chromium: add the rest of Quad9 & update README.md

chromium/doh-quad9*: add alternative port as Chromium allows multiple
systemd-resolved: add vim modelines
2024-04-21 11:35:28 +03:00 · 2024-04-21 11:28:07 +03:00 · 2024-04-21 10:58:45 +03:00 · 2024-04-21 10:57:25 +03:00 · 2024-04-21 10:54:22 +03:00 · 2024-04-21 10:13:29 +03:00
17 changed files with 105 additions and 13 deletions
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@ -27,6 +27,7 @@
      "Locked": false,
      "ProviderURL": "https://dns0.eu/"
    },
+    "DisableEncryptedClientHello": false,
    "DisablePocket": false,
    "EnableTrackingProtection": {
      "Cryptomining": true,
@ -51,6 +52,14 @@
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipfs-companion/latest.xpi",
        "installation_mode": "normal_installed"
      },
+      "ipvfoo@pmarks.net": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipvfoo/latest.xpi",
+        "installation_mode": "normal_installed"
+      },
+      "ipvfoobar@napr.eu": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest//ipvfoobar/latest.xpi",
+        "installation_mode": "normal_installed"
+      },
      "jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/terms-of-service-didnt-read/latest.xpi",
        "installation_mode": "normal_installed"
--- a/etc/opt/chromium/policies/managed/README.md
+++ b/etc/opt/chromium/policies/managed/README.md
@ -12,6 +12,7 @@
  - [Silk - Privacy Pass Client for the browser](#silk---privacy-pass-client-for-the-browser)
  - [NoScript](#noscript)
  - [OpenDyslexic](#opendyslexic)
+  - [IPvFoo](#ipvfoo)
  - [Dark Reader](#dark-reader)
  - [Indiewiki Buddy](#indiewiki-buddy)
  - [Floccus bookmarks sync](#floccus-bookmarks-sync)
@ -19,6 +20,7 @@
  - [Privacy Manager](#privacy-manager)
  - [Terms of Service; Didn't Read](#terms-of-service-didnt-read)
  - [Fedora User Agent](#fedora-user-agent)
+  - [IPvFooBar](#ipvfoobar)
  - [Chrome Remote Desktop](#chrome-remote-desktop)
  - [Bias Finder](#bias-finder)
  - [Snowflake](#snowflake)
@ -40,6 +42,9 @@
 - [`doh-forced.json`](#doh-forcedjson)
 - [`doh-mullvad-base.json`](#doh-mullvad-basejson)
 - [`doh-quad9-ecs.json`](#doh-quad9-ecsjson)
+- [`doh-quad9-insecure-ecs.json`](#doh-quad9-insecure-ecsjson)
+- [`doh-quad9-insecure.json`](#doh-quad9-insecurejson)
+- [`doh-quad9.json`](#doh-quad9json)
 - [`enable-ech-ocsp.json`](#enable-ech-ocspjson)
 - [`enable-labs.json`](#enable-labsjson)
 - [`fix-edge-search.json`](#fix-edge-searchjson)
@ -61,6 +66,11 @@ to overlap with someone else.
 Changing `normal_installed` to `force_installed` would also prevent
 uninstallation.

+This does contain some bloat or something not necessary in all situations or
+even overlapping extensions, but there is an important side goal of _teaching
+users to disable extraneous extensions they don't need_ (unless I decide they
+do need something and thus it's `force_installed`.
+
 ### [Silk - Privacy Pass Client for the browser](https://chrome.google.com/webstore/detail/ajhmfdgkijocedmfjonnpjfojldioehi)

 - `ajhmfdgkijocedmfjonnpjfojldioehi`
@ -92,6 +102,10 @@ other people.
 OpenDyslexic font + highlighting for currently pointed paragraph. Improves my
 reading especially with more busy articles, even without dyslexia.

+### [IPvFoo](https://chromewebstore.google.com/detail/ipvfoo/ecanpcehffngcegjmadlcijfolapggal)
+
+- `ecanpcehffngcegjmadlcijfolapggal`
+
 ### [Dark Reader](https://chrome.google.com/webstore/detail/eimadpbcbfnmbkopoojfekhnkhdbieeh)

 - `eimadpbcbfnmbkopoojfekhnkhdbieeh`
@ -139,6 +153,10 @@ incognito is disabled (which again is not great idea for quick guest access?)
 Communicates websites that Ubuntu isn't the only Linux distribution and makes
 some offer rpm packages directly.

+### [IPvFooBar](https://chromewebstore.google.com/detail/ipvfoobar/iimpkhokkfekbpmoamlmcndclohnehhk)
+
+- `iimpkhokkfekbpmoamlmcndclohnehhk`
+
 ### [Chrome Remote Desktop](https://chrome.google.com/webstore/detail/inomeogfingihgjfjlpeplalcfajhgai)

 - `inomeogfingihgjfjlpeplalcfajhgai`
@ -267,7 +285,23 @@ Enables DNS-over-HTTPS with Mullvad Base, which features ad, malware & tracker b

 ## `doh-quad9-ecs.json`

-Enables DNS over HTTPS with Quad9 ECS enabled server.
+Enables DNS over HTTPS with Quad9 ECS enabled threat-blocking server and also contains
+their alternative port.
+
+## `doh-quad9-insecure-ecs.json`
+
+Enables DNS over HTTPS with Quad9 ECS enabled unfiltered server and also contains
+their alternative port. **No DNSSEC either.**
+
+## `doh-quad9-insecure.json`
+
+Enables DNS over HTTPS with Quad9 unfiltered server and also contains
+their alternative port. **No DNSSEC either.**
+
+## `doh-quad9.json`
+
+Enables DNS over HTTPS with Quad9 threat-blocking server and also contains
+their alternative port.

 ## `enable-ech-ocsp.json`

--- a/etc/opt/chromium/policies/managed/aminda-extensions.json
+++ b/etc/opt/chromium/policies/managed/aminda-extensions.json
@ -38,6 +38,12 @@
      "blocked_install_message": "uBlock Origin on integroitu AdNauseamiin, joka on forkki siitä.",
      "installation_mode": "blocked"
    },
+    "ecanpcehffngcegjmadlcijfolapggal": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "force_pinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
    "eimadpbcbfnmbkopoojfekhnkhdbieeh": {
      "installation_mode": "normal_installed",
      "override_update_url": true,
@ -86,6 +92,12 @@
      "toolbar_pin": "default_unpinned",
      "update_url": "https://clients2.google.com/service/update2/crx"
    },
+    "iimpkhokkfekbpmoamlmcndclohnehhk": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "force_pinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
    "inomeogfingihgjfjlpeplalcfajhgai": {
      "installation_mode": "normal_installed",
      "override_update_url": true,
--- a/etc/opt/chromium/policies/managed/doh-quad9-ecs.json
+++ b/etc/opt/chromium/policies/managed/doh-quad9-ecs.json
@ -1,3 +1,3 @@
 {
-  "DnsOverHttpsTemplates": "https://dns11.quad9.net/dns-query"
+  "DnsOverHttpsTemplates": "https://dns11.quad9.net/dns-query https://dns11.quad9.net:5053/dns-query"
 }
--- a/etc/opt/chromium/policies/managed/doh-quad9-insecure-ecs.json
+++ b/etc/opt/chromium/policies/managed/doh-quad9-insecure-ecs.json
@ -0,0 +1,3 @@
+{
+  "DnsOverHttpsTemplates": "https://dns12.quad9.net/dns-query https://dns12.quad9.net:5053/dns-query"
+}
--- a/etc/opt/chromium/policies/managed/doh-quad9-insecure.json
+++ b/etc/opt/chromium/policies/managed/doh-quad9-insecure.json
@ -0,0 +1,3 @@
+{
+  "DnsOverHttpsTemplates": "https://dns10.quad9.net/dns-query https://dns10.quad9.net:5053/dns-query"
+}
--- a/etc/opt/chromium/policies/managed/doh-quad9.json
+++ b/etc/opt/chromium/policies/managed/doh-quad9.json
@ -1,3 +1,3 @@
 {
-  "DnsOverHttpsTemplates": "https://dns.quad9.net/dns-query"
+  "DnsOverHttpsTemplates": "https://dns.quad9.net/dns-query https://dns.quad9.net:5053/dns-query"
 }
--- a/etc/systemd/resolved.conf.d/00-no-local-resolver.conf
+++ b/etc/systemd/resolved.conf.d/00-no-local-resolver.conf
@ -15,3 +15,5 @@ Domains=~.
 MulticastDNS=true
 # Microsoft Windows compatibility?
 LLMNR=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/00-only-local-resolver.conf
+++ b/etc/systemd/resolved.conf.d/00-only-local-resolver.conf
@ -10,3 +10,5 @@ Domains=~.
 MulticastDNS=true
 # Microsoft Windows compatibility?
 LLMNR=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/dot-443.conf
+++ b/etc/systemd/resolved.conf.d/dot-443.conf
@ -0,0 +1,5 @@
+[Resolve]
+DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
+#DNSOverTLS=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/dot-adguard.conf
+++ b/etc/systemd/resolved.conf.d/dot-adguard.conf
@ -1,5 +1,5 @@
 [Resolve]
 DNS=2a10:50c0::ad1:ff#dns.adguard.com 94.140.14.14#dns.adguard.com 2a10:50c0::ad2:ff#dns.adguard.com 94.140.15.15#dns.adguard.com
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/dot-cloudflare.conf
+++ b/etc/systemd/resolved.conf.d/dot-cloudflare.conf
@ -1,5 +1,5 @@
 [Resolve]
 DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/dot-dns0.conf
+++ b/etc/systemd/resolved.conf.d/dot-dns0.conf
@ -3,6 +3,6 @@ DNS=2a0f:fc80::#dns0.eu 2a0f:fc81::#dns0.eu 193.110.81.0#dns0.eu 185.253.5.0#dns
 #DNS=2a0f:fc80::1#kids.dns0.eu 2a0f:fc81::1#kids.dns0.eu 193.110.81.1#kids.dns0.eu 185.253.5.1#kids.dns0.eu
 #DNS=2a0f:fc80::ffff#open.dns0.eu 2a0f:fc81::ffff#open.dns0.eu 193.110.81.254#open.dns0.eu 185.253.5.254#open.dns0.eu
 #DNS=2a0f:fc80::9#zero.dns0.eu 2a0f:fc81::9#zero.dns0.eu 193.110.81.9#zero.dns0.eu 185.253.5.9#zero.dns0.eu
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/dot-mullvad.conf
+++ b/etc/systemd/resolved.conf.d/dot-mullvad.conf
@ -4,6 +4,6 @@ DNS=2a07:e340::2#dns.mullvad.net 194.242.2.2#dns.mullvad.net
 #DNS=2a07:e340::4#base.dns.mullvad.net 194.242.2.4#base.dns.mullvad.net
 #DNS=2a07:e340::5#extended.dns.mullvad.net 194.242.2.5#extended.dns.mullvad.net
 #DNS=2a07:e340::9#all.dns.mullvad.net 194.242.2.9#all.dns.mullvad.net
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/dot-quad9.conf
+++ b/etc/systemd/resolved.conf.d/dot-quad9.conf
@ -1,12 +1,16 @@
 [Resolve]
 # Secure
 DNS=2620:fe::9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 9.9.9.9#dns.quad9.net
+DNS=[2620:fe::9]:8853#dns.quad9.net 149.112.112.112:8853#dns.quad9.net [2620:fe::fe]:8853#dns.quad9.net 9.9.9.9:8853#dns.quad9.net
 # No Threat Blocking
 #DNS=2620:fe::10#dns10.quad9.net 149.112.112.10#dns10.quad9.net 2620:fe::fe:10#dns10.quad9.net 9.9.9.10#dns10.quad9.net
+#DNS=[2620:fe::10]:8853#dns10.quad9.net 149.112.112.10:8853#dns10.quad9.net [2620:fe::fe:10]:8853#dns10.quad9.net 9.9.9.10:8853#dns10.quad9.net
 # Secure + ECS
 #DNS=2620:fe::11#dns11.quad9.net 149.112.112.11#dns11.quad9.net 2620:fe::fe:11#dns11.quad9.net 9.9.9.11#dns11.quad9.net
+#DNS=[2620:fe::11]:8853#dns11.quad9.net 149.112.112.11:8853#dns11.quad9.net [2620:fe::fe:11]:8853#dns11.quad9.net 9.9.9.11:8853#dns11.quad9.net
 # No Threat Blocking + ECS
 #DNS=9.9.9.12#dns12.quad9.net 149.112.112.12#dns12.quad9.net 2620:fe::12#dns12.quad9.net 2620:fe::fe:12#dns12.quad9.net
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
+#DNS=9.9.9.12:8853#dns12.quad9.net 149.112.112.12:8853#dns12.quad9.net [2620:fe::12]:8853#dns12.quad9.net [2620:fe::fe:12]:8853#dns12.quad9.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd
--- a/etc/systemd/resolved.conf.d/nordvpn.conf
+++ b/etc/systemd/resolved.conf.d/nordvpn.conf
@ -1,3 +1,5 @@
 [Resolve]
 DNS=2400:bb40:4444::103 2400:bb40:8888::103
 DNS=103.86.96.100 103.86.99.100
+
+# vim: filetype=systemd
--- a/etc/unbound/unbound.conf.d/dot-quad9.conf
+++ b/etc/unbound/unbound.conf.d/dot-quad9.conf
@ -21,20 +21,36 @@ forward-zone:
 	forward-addr: 9.9.9.9@853#dns.quad9.net
 	forward-addr: 2620:fe::9@853#dns.quad9.net
 	forward-addr: 149.112.112.112@853#dns.quad9.net
+	forward-addr: 2620:fe::fe@8853#dns.quad9.net
+	forward-addr: 9.9.9.9@8853#dns.quad9.net
+	forward-addr: 2620:fe::9@8853#dns.quad9.net
+	forward-addr: 149.112.112.112@8853#dns.quad9.net
 	## No Threat Blocking
 	#forward-addr: 2620:fe::fe:10@853#dns10.quad9.net
 	#forward-addr: 149.112.112.10@853#dns10.quad9.net
 	#forward-addr: 2620:fe::10@853#dns10.quad9.net
 	#forward-addr: 9.9.9.10@853#dns10.quad9.net
+	#forward-addr: 2620:fe::fe:10@8853#dns10.quad9.net
+	#forward-addr: 149.112.112.10@8853#dns10.quad9.net
+	#forward-addr: 2620:fe::10@8853#dns10.quad9.net
+	#forward-addr: 9.9.9.10@8853#dns10.quad9.net
 	## Secure + ECS
 	#forward-addr: 2620:fe::fe:11@853#dns11.quad9.net
 	#forward-addr: 9.9.9.11@853#dns11.quad9.net
 	#forward-addr: 2620:fe::11@853#dns11.quad9.net
 	#forward-addr: 149.112.112.11@853#dns11.quad9.net
+	#forward-addr: 2620:fe::fe:11@8853#dns11.quad9.net
+	#forward-addr: 9.9.9.11@8853#dns11.quad9.net
+	#forward-addr: 2620:fe::11@8853#dns11.quad9.net
+	#forward-addr: 149.112.112.11@8853#dns11.quad9.net
 	## No Threat Blocking + ECS
 	#forward-addr: 2620:fe::fe:12@853#dns12.quad9.net
 	#forward-addr: 9.9.9.12@853#dns12.quad9.net
 	#forward-addr: 2620:fe::12@853#dns12.quad9.net
 	#forward-addr: 149.112.112.12@853#dns12.quad9.net
+	#forward-addr: 2620:fe::fe:12@8853#dns12.quad9.net
+	#forward-addr: 9.9.9.12@8853#dns12.quad9.net
+	#forward-addr: 2620:fe::12@8853#dns12.quad9.net
+	#forward-addr: 149.112.112.12@8853#dns12.quad9.net

 # vim: filetype=unbound.conf
Author	SHA1	Message	Date
Aminda Suomalainen	7379241a20	chromium: add the rest of Quad9 & update README.md	2024-04-21 11:35:28 +03:00
Aminda Suomalainen	3540f2442e	chromium/doh-quad9*: add alternative port as Chromium allows multiple	2024-04-21 11:28:07 +03:00
Aminda Suomalainen	eb47fac4cb	systemd-resolved: add vim modelines	2024-04-21 10:58:45 +03:00
Aminda Suomalainen	f126e681a2	systemd-resolved: split applied-privacy#443 to its own file as resolved configs don't exclude each other	2024-04-21 10:57:25 +03:00
Aminda Suomalainen	a0ccd790ab	unbound & systemd-resolved: add Quad9 alternative port	2024-04-21 10:54:22 +03:00
Aminda Suomalainen	e64e4e7fd0	firefox: DisableEncryptedClientHello: false I am not sure if this does anything, I just saw a message in logs and it didn't trigger an error	2024-04-21 10:13:29 +03:00
Aminda Suomalainen	6a97040386	firefox: add IPvFoo*	2024-04-21 10:08:43 +03:00
Aminda Suomalainen	069da00a38	Chromium: add IPvFoo* and note that users should go through extensions	2024-04-21 09:58:30 +03:00