023-03-10 09:49:35 +02:00
Aminda Suomalainen	4f7d891f68	jauderho-nts-servers: update submodule	2023-03-09 11:45:58 +02:00
Aminda Suomalainen	1b113e0c3e	etc/systemd/network: add commented DHCP=yes	2023-03-07 15:02:13 +02:00
Aminda Suomalainen	514ed85374	etc/systemd/network: update samples and comments to reflect my current views	2023-03-07 14:46:28 +02:00
Aminda Suomalainen	d51d8e810a	update submodule, symlink	2023-03-07 12:08:53 +02:00
Aminda Suomalainen	a80342b82b	etc/samba/playstation2.conf: rename share to PS2SMB, update comments	2023-03-03 17:14:19 +02:00
Aminda Suomalainen	e265916ba1	etc/samba/playstation2.conf: initial commit	2023-03-03 09:54:02 +02:00
Aminda Suomalainen	e9998f4079	rm etc/unbound/unbound.conf.d/dns-over-tls.conf ... I think the file is inherently flawed due to different types of filtering/non-filtering resolvers, different locations, unknown ECS policies etc. Importantly I am not actively looking at this and just came across old version running in production	2023-02-26 09:15:19 +02:00
Aminda Suomalainen	5350804d41	etc/resolv.tsv: remove /fi/ from DNS0.eu ECS links	2023-02-25 14:33:52 +02:00
Aminda Suomalainen	e839c83f53	etc/resolv.tsv: add EDNS Client-Subnet support & sources	2023-02-25 14:12:39 +02:00
Aminda Suomalainen	e520e78c1a	etc/resolv.tsv: add/update AdGuard	2023-02-25 13:58:47 +02:00
Aminda Suomalainen	06f6f2f2a6	etc/resolv.conf: uncomment trust-ad ... less dd to press when actually applying this	2023-02-24 08:43:41 +02:00
Aminda Suomalainen	faf242d8ca	etc/yum.repos.d: add brave beta & nightly ... Yes, the upstream instructions say nightly and beta have the same key	2023-02-23 21:28:52 +02:00
Aminda Suomalainen	0cfb5859ad	dnsproxy: remove --user that doesn't apply anymore	2023-02-23 14:31:48 +02:00
Aminda Suomalainen	4761b94331	dnsproxy.service: convert to system service	2023-02-23 14:25:12 +02:00
Aminda Suomalainen	9bdc67dd29	unbound & systmed-resolved: add DNS0 open ... Ref: #153	2023-02-23 10:11:03 +02:00
Aminda Suomalainen	cc5e7b7225	unbound: add DNS0 & DNS0 zero DoT config ... Resolves: #153	2023-02-22 10:58:04 +02:00
Aminda Suomalainen	a2c3d9248d	fix ends of lines	2023-02-21 20:11:35 +02:00
Aminda Suomalainen	b39b5db0d4	run prettier on markdown again?	2023-02-21 19:33:31 +02:00
Aminda Suomalainen	2e6a03d402	sastisfy editorconfig check	2023-02-21 19:08:54 +02:00
Aminda Suomalainen	19994e3286	run prettier	2023-02-21 17:54:39 +02:00
Aminda Suomalainen	fcb57144c9	chmod -x *.desktop && add .pre-commit-config.yaml	2023-02-21 16:16:33 +02:00
Aminda Suomalainen	1706269308	etc/resolv.tsv: add dns0 open ... Resolves: #154	2023-02-21 12:57:55 +02:00
Aminda Suomalainen	1385bf6105	ssh_config: comment ProxyCommand ... I just keep disabling it anyway so it's more harm than good	2023-02-21 10:11:34 +02:00
Aminda Suomalainen	4a20f75d3c	etc/systemd/resolved.conf.d: add DNS0 DoT configs ... Their website already had the correct syntax for the entries Ref: #153	2023-02-20 11:49:31 +02:00
Aminda Suomalainen	8e3244f785	etc/resolv.tsv: add mobileconfig links ... This is just the official ones I found, I could link to encrypted-dns.party, but that is a task for later, I can find it without this file Resolves: #152	2023-02-20 11:43:32 +02:00
Aminda Suomalainen	5ee54038de	etc/ssh/ssh_config: retab	2023-02-17 17:29:45 +02:00
Aminda Suomalainen	ff524fec97	etc/yum.repos.d: add fedora-crystal.repo	2023-02-13 17:47:23 +02:00
Aminda Suomalainen	1b243c279d	resolv.tsv: fix formatting	2023-02-13 11:52:43 +02:00
Aminda Suomalainen	4257bf5341	etc: resolv.csv -> resolv.tsv	2023-02-13 11:44:36 +02:00
Aminda Suomalainen	8ab861d791	etc/iwd/main.conf: uncomment "AddressRandomizationRange=nic" and update comment	2023-02-10 22:04:12 +02:00
Aminda Suomalainen	421087e536	etc/resolv.csv: add DNS0.eu ... Resolves: #150	2023-02-09 11:56:09 +02:00
Aminda Suomalainen	47eaebeece	etc/chrony/sources.d: submodule the curated NTS server list gist for future discoverability ... This repository is random anyway and has files that don't belong such as resolv.csv	2023-02-06 10:43:46 +02:00
Aminda Suomalainen	36c2688cec	etc/systemd/system/unbound.service.d/never-fail.conf: unbound isn't allowed to fail either	2023-02-03 10:59:31 +02:00
Aminda Suomalainen	3439b284a7	etc/iwd/main.conf: note that AddressRandomizationRange=nic has 254 possible addresses	2023-01-28 18:37:43 +02:00
Aminda Suomalainen	6b2cb6575b	etc/iwd/main.conf: add a comment(ed/) on AddressRandomizationRange=nic	2023-01-27 13:21:32 +02:00
Aminda Suomalainen	ebc01c16eb	{etc,var/lib/}iwd/: read manual, adjust accordingly	2023-01-27 10:51:51 +02:00
Aminda Suomalainen	d2dc35b2d1	etc/iwd/main.conf: add egrep to the check/refresh command	2023-01-22 21:06:46 +02:00
Aminda Suomalainen	86b2bbabcb	etc/iwd/main.conf: fix comment typos, remove unnecessary section ... Channel ranking on Lumina was unrelated to 5 GHz not getting used.	2023-01-22 21:02:15 +02:00
Aminda Suomalainen	a92c1444c7	etc/iwd/main.conf: mention iw dev wlan0 scan	2023-01-22 17:43:47 +02:00
Aminda Suomalainen	da914331ea	etc/iwd/main.conf: update the comment on how I perceive Country to work	2023-01-22 17:13:54 +02:00
Aminda Suomalainen	825f2745de	etc/iwd/main.conf: request regdom/Country FI	2023-01-22 08:11:03 +02:00
Aminda Suomalainen	53dcbb1d28	etc/iwd: attempt to prefer 5&6 GHz over 2.4 GHz	2023-01-21 18:32:44 +02:00
Aminda Suomalainen	edadd1f453	etc/iwd/main.conf: initial commit	2023-01-06 14:50:14 +02:00
Aminda Suomalainen	3aa962024e	etc/NetworkManager/conf.d/iwd.conf: add wifi.iwd.autoconnect=true ... This seems to affect nothing though	2023-01-06 14:02:55 +02:00
Aminda Suomalainen	caa0d5e185	etc/ssh/ssh_config: add VisualHostKey yes	2022-12-19 19:42:10 +02:00
Aminda Suomalainen	c9251b5acd	chrony/conf.d: add require-nts.conf ... Resolves: #148	2022-12-06 14:47:45 +02:00
Aminda Suomalainen	6cf6426df6	etc/chrony/sources.d/dna-moi: turn to pool of 3	2022-12-05 13:21:52 +02:00
Aminda Suomalainen	28068278c4	chrony/sources.d/finland.sources: add mikes time{1,2,3}	2022-12-05 12:49:23 +02:00
Aminda Suomalainen	77dfbf59af	etc/dnf/dnf.conf: add a commented cachedir for zaldaryn	2022-11-30 17:56:17 +02:00
Aminda Suomalainen	0619d60340	etc/chrony/README.md: note GH cadusilva's check command ... Ref: #148	2022-11-26 12:30:24 +02:00
Aminda Suomalainen	b94e62b884	chrony/sources.d/nts: add System76 Paris & time.nl ... Ref: #148	2022-11-26 12:28:01 +02:00
Aminda Suomalainen	c484b20cb3	chrony/sources.d/finland: remove snopyta ... part of the NTP pool anyway	2022-11-26 12:13:18 +02:00
Aminda Suomalainen	b350e525e6	etc/ssh/ssh_config: torify ssh	2022-10-10 23:00:16 +03:00
Aminda Suomalainen	1de04a8367	unbound/00-insecure-domains.conf: add http.badssl.com, my captive portal trigger goto	2022-10-03 22:01:15 +03:00
Aminda Suomalainen	9ad97b4560	etc/default/grub.d: add cpufreq-powersave.cfg	2022-09-21 16:34:28 +03:00
Aminda Suomalainen	b16a6a428c	etc/tlp.d/lumina.conf: add powersave cpu governor	2022-09-21 16:32:12 +03:00
Aminda Suomalainen	903774fc10	dnf.conf: set commented timeout to 2, note not setting it lower ... Otherwise there is trouble with the default value of 'migrate' and too many working mirrors start failing	2022-09-17 21:51:13 +03:00
Aminda Suomalainen	037b57fe00	etc/dnf/dnf.conf: add commented timeout (30 -> 5 seconds) ... S3 seems down and I am not patient enough to wait for 30 seconds X times	2022-09-17 21:42:15 +03:00
Aminda Suomalainen	d2bbe52a21	etc/yum.repos.d: replace unstable protonvpn with stable	2022-09-17 20:20:55 +03:00
Aminda Suomalainen	b4c663db73	torrc-client: update hybridirc-onion	2022-09-02 13:25:23 +03:00
Aminda Suomalainen	d2aeabb1c9	etc/pki/ca-trust/source/anchors/README.md: add a note on installing CA certificates	2022-08-15 18:42:46 +03:00
Aminda Suomalainen	71cc6e18ef	etc/yum.repos.d: add brave-browser.repo ... I am not impressed by the upstream documentation.	2022-07-05 17:54:39 +03:00
Aminda Suomalainen	e9fcfbb1c3	sysctl.d/99-ssd-swappiness.conf: add reminder on earlyoom	2022-06-24 23:15:59 +03:00
Aminda Suomalainen	3c23a31d18	etc/sysctl.d: add 99-ssd-swappiness.conf (and .gitignore) ... The default 99-sysctl.conf doesn't have to be here, it's a symlink to top directory anyway.	2022-06-13 17:20:53 +03:00
Aminda Suomalainen	3e3added6c	etc/tlp.d: add lumina.conf	2022-06-04 14:17:22 +03:00
Aminda Suomalainen	1c86e28c67	etc/yum.repos.d/README.md: note sudo fedora-third-party enable	2022-04-21 09:13:44 +03:00
Aminda Suomalainen	e74d1b6eea	etc/tor: add torrc.d, README, http.conf	2022-04-12 15:10:45 +03:00
Aminda Suomalainen	bb7f283891	Revert "systemd/matterbridge.service: import parts of upstream" ... This reverts commit 35aea33043. Ref: https://github.com/42wim/matterbridge/issues/1794	2022-04-04 09:50:46 +03:00
Aminda Suomalainen	35aea33043	systemd/matterbridge.service: import parts of upstream ... https://github.com/42wim/matterbridge/wiki/Service-files#systemd	2022-04-04 08:35:23 +03:00
Aminda Suomalainen	12db5c8841	torrc-client: uncomment 8118	2022-03-31 08:26:55 +03:00
Aminda Suomalainen	82ef806e9f	systemd-resolved README: add quickstart, remove extra h-levels	2022-03-28 20:43:03 +03:00
Aminda Suomalainen	17da76e484	systemd/resolved/README.md: add the ArchWiki DNSSEC issue links	2022-03-28 20:37:37 +03:00
Aminda Suomalainen	f55c00dae6	systemd/resolved/README.md: add missing word, improve formatting	2022-03-28 20:36:11 +03:00
Aminda Suomalainen	8c532e3ef8	etc…resolved…: add/clarify links in/to comments ... Courtesy of https://wiki.archlinux.org/title/Systemd-resolved#DNSSEC	2022-03-28 20:34:37 +03:00
Aminda Suomalainen	d47c374706	etc/ststemd/resolved…: aggressive cleanup/rewriting	2022-03-28 20:28:17 +03:00
Aminda Suomalainen	64bba542b1	systemd/matterbridge.service: remove -debug, mention /groupId	2022-03-18 10:44:25 +02:00
Aminda Suomalainen	76814f830f	etc/{i2pd,systemd}: modernise to less bad ideas ... The issue has been fixed last year and considering I2Pd can connect through Yggdrasil natively, tunneling Yggdrasil in is a bad idea and could lead into Yggdrasil over Yggdrasil loop situation.	2022-03-08 18:18:40 +02:00
Aminda Suomalainen	3513928492	etc/tor/torrc-client: add PirateIRC	2022-03-02 14:44:13 +02:00
Aminda Suomalainen	5613e1bd9a	etc/tor/…-client: add hybridirc onion	2022-02-26 21:07:39 +02:00
Aminda Suomalainen	d2e21e9b4e	etc/resolv.csv: add OpenDNS DoT with a question mark ... Ref: #127	2022-02-23 09:58:06 +02:00
Aminda Suomalainen	859bc2a28c	etc/sudoers.d: add restart-matterbridge ... Allows restarting matterbridge passwordlessly	2022-02-14 12:14:22 +02:00
Aminda Suomalainen	0778849f34	etc/sudoers.d: rm protonvpn ... TODO: figure out does the hibernate file have reason for existing, I have faint idea of the package being removed	2022-02-14 12:07:47 +02:00
Aminda Suomalainen	018f80e6fe	etc/pkcs11/modules: correct libcryptoki & README	2022-02-10 17:40:40 +02:00
Aminda Suomalainen	33950a762e	etc/pkcs11/modules: add README.md,libcryptoki.module	2022-02-10 16:33:49 +02:00
Aminda Suomalainen	82d2146706	etc/tor/client: remove PirateIRC and freenode ... PirateIRC with Ergo is yet to get onion setup and I imagine freenode destroyed their onion a long time ago. I haven't been using it though.	2022-01-17 17:31:33 +02:00
Aminda Suomalainen	df3e710c60	etc/tor/torrc-client: add MapAddress for OFTC	2022-01-17 17:30:39 +02:00
Aminda Suomalainen	f0029674e7	etc/apt/sources.list: also update debug.mirrors.debian.org onion ... Resolves: #124	2022-01-16 19:17:48 +02:00
Aminda Suomalainen	4c6cc2391f	etc/apt/sources.list: attempt to update to onionV3 ... Resolves: #124	2022-01-16 19:06:41 +02:00
Aminda Suomalainen	f58d0d7d01	ssh/user-permit-password: add example for multiple users	2022-01-16 15:15:09 +02:00
Mikaela Suomalainen	1356fccd20	systemd: add flatpak-update.{service,timer} ... Resolves: #121	2021-12-18 13:45:53 +02:00
Mikaela Suomalainen	1b4ac2b6d7	etc/systemd/system.conf.d: add log4shell.conf	2021-12-13 13:09:35 +02:00
Mikaela Suomalainen	5704353d55	systemd: copy matterbridge restarter into gitea one ... It used to stop working randomly without a good reason, but that is likely fixed upstream a long time ago and while I removed it from cron, these units exist so should the issue recur, I can throw these back in. The cron wasn't randomized though, but I don't think there is harm in this being a bit random.	2021-12-06 23:48:40 +02:00
Mikaela Suomalainen	8e69874534	matterbridge-restart.timer: fix language	2021-12-06 23:48:30 +02:00
Mikaela Suomalainen	8209a74c6b	etc: small xdg/autostarts updates: ... * pulseeffects -> easyeffects * wire -> deprecated/ * telegramdesktop.desktop: add workaround (and supposedly it didn't exist here, #42) Resolves: #42	2021-12-02 19:52:34 +02:00
Mikaela Suomalainen	bd91ef704d	systemd: matterbridge.timer -> matterbridge-restart.{service,timer} ... Resolves: #98	2021-11-22 09:56:56 +02:00
Mikaela Suomalainen	9ba056cfd3	matterbridge-cleanup.service: fix typo, ignore exit state	2021-11-21 17:15:12 +02:00
Mikaela Suomalainen	62573195d9	systemd: add matterbridge-cleanup.{service,timer} ... Resolves: #98	2021-11-21 17:11:44 +02:00
Mikaela Suomalainen	13278214d1	matterbridge.timer: OnBootSec=0 just in case ... Ref: #98	2021-11-21 16:59:05 +02:00
Mikaela Suomalainen	29f7cf6b98	systemd: first attempt at matterbridge restarter timer ... Ref: #98	2021-11-21 16:52:14 +02:00
Mikaela Suomalainen	4f50f4a367	systemd-resolved: don't DNSSEC with adblocking	2021-11-21 11:37:03 +02:00
Mikaela Suomalainen	12fe7a59a8	etc/systemd/resolved: add configuration for Mullvad DoT	2021-11-21 11:16:11 +02:00
Mikaela Suomalainen	d49b78680b	etc/resolv.csv: add CZ.NIC ODVR ... Ref: #110 Ref: #112	2021-11-07 18:59:16 +02:00
Mikaela Suomalainen	1e40420115	unbound: rm outdated yggdrasil-override ... Ref: #89	2021-10-05 12:38:16 +03:00
Mikaela Suomalainen	bfa51f500b	unbound/dns-over-tls.conf: stop advertising Debian 9	2021-10-05 12:34:10 +03:00
Mikaela Suomalainen	ee293669d9	unbound: add dot-flushable-cache.conf ... Resolves: #105	2021-10-05 12:33:40 +03:00
Mikaela Suomalainen	862808fe07	etc/yum.repos.d: partially rewrite README.md ... Main problem was "dnf still reads this repository apparently" where the word "repository" was wrong, and I couldn't fix it without changing everything :)	2021-10-05 12:18:42 +03:00