mirror of
https://gitea.blesmrt.net/mikaela/shell-things.git
synced 2025-08-18 04:17:21 +02:00
Compare commits
No commits in common. "0b29f1e8133a20038f250dde83a1d84deca44771" and "bab4fc0dee5e6004470aa0ea51fc8ce9e4eb65d3" have entirely different histories.
0b29f1e813
...
bab4fc0dee
6
.gitmodules
vendored
6
.gitmodules
vendored
@ -1,24 +1,18 @@
|
|||||||
[submodule "submodules/jauderho-nts-servers"]
|
[submodule "submodules/jauderho-nts-servers"]
|
||||||
path = submodules/jauderho-nts-servers
|
path = submodules/jauderho-nts-servers
|
||||||
url = https://github.com/jauderho/nts-servers.git
|
url = https://github.com/jauderho/nts-servers.git
|
||||||
branch = main
|
|
||||||
[submodule "submodules/SteamDeckScreenLock"]
|
[submodule "submodules/SteamDeckScreenLock"]
|
||||||
path = submodules/SteamDeckScreenLock
|
path = submodules/SteamDeckScreenLock
|
||||||
url = https://github.com/RHOPKINS13/SteamDeckScreenLock.git
|
url = https://github.com/RHOPKINS13/SteamDeckScreenLock.git
|
||||||
branch = main
|
|
||||||
[submodule "submodules/opendyslexic"]
|
[submodule "submodules/opendyslexic"]
|
||||||
path = submodules/opendyslexic
|
path = submodules/opendyslexic
|
||||||
url = https://github.com/antijingoist/opendyslexic.git
|
url = https://github.com/antijingoist/opendyslexic.git
|
||||||
branch = master
|
|
||||||
[submodule "submodules/comic-shanns-mono"]
|
[submodule "submodules/comic-shanns-mono"]
|
||||||
path = submodules/comic-shanns-mono
|
path = submodules/comic-shanns-mono
|
||||||
url = https://github.com/jesusmgg/comic-shanns-mono.git
|
url = https://github.com/jesusmgg/comic-shanns-mono.git
|
||||||
branch = master
|
|
||||||
[submodule "submodules/comicneue"]
|
[submodule "submodules/comicneue"]
|
||||||
path = submodules/comicneue
|
path = submodules/comicneue
|
||||||
url = https://github.com/crozynski/comicneue.git
|
url = https://github.com/crozynski/comicneue.git
|
||||||
branch = master
|
|
||||||
[submodule "submodules/serious-sans"]
|
[submodule "submodules/serious-sans"]
|
||||||
path = submodules/serious-sans
|
path = submodules/serious-sans
|
||||||
url = https://github.com/kaBeech/serious-sans.git
|
url = https://github.com/kaBeech/serious-sans.git
|
||||||
branch = main
|
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
# @format
|
|
||||||
|
|
||||||
# See https://pre-commit.com for more information
|
# See https://pre-commit.com for more information
|
||||||
# See https://pre-commit.ci for more information
|
# See https://pre-commit.ci for more information
|
||||||
ci:
|
ci:
|
||||||
|
@ -1,7 +1,4 @@
|
|||||||
{
|
{
|
||||||
"insertPragma": true,
|
|
||||||
"proseWrap": "always",
|
|
||||||
"singleAttributePerLine": true,
|
|
||||||
"plugins": [
|
"plugins": [
|
||||||
"@prettier/plugin-ruby",
|
"@prettier/plugin-ruby",
|
||||||
"@prettier/plugin-xml",
|
"@prettier/plugin-xml",
|
||||||
|
@ -1,11 +1,8 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# Upgrading Windows 10 to Windows 11 on unsupported systems
|
# Upgrading Windows 10 to Windows 11 on unsupported systems
|
||||||
|
|
||||||
## WARNING
|
## WARNING
|
||||||
|
|
||||||
- READ FIRST:
|
- READ FIRST: [Microsoft: Installing Windows 11 on devices that don't meet minimum system requirements](https://support.microsoft.com/windows/installing-windows-11-on-devices-that-don-t-meet-minimum-system-requirements-0b2dc4a2-5933-4ad4-9c09-ef0a331518f1)
|
||||||
[Microsoft: Installing Windows 11 on devices that don't meet minimum system requirements](https://support.microsoft.com/windows/installing-windows-11-on-devices-that-don-t-meet-minimum-system-requirements-0b2dc4a2-5933-4ad4-9c09-ef0a331518f1)
|
|
||||||
|
|
||||||
This is not supported by Microsoft, most of the methods listed here didn't
|
This is not supported by Microsoft, most of the methods listed here didn't
|
||||||
work for me on the first system I updated, Windows is not my primary operating
|
work for me on the first system I updated, Windows is not my primary operating
|
||||||
@ -14,8 +11,8 @@ affect me.
|
|||||||
|
|
||||||
## What works
|
## What works
|
||||||
|
|
||||||
Sedric, Tassu and Zaldaryn have no TPM or currently supported CPU, while the
|
Sedric, Tassu and Zaldaryn have no TPM or currently supported CPU, while
|
||||||
health check app says they are only two to six years old.
|
the health check app says they are only two to six years old.
|
||||||
|
|
||||||
- https://github.com/AveYo/MediaCreationTool.bat
|
- https://github.com/AveYo/MediaCreationTool.bat
|
||||||
|
|
||||||
@ -25,8 +22,8 @@ I think the first method is likely the best, but I cannot rule these working
|
|||||||
on another system out yet. They didn't work on my first system tried.
|
on another system out yet. They didn't work on my first system tried.
|
||||||
|
|
||||||
- `00-AllowUpgradesWithUnsupportedTPMOrCPU.reg` - the official Microsoft
|
- `00-AllowUpgradesWithUnsupportedTPMOrCPU.reg` - the official Microsoft
|
||||||
recommendation and the only one that should be used. If after reboot nothing
|
recommendation and the only one that should be used. If after reboot
|
||||||
happens, maybe try the rest rebooting every failure.
|
nothing happens, maybe try the rest rebooting every failure.
|
||||||
- https://support.microsoft.com/windows/windows-11-n-asentaminen-e0edbbfb-cfc5-4011-868b-2ce77ac7c70e
|
- https://support.microsoft.com/windows/windows-11-n-asentaminen-e0edbbfb-cfc5-4011-868b-2ce77ac7c70e
|
||||||
- `01-LabConfig.reg` - widely reported to work
|
- `01-LabConfig.reg` - widely reported to work
|
||||||
- `01-Setup.reg` - ^
|
- `01-Setup.reg` - ^
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
Some kind of explaining for [IPv6.reg](IPv6.reg) like
|
Some kind of explaining for [IPv6.reg](IPv6.reg) like
|
||||||
[Windows.reg](Windows.reg) which includes this file has.
|
[Windows.reg](Windows.reg) which includes this file has.
|
||||||
|
|
||||||
|
@ -1,3 +1 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
AutoHotKey scripts, I place these to `shell:startup` as I need them.
|
AutoHotKey scripts, I place these to `shell:startup` as I need them.
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# Configuring SNTP Servers in Windows terminal
|
# Configuring SNTP Servers in Windows terminal
|
||||||
|
|
||||||
<!-- editorconfig-checker-disable -->
|
<!-- editorconfig-checker-disable -->
|
||||||
@ -28,15 +26,15 @@ w32tm /resync
|
|||||||
w32tm /query /peers
|
w32tm /query /peers
|
||||||
```
|
```
|
||||||
|
|
||||||
- The list is space separated NTP servers, while I think Windows uses SNTP
|
- The list is space separated NTP servers, while I think Windows uses SNTP instead
|
||||||
instead of NTP.
|
of NTP.
|
||||||
- `/resync` may sync current time, but is also required for the GUI (Windows +
|
- `/resync` may sync current time, but is also required for the GUI
|
||||||
I, Date & time) and following command to get aware of peers.
|
(Windows + I, Date & time) and following command to get aware of peers.
|
||||||
- Shows where time is synced from and statistics.
|
- Shows where time is synced from and statistics.
|
||||||
- There is also `net time` to sync, I am unsure of the differences while
|
- There is also `net time` to sync, I am unsure of the differences while
|
||||||
that may be blocked while the second keeps working. It may also not show
|
that may be blocked while the second keeps working. It may also not
|
||||||
all the peers, just the primary one, while `w32tm` is more verbose and has
|
show all the peers, just the primary one, while `w32tm` is more verbose
|
||||||
all of them.
|
and has all of them.
|
||||||
- As Windows doesn't support NTS and probably won't in near future, there is
|
- As Windows doesn't support NTS and probably won't in near future, there is
|
||||||
no point in listing distant foreign servers.
|
no point in listing distant foreign servers.
|
||||||
|
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
/** @format */
|
|
||||||
|
|
||||||
//
|
//
|
||||||
// Remember to start writing at line 2. This is my second attempt at Firefox
|
// Remember to start writing at line 2. This is my second attempt at Firefox
|
||||||
// autoconfig after being taught by LibreAwoo, but this time I am trying to
|
// autoconfig after being taught by LibreAwoo, but this time I am trying to
|
||||||
|
@ -1,27 +1,25 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# Sway configuration
|
# Sway configuration
|
||||||
|
|
||||||
This is my `~/.config/sway/config`, and `…config.d/`. The main config contains
|
This is my `~/.config/sway/config`, and `…config.d/`. The main config contains
|
||||||
thinks that I have felt as essential or otherwise felt like putting there, but
|
thinks that I have felt as essential or otherwise felt like putting there,
|
||||||
as I love include directives, a lot is in the config.d.
|
but as I love include directives, a lot is in the config.d.
|
||||||
|
|
||||||
## Themes
|
## Themes
|
||||||
|
|
||||||
My i3 config says that on Debian the packages are:
|
My i3 config says that on Debian the packages are:
|
||||||
`sudo apt install lxappearance gtk-chtheme qt4-qtconfig qt5ct`
|
`sudo apt install lxappearance gtk-chtheme qt4-qtconfig qt5ct`
|
||||||
|
|
||||||
The source for that is marked as https://askubuntu.com/a/600946 Additionally
|
The source for that is marked as https://askubuntu.com/a/600946
|
||||||
apparently my `~/.xprofile` specifies `GTK_THEME` which I have hoped to get
|
Additionally apparently my `~/.xprofile` specifies `GTK_THEME` which
|
||||||
get detected/understood by browsers etc, but I think I decided to not import
|
I have hoped to get get detected/understood by browsers etc, but I think
|
||||||
that to Sway which naturally doesn't read xprofile.
|
I decided to not import that to Sway which naturally doesn't read xprofile.
|
||||||
|
|
||||||
Apparently Adwaita must be set to dark theme in `gnome-control-center`
|
Apparently Adwaita must be set to dark theme in `gnome-control-center`
|
||||||
|
|
||||||
### Fonts
|
### Fonts
|
||||||
|
|
||||||
Using the same apps and `gnome-tweaks` (as there are probably a lot of methods
|
Using the same apps and `gnome-tweaks` (as there are probably a lot of
|
||||||
setting fonts):
|
methods setting fonts):
|
||||||
|
|
||||||
- User-interface text: Noto Serif Regular 10
|
- User-interface text: Noto Serif Regular 10
|
||||||
- Document text: Noto Serif Regular 11
|
- Document text: Noto Serif Regular 11
|
||||||
@ -30,11 +28,12 @@ setting fonts):
|
|||||||
- Apparently this means "apps that don't use client-side decorations"
|
- Apparently this means "apps that don't use client-side decorations"
|
||||||
|
|
||||||
The number behind is obviously the number and it's based on what were the
|
The number behind is obviously the number and it's based on what were the
|
||||||
defaults before I touched them so I am hoping GNOME knows what they are doing.
|
defaults before I touched them so I am hoping GNOME knows what they are
|
||||||
|
doing.
|
||||||
|
|
||||||
Noto should have all characters, looks good enough to my eyes, I guess Serif
|
Noto should have all characters, looks good enough to my eyes, I guess Serif
|
||||||
makes a distinguishion between letters "I" and "l", it doesn't seem to have a
|
makes a distinguishion between letters "I" and "l", it doesn't seem to have
|
||||||
Mono variant, but the Sans is close enough.
|
a Mono variant, but the Sans is close enough.
|
||||||
|
|
||||||
Where reading speed is needed, `OpenDyslexic` is nice, but some applications
|
Where reading speed is needed, `OpenDyslexic` is nice, but some applications
|
||||||
have trouble handling it, e.g. mpv (makes Ä and Ö and Å all Å) and Firefox
|
have trouble handling it, e.g. mpv (makes Ä and Ö and Å all Å) and Firefox
|
||||||
@ -54,8 +53,7 @@ Other font settings in GNOME-Tweak:
|
|||||||
|
|
||||||
Workarounds:
|
Workarounds:
|
||||||
|
|
||||||
- Use VNC (see my Scripts repo
|
- Use VNC (see my Scripts repo [`bash/swaymirror.bash`](https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/swaymirror.bash))
|
||||||
[`bash/swaymirror.bash`](https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/swaymirror.bash))
|
|
||||||
- Do something weird with OBS
|
- Do something weird with OBS
|
||||||
- Use a dedicated application that don't seem to be in Fedora repos, flatpak
|
- Use a dedicated application that don't seem to be in Fedora repos, flatpak
|
||||||
or snap.
|
or snap.
|
||||||
|
@ -1,30 +1,26 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# More sway configuration
|
# More sway configuration
|
||||||
|
|
||||||
`~/.config/sway/config.d/` where `*.conf` is included by my sway config. Thus
|
`~/.config/sway/config.d/` where `*.conf` is included by my sway config.
|
||||||
this `README.md` is not read, even if I happened to carelessly copy-paste it
|
Thus this `README.md` is not read, even if I happened to carelessly
|
||||||
in.
|
copy-paste it in.
|
||||||
|
|
||||||
- `autostart-communication.conf` - chat/communication apps I am expected to
|
- `autostart-communication.conf` - chat/communication apps I am expected to have
|
||||||
have open or at least check at times
|
open or at least check at times
|
||||||
- `autostart-fineid.conf` - Finnish electric identity card, that I also use as
|
- `autostart-fineid.conf` - Finnish electric identity card, that I also use as SSH key
|
||||||
SSH key
|
|
||||||
- `autostart-utilities.conf` - general utilities, like `nm-applet` or VPN etc.
|
- `autostart-utilities.conf` - general utilities, like `nm-applet` or VPN etc.
|
||||||
- `grimshot.conf` - screenshotting keybinds using `grimshot`
|
- `grimshot.conf` - screenshotting keybinds using `grimshot`
|
||||||
- `i3-selenized-dark.conf` - selenized dark colour scheme
|
- `i3-selenized-dark.conf` - selenized dark colour scheme
|
||||||
- `keyboard.conf` - keyboard configuration
|
- `keyboard.conf` - keyboard configuration
|
||||||
- `media.conf` - media key configuration and autostarts related to it
|
- `media.conf` - media key configuration and autostarts related to it
|
||||||
- `pointer-accel.conf` - pointer/mouse configuration, mainly setting
|
- `pointer-accel.conf` - pointer/mouse configuration, mainly setting acceleration
|
||||||
acceleration profile to `flat`
|
profile to `flat`
|
||||||
- `README.md` - you are currently reading this :wink:
|
- `README.md` - you are currently reading this :wink:
|
||||||
- `sedric.conf` - configuration specific to my laptop hostnamed `sedric`
|
- `sedric.conf` - configuration specific to my laptop hostnamed `sedric`
|
||||||
- `swaybar.conf` - `swaybar` configuration
|
- `swaybar.conf` - `swaybar` configuration
|
||||||
- `swayidle.conf` - `swayidle` configuration/autostart
|
- `swayidle.conf` - `swayidle` configuration/autostart
|
||||||
- `wlsunset-kotka.conf` - `wlsunset` configuration/autostart for my hometown
|
- `wlsunset-kotka.conf` - `wlsunset` configuration/autostart for my hometown for when
|
||||||
for when I happen to visit for longer period of time
|
I happen to visit for longer period of time
|
||||||
- `wlsunset-lauttasaari.conf` - `wlsunset` configuration for my home
|
- `wlsunset-lauttasaari.conf` - `wlsunset` configuration for my home neighbourhood
|
||||||
neighbourhood
|
|
||||||
- `zz-floating.conf` - configures windows that should float. For some reason
|
- `zz-floating.conf` - configures windows that should float. For some reason
|
||||||
that is inherited from my `i3` config, it tells to put float rules above the
|
that is inherited from my `i3` config, it tells to put float rules above the
|
||||||
last line, so it should be read last and `z` is the last letter of English
|
last line, so it should be read last and `z` is the last letter of English
|
||||||
|
@ -1,8 +1,4 @@
|
|||||||
/**
|
/* Originally based upon, but heavily modified from https://github.com/jan-warchol/selenized/blob/master/other-apps/wofi/selenized-dark.css */
|
||||||
* Originally based upon, but heavily modified from https://github.com/jan-warchol/selenized/blob/master/other-apps/wofi/selenized-dark.css
|
|
||||||
*
|
|
||||||
* @format
|
|
||||||
*/
|
|
||||||
|
|
||||||
* {
|
* {
|
||||||
border: none;
|
border: none;
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# Chrony config files
|
# Chrony config files
|
||||||
|
|
||||||
For some reason Debian package for Chrony doesn't include other config files
|
For some reason Debian package for Chrony doesn't include other config files
|
||||||
@ -15,10 +13,10 @@ Refer to ../../Windows/time/README.md
|
|||||||
|
|
||||||
## Other random notes
|
## Other random notes
|
||||||
|
|
||||||
On pools, the default maxsources is 4 and pools would be resolved until there
|
On pools, the default maxsources is 4 and pools would be resolved until
|
||||||
would be 4 names while the documentation for Telia and Snopyta says they have
|
there would be 4 names while the documentation for Telia and Snopyta says
|
||||||
only 3. Cloudflare again resolves to two per IP version, so I assume that
|
they have only 3. Cloudflare again resolves to two per IP version, so I
|
||||||
means 2.
|
assume that means 2.
|
||||||
|
|
||||||
## Commands of interest:
|
## Commands of interest:
|
||||||
|
|
||||||
@ -49,10 +47,8 @@ Checking that something has NTS?
|
|||||||
nmap -p 4460 -Pn ntp.example.net
|
nmap -p 4460 -Pn ntp.example.net
|
||||||
```
|
```
|
||||||
|
|
||||||
In
|
In [GitHub user jauderho's curated NTS list](https://gist.github.com/jauderho/2ad0d441760fc5ed69d8d4e2d6b35f8d)
|
||||||
[GitHub user jauderho's curated NTS list](https://gist.github.com/jauderho/2ad0d441760fc5ed69d8d4e2d6b35f8d)
|
user [cadusilva suggests this command instead](https://gist.github.com/jauderho/2ad0d441760fc5ed69d8d4e2d6b35f8d?permalink_comment_id=4192632#gistcomment-4192632):
|
||||||
user
|
|
||||||
[cadusilva suggests this command instead](https://gist.github.com/jauderho/2ad0d441760fc5ed69d8d4e2d6b35f8d?permalink_comment_id=4192632#gistcomment-4192632):
|
|
||||||
|
|
||||||
```'
|
```'
|
||||||
chronyd -Q -t 3 'server NTP_SERVER_HERE iburst nts maxsamples 1'
|
chronyd -Q -t 3 'server NTP_SERVER_HERE iburst nts maxsamples 1'
|
||||||
|
@ -1,9 +1,7 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# dnf protected packages
|
# dnf protected packages
|
||||||
|
|
||||||
In normal operation, packages listed here will not be removed by dnf even when
|
In normal operation, packages listed here will not be removed by dnf even
|
||||||
told it to do so.
|
when told it to do so.
|
||||||
|
|
||||||
<!-- editorconfig-checker-disable -->
|
<!-- editorconfig-checker-disable -->
|
||||||
<!-- prettier-ignore-start -->
|
<!-- prettier-ignore-start -->
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
My dracut configuration files mainly for generating unified kerneil images
|
My dracut configuration files mainly for generating unified kerneil images
|
||||||
(uki).
|
(uki).
|
||||||
|
|
||||||
|
@ -16,12 +16,6 @@
|
|||||||
<user v='Mikaela' />
|
<user v='Mikaela' />
|
||||||
|
|
||||||
<!-- Folding Slots -->
|
<!-- Folding Slots -->
|
||||||
<slot
|
<slot id='0' type='CPU' />
|
||||||
id='0'
|
<slot id='1' type='GPU' />
|
||||||
type='CPU'
|
|
||||||
/>
|
|
||||||
<slot
|
|
||||||
id='1'
|
|
||||||
type='GPU'
|
|
||||||
/>
|
|
||||||
</config>
|
</config>
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# `/etc/hosts`
|
# `/etc/hosts`
|
||||||
|
|
||||||
This file is DNS before DNS and legacy remain which is still used.
|
This file is DNS before DNS and legacy remain which is still used.
|
||||||
@ -29,15 +27,16 @@ Hosts that I dislike enough to mention in my `hosts` file.
|
|||||||
|
|
||||||
## `dns`
|
## `dns`
|
||||||
|
|
||||||
This began from question why should I have DNS to have DNS, but having it on
|
This began from question why should I have DNS to have DNS, but having it
|
||||||
DNS resolver level broke DNSSEC due to my weird mixing of systemd-resolved and
|
on DNS resolver level broke DNSSEC due to my weird mixing of systemd-resolved
|
||||||
Unbound, so now it's something I can attempt to `/etc/hosts`.
|
and Unbound, so now it's something I can attempt to `/etc/hosts`.
|
||||||
|
|
||||||
**_EXCERCISE CAUTION!_**
|
**_EXCERCISE CAUTION!_**
|
||||||
|
|
||||||
## `hostname`
|
## `hostname`
|
||||||
|
|
||||||
As can be seen in `hosts.debian`, Debian specifies hostname in format such as:
|
As can be seen in `hosts.debian`, Debian specifies hostname in format
|
||||||
|
such as:
|
||||||
|
|
||||||
```
|
```
|
||||||
::1 localhost
|
::1 localhost
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
Useful nginx files that I will probably need and which I will forget if I
|
Useful nginx files that I will probably need and which I will forget if I
|
||||||
cannot read them from here.
|
cannot read them from here.
|
||||||
|
|
||||||
@ -9,20 +7,18 @@ cannot read them from here.
|
|||||||
|
|
||||||
These files may age badly, so here are some hopefully timeless pointers:
|
These files may age badly, so here are some hopefully timeless pointers:
|
||||||
|
|
||||||
- Generate the config file with https://ssl-config.mozilla.org/ (and if time
|
- Generate the config file with https://ssl-config.mozilla.org/ (and if
|
||||||
eats it, try https://github.com/mozilla/ssl-config-generator/ in hope of
|
time eats it, try https://github.com/mozilla/ssl-config-generator/ in
|
||||||
finding where it is now. \* Name it 00-something so it will be the first
|
hope of finding where it is now. \* Name it 00-something so it will be the first file read and make
|
||||||
file read and make everything a different file.
|
everything a different file.
|
||||||
- If using my acmesh-ssl.bash script, the files to fill should be like:
|
- If using my acmesh-ssl.bash script, the files to fill should be like:
|
||||||
|
|
||||||
(the script runs
|
(the script runs `$ACMESH --key-file $NGINXDIR/key.pem --fullchain-file $NGINXDIR/cert.pem --reloadcmd "$SYSTEMCTLRESTART nginx"`)
|
||||||
`$ACMESH --key-file $NGINXDIR/key.pem --fullchain-file $NGINXDIR/cert.pem --reloadcmd "$SYSTEMCTLRESTART nginx"`)
|
|
||||||
|
|
||||||
- `ssl_certificate`, `ssl_trusted_certificate` are `cert.pem`
|
- `ssl_certificate`, `ssl_trusted_certificate` are `cert.pem`
|
||||||
- `ssl_certificate_key` is `key.pem`
|
- `ssl_certificate_key` is `key.pem`
|
||||||
|
|
||||||
The header syntax is following, **_THIS LIKELY WON'T TIME WELL, ESPECIALLY
|
The header syntax is following, **_THIS LIKELY WON'T TIME WELL, ESPECIALLY CSP_**
|
||||||
CSP_**
|
|
||||||
|
|
||||||
```
|
```
|
||||||
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains" always;
|
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains" always;
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# Chromium recommended policies
|
# Chromium recommended policies
|
||||||
|
|
||||||
- https://chromeenterprise.google/policies/
|
- https://chromeenterprise.google/policies/
|
||||||
@ -27,8 +25,7 @@
|
|||||||
|
|
||||||
## `brave-search.json`
|
## `brave-search.json`
|
||||||
|
|
||||||
Sets and displays recommendation on the use of search.brave.com as a search
|
Sets and displays recommendation on the use of search.brave.com as a search engine by default.
|
||||||
engine by default.
|
|
||||||
|
|
||||||
## `disable-default-browser-check.json`
|
## `disable-default-browser-check.json`
|
||||||
|
|
||||||
@ -37,18 +34,16 @@ suggested policy, allows the user to set as default in browser settings.
|
|||||||
|
|
||||||
## `duckduckgo.json`
|
## `duckduckgo.json`
|
||||||
|
|
||||||
Sets and displays recommendation on the use of start.duckduckgo.com as a
|
Sets and displays recommendation on the use of start.duckduckgo.com as a search engine by default.
|
||||||
search engine by default.
|
|
||||||
|
|
||||||
## `ecosia.json`
|
## `ecosia.json`
|
||||||
|
|
||||||
Sets and displays recommendation on the use of Ecosia as a search engine by
|
Sets and displays recommendation on the use of Ecosia as a search engine by default.
|
||||||
default.
|
|
||||||
|
|
||||||
## `enable-google-safebrowsing.json`
|
## `enable-google-safebrowsing.json`
|
||||||
|
|
||||||
Enforces Google Safe Browsing in standard mode. For advanced mode and sending
|
Enforces Google Safe Browsing in standard mode. For advanced mode and
|
||||||
data to Google, increase to 2 or see the sample below.
|
sending data to Google, increase to 2 or see the sample below.
|
||||||
|
|
||||||
## `enable-google-safebrowsing-less-private.json.sample`
|
## `enable-google-safebrowsing-less-private.json.sample`
|
||||||
|
|
||||||
|
@ -1,18 +1,15 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
Central configuration for PKCS#11 plugin using software and smartcards.
|
Central configuration for PKCS#11 plugin using software and smartcards.
|
||||||
|
|
||||||
- https://digisaatio.fi/wiki/P11-kit
|
- https://digisaatio.fi/wiki/P11-kit
|
||||||
- https://www.systutorials.com/docs/linux/man/5-pkcs11.conf/
|
- https://www.systutorials.com/docs/linux/man/5-pkcs11.conf/
|
||||||
|
|
||||||
Remember also
|
Remember also [my FINEID notes in the gist/ repo](https://gitea.blesmrt.net/mikaela/gist/src/branch/master/fineid)
|
||||||
[my FINEID notes in the gist/ repo](https://gitea.blesmrt.net/mikaela/gist/src/branch/master/fineid)
|
|
||||||
|
|
||||||
## libcryptoki.module
|
## libcryptoki.module
|
||||||
|
|
||||||
According to the manual (2nd link) the full path shouldn't be required, but
|
According to the manual (2nd link) the full path shouldn't be required,
|
||||||
the 1st link disagrees and works for me, so thus
|
but the 1st link disagrees and works for me, so thus `module: /usr/lib64/libcryptoki.so`
|
||||||
`module: /usr/lib64/libcryptoki.so` instead of `module: libcryptoki.so`.
|
instead of `module: libcryptoki.so`.
|
||||||
|
|
||||||
Additionally the DVV card reader software does the management, so
|
Additionally the DVV card reader software does the management, so
|
||||||
`managed: no`.
|
`managed: no`.
|
||||||
|
@ -1,8 +1,5 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
Fedora & SailfishOS: drop `.pem` files of root certificates here and
|
Fedora & SailfishOS: drop `.pem` files of root certificates here and
|
||||||
`sudo update-ca-trust`.
|
`sudo update-ca-trust`.
|
||||||
|
|
||||||
Debian & co: drop `.crt` to `/usr/local/share/ca-certificates/extra/` (create
|
Debian & co: drop `.crt` to `/usr/local/share/ca-certificates/extra/`
|
||||||
if doesn't exist, `/extra/` may be anything) and run
|
(create if doesn't exist, `/extra/` may be anything) and run `sudo update-ca-certificates`
|
||||||
`sudo update-ca-certificates`
|
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
`sshd_config` should include something like
|
`sshd_config` should include something like
|
||||||
|
|
||||||
```
|
```
|
||||||
|
@ -1,4 +1,2 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
The names may not contain a dot, the RHEL sudo is wheel (not to be confused
|
The names may not contain a dot, the RHEL sudo is wheel (not to be confused
|
||||||
with Debian's passwordless sudo) and the proper permissions are 0400.
|
with Debian's passwordless sudo) and the proper permissions are 0400.
|
||||||
|
@ -1,4 +1,2 @@
|
|||||||
<!-- @format -->
|
This file contains questionable choices and options which may be deprecated
|
||||||
|
or otherwise not so good ideas.
|
||||||
This file contains questionable choices and options which may be deprecated or
|
|
||||||
otherwise not so good ideas.
|
|
||||||
|
@ -1,11 +1,9 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
The IPv6 files are copied from
|
The IPv6 files are copied from
|
||||||
https://www.reddit.com/r/raspberry_pi/comments/14vcpz/rpi_as_an_ipv6_router_using_a_sixxs_tunnel_and/
|
https://www.reddit.com/r/raspberry_pi/comments/14vcpz/rpi_as_an_ipv6_router_using_a_sixxs_tunnel_and/
|
||||||
and they are here because they were my biggest difficulty with having Arch on
|
and they are here because they were my biggest difficulty with having Arch
|
||||||
Pi as IPv6 router. \* Also helpful
|
on Pi as IPv6 router. \* Also helpful
|
||||||
https://wiki.archlinux.org/index.php/IPv6_tunnel_broker_setup
|
https://wiki.archlinux.org/index.php/IPv6_tunnel_broker_setup
|
||||||
|
|
||||||
Miredo.service again is edited from what Arch & Debian ship so it starts after
|
Miredo.service again is edited from what Arch & Debian ship so it starts
|
||||||
there is already network connectivity and Unbound is running so it won't start
|
after there is already network connectivity and Unbound is running
|
||||||
complaining about name resolution errors.
|
so it won't start complaining about name resolution errors.
|
||||||
|
@ -1,8 +1,6 @@
|
|||||||
<!-- @format -->
|
Services in this directory are meant for my Jolla Phone which runs
|
||||||
|
Sailfish OS. It doesn't have cron, so I tried the nearest equivalent
|
||||||
Services in this directory are meant for my Jolla Phone which runs Sailfish
|
that is there out-of-box, systemd timers.
|
||||||
OS. It doesn't have cron, so I tried the nearest equivalent that is there
|
|
||||||
out-of-box, systemd timers.
|
|
||||||
|
|
||||||
- aliendalvik-stopper again stops android support hourly so it won't waste
|
- aliendalvik-stopper again stops android support hourly so it won't waste
|
||||||
battery.
|
battery.
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# systemd unit overrides
|
# systemd unit overrides
|
||||||
|
|
||||||
These are meant to be in `/etc/systemd/system/whatever.service.d/` and thus
|
These are meant to be in `/etc/systemd/system/whatever.service.d/` and thus
|
||||||
|
@ -1,3 +1 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/deprecated/ydns6
|
https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/deprecated/ydns6
|
||||||
|
@ -1,10 +1,8 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# systemd-timesyncd source configuration
|
# systemd-timesyncd source configuration
|
||||||
|
|
||||||
For more information about the time servers, refer to their websites or
|
For more information about the time servers, refer to their websites or
|
||||||
`../../chrony/sources.d` which comes with more detailed comments. Chrony is my
|
`../../chrony/sources.d` which comes with more detailed comments. Chrony
|
||||||
preferred NTP client/server, but SteamOS happens to come with
|
is my preferred NTP client/server, but SteamOS happens to come with
|
||||||
systemd-timesyncd enabled and using the pool.ntp.org, so I had to revive this
|
systemd-timesyncd enabled and using the pool.ntp.org, so I had to revive this
|
||||||
at least partially.
|
at least partially.
|
||||||
|
|
||||||
|
@ -1,10 +1,7 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
`~/.config/systemd/user`
|
`~/.config/systemd/user`
|
||||||
|
|
||||||
To enable lingering
|
To enable lingering
|
||||||
|
|
||||||
`sudo loginctl enable-linger username` or if it doesn't work,
|
`sudo loginctl enable-linger username` or if it doesn't work, `sudo touch /var/lib/systemd/linger/username`
|
||||||
`sudo touch /var/lib/systemd/linger/username`
|
|
||||||
|
|
||||||
https://wiki.archlinux.org/index.php/Systemd/User will be a big help
|
https://wiki.archlinux.org/index.php/Systemd/User will be a big help
|
||||||
|
@ -1,4 +1,2 @@
|
|||||||
<!-- @format -->
|
Fedora uses this directory and this may be suitable for (Fedora) systems
|
||||||
|
with a single Tor instance without NonAnonymousMode (FDE so not needed).
|
||||||
Fedora uses this directory and this may be suitable for (Fedora) systems with
|
|
||||||
a single Tor instance without NonAnonymousMode (FDE so not needed).
|
|
||||||
|
@ -1,5 +1,3 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# PipeWire notes
|
# PipeWire notes
|
||||||
|
|
||||||
<!-- editorconfig-checker-disable -->
|
<!-- editorconfig-checker-disable -->
|
||||||
@ -30,8 +28,8 @@ one from `alsamixer` is enough to fix it.
|
|||||||
|
|
||||||
In `alsamixer` having it as pro-audio exposes the sound card in F6 known as
|
In `alsamixer` having it as pro-audio exposes the sound card in F6 known as
|
||||||
_Logitech USB Headset_ and there I see two siliders, _Headphone_ and _Mic_,
|
_Logitech USB Headset_ and there I see two siliders, _Headphone_ and _Mic_,
|
||||||
_Headphone_ can apparently be 100 and _Mic_ muted when not in use to avoid it
|
_Headphone_ can apparently be 100 and _Mic_ muted when not in use to avoid
|
||||||
echoing back.
|
it echoing back.
|
||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
@ -45,8 +43,8 @@ The old pulseaudio fix for less than 20 % volume being unhearable is editing
|
|||||||
|
|
||||||
from #pipewire on freenode which has public logging according to the title.
|
from #pipewire on freenode which has public logging according to the title.
|
||||||
|
|
||||||
The `api.alsa.soft-mixer = true` may be nicer as the volume is a lot less, 77
|
The `api.alsa.soft-mixer = true` may be nicer as the volume is a lot less,
|
||||||
% is well audible on USB headset and even 100 % isn't too loud. External
|
77 % is well audible on USB headset and even 100 % isn't too loud. External
|
||||||
speakers with subwoofer again work as usual.
|
speakers with subwoofer again work as usual.
|
||||||
|
|
||||||
2021-06-14: the above solution is wrong and outdated, the files mentioned
|
2021-06-14: the above solution is wrong and outdated, the files mentioned
|
||||||
@ -55,8 +53,7 @@ don't exist by default anymore, they need to be copied and edited separately
|
|||||||
See also:
|
See also:
|
||||||
|
|
||||||
- https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/1220
|
- https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/1220
|
||||||
- marked as duplicate of:
|
- marked as duplicate of: https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/207
|
||||||
https://gitlab.freedesktop.org/pipewire/pipewire/-/issues/207
|
|
||||||
|
|
||||||
## Bluetooth
|
## Bluetooth
|
||||||
|
|
||||||
|
@ -1,10 +1,8 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# yum/dnf repositories
|
# yum/dnf repositories
|
||||||
|
|
||||||
This directory is still read by `dnf` and contains files for repositories that
|
This directory is still read by `dnf` and contains files for repositories
|
||||||
I appear to end up adding on every system that aren't as clear to add as the
|
that I appear to end up adding on every system that aren't as clear to add
|
||||||
links below.
|
as the links below.
|
||||||
|
|
||||||
## Additional repositories
|
## Additional repositories
|
||||||
|
|
||||||
|
2
pnpm-lock.yaml
generated
vendored
2
pnpm-lock.yaml
generated
vendored
@ -1,5 +1,3 @@
|
|||||||
# @format
|
|
||||||
|
|
||||||
lockfileVersion: "9.0"
|
lockfileVersion: "9.0"
|
||||||
|
|
||||||
settings:
|
settings:
|
||||||
|
@ -1 +1 @@
|
|||||||
Subproject commit 2d7b059fd26c1383fcaea7264d9f3ca0c686b449
|
Subproject commit 882a4fbd5a075a29bd0a56da6605eb849368b783
|
@ -1,6 +1,4 @@
|
|||||||
<!-- @format -->
|
|
||||||
|
|
||||||
# User crontabs
|
# User crontabs
|
||||||
|
|
||||||
Don't edit these directly, use `crontab -e` instead! And also consider making
|
Don't edit these directly, use `crontab -e` instead! And also consider
|
||||||
a systemd service instead!
|
making a systemd service instead!
|
||||||
|
Loading…
x
Reference in New Issue
Block a user