chromium: add the rest of Quad9 & update README.md

I am not sure if this does anything, I just saw a message in logs and it didn't trigger an error

etc/firefox/policies/policies.json

@@ -27,6 +27,7 @@
       "Locked": false,
       "ProviderURL": "https://dns0.eu/"
     },
+    "DisableEncryptedClientHello": false,
     "DisablePocket": false,
     "EnableTrackingProtection": {
       "Cryptomining": true,
@@ -51,6 +52,14 @@
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipfs-companion/latest.xpi",
         "installation_mode": "normal_installed"
       },
+      "ipvfoo@pmarks.net": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipvfoo/latest.xpi",
+        "installation_mode": "normal_installed"
+      },
+      "ipvfoobar@napr.eu": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest//ipvfoobar/latest.xpi",
+        "installation_mode": "normal_installed"
+      },
       "jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/terms-of-service-didnt-read/latest.xpi",
         "installation_mode": "normal_installed"

etc/opt/chromium/policies/managed/README.md

@@ -12,6 +12,7 @@
   - [Silk - Privacy Pass Client for the browser](#silk---privacy-pass-client-for-the-browser)
   - [NoScript](#noscript)
   - [OpenDyslexic](#opendyslexic)
+  - [IPvFoo](#ipvfoo)
   - [Dark Reader](#dark-reader)
   - [Indiewiki Buddy](#indiewiki-buddy)
   - [Floccus bookmarks sync](#floccus-bookmarks-sync)
@@ -19,6 +20,7 @@
   - [Privacy Manager](#privacy-manager)
   - [Terms of Service; Didn't Read](#terms-of-service-didnt-read)
   - [Fedora User Agent](#fedora-user-agent)
+  - [IPvFooBar](#ipvfoobar)
   - [Chrome Remote Desktop](#chrome-remote-desktop)
   - [Bias Finder](#bias-finder)
   - [Snowflake](#snowflake)
@@ -40,6 +42,9 @@
 - [`doh-forced.json`](#doh-forcedjson)
 - [`doh-mullvad-base.json`](#doh-mullvad-basejson)
 - [`doh-quad9-ecs.json`](#doh-quad9-ecsjson)
+- [`doh-quad9-insecure-ecs.json`](#doh-quad9-insecure-ecsjson)
+- [`doh-quad9-insecure.json`](#doh-quad9-insecurejson)
+- [`doh-quad9.json`](#doh-quad9json)
 - [`enable-ech-ocsp.json`](#enable-ech-ocspjson)
 - [`enable-labs.json`](#enable-labsjson)
 - [`fix-edge-search.json`](#fix-edge-searchjson)
@@ -61,6 +66,11 @@ to overlap with someone else.
 Changing `normal_installed` to `force_installed` would also prevent
 uninstallation.
 
+This does contain some bloat or something not necessary in all situations or
+even overlapping extensions, but there is an important side goal of _teaching
+users to disable extraneous extensions they don't need_ (unless I decide they
+do need something and thus it's `force_installed`.
+
 ### [Silk - Privacy Pass Client for the browser](https://chrome.google.com/webstore/detail/ajhmfdgkijocedmfjonnpjfojldioehi)
 
 - `ajhmfdgkijocedmfjonnpjfojldioehi`
@@ -92,6 +102,10 @@ other people.
 OpenDyslexic font + highlighting for currently pointed paragraph. Improves my
 reading especially with more busy articles, even without dyslexia.
 
+### [IPvFoo](https://chromewebstore.google.com/detail/ipvfoo/ecanpcehffngcegjmadlcijfolapggal)
+
+- `ecanpcehffngcegjmadlcijfolapggal`
+
 ### [Dark Reader](https://chrome.google.com/webstore/detail/eimadpbcbfnmbkopoojfekhnkhdbieeh)
 
 - `eimadpbcbfnmbkopoojfekhnkhdbieeh`
@@ -139,6 +153,10 @@ incognito is disabled (which again is not great idea for quick guest access?)
 Communicates websites that Ubuntu isn't the only Linux distribution and makes
 some offer rpm packages directly.
 
+### [IPvFooBar](https://chromewebstore.google.com/detail/ipvfoobar/iimpkhokkfekbpmoamlmcndclohnehhk)
+
+- `iimpkhokkfekbpmoamlmcndclohnehhk`
+
 ### [Chrome Remote Desktop](https://chrome.google.com/webstore/detail/inomeogfingihgjfjlpeplalcfajhgai)
 
 - `inomeogfingihgjfjlpeplalcfajhgai`
@@ -267,7 +285,23 @@ Enables DNS-over-HTTPS with Mullvad Base, which features ad, malware & tracker b
 
 ## `doh-quad9-ecs.json`
 
-Enables DNS over HTTPS with Quad9 ECS enabled server.
+Enables DNS over HTTPS with Quad9 ECS enabled threat-blocking server and also contains
+their alternative port.
+
+## `doh-quad9-insecure-ecs.json`
+
+Enables DNS over HTTPS with Quad9 ECS enabled unfiltered server and also contains
+their alternative port. **No DNSSEC either.**
+
+## `doh-quad9-insecure.json`
+
+Enables DNS over HTTPS with Quad9 unfiltered server and also contains
+their alternative port. **No DNSSEC either.**
+
+## `doh-quad9.json`
+
+Enables DNS over HTTPS with Quad9 threat-blocking server and also contains
+their alternative port.
 
 ## `enable-ech-ocsp.json`
 

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -38,6 +38,12 @@
       "blocked_install_message": "uBlock Origin on integroitu AdNauseamiin, joka on forkki siitä.",
       "installation_mode": "blocked"
     },
+    "ecanpcehffngcegjmadlcijfolapggal": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "force_pinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
     "eimadpbcbfnmbkopoojfekhnkhdbieeh": {
       "installation_mode": "normal_installed",
       "override_update_url": true,
@@ -86,6 +92,12 @@
       "toolbar_pin": "default_unpinned",
       "update_url": "https://clients2.google.com/service/update2/crx"
     },
+    "iimpkhokkfekbpmoamlmcndclohnehhk": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "force_pinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
     "inomeogfingihgjfjlpeplalcfajhgai": {
       "installation_mode": "normal_installed",
       "override_update_url": true,

etc/opt/chromium/policies/managed/doh-quad9-ecs.json

@@ -1,3 +1,3 @@
 {
-  "DnsOverHttpsTemplates": "https://dns11.quad9.net/dns-query"
+  "DnsOverHttpsTemplates": "https://dns11.quad9.net/dns-query https://dns11.quad9.net:5053/dns-query"
 }

etc/opt/chromium/policies/managed/doh-quad9-insecure-ecs.json

@@ -0,0 +1,3 @@
+{
+  "DnsOverHttpsTemplates": "https://dns12.quad9.net/dns-query https://dns12.quad9.net:5053/dns-query"
+}

etc/opt/chromium/policies/managed/doh-quad9-insecure.json

@@ -0,0 +1,3 @@
+{
+  "DnsOverHttpsTemplates": "https://dns10.quad9.net/dns-query https://dns10.quad9.net:5053/dns-query"
+}

etc/opt/chromium/policies/managed/doh-quad9.json

@@ -1,3 +1,3 @@
 {
-  "DnsOverHttpsTemplates": "https://dns.quad9.net/dns-query"
+  "DnsOverHttpsTemplates": "https://dns.quad9.net/dns-query https://dns.quad9.net:5053/dns-query"
 }

etc/systemd/resolved.conf.d/00-no-local-resolver.conf

@@ -15,3 +15,5 @@ Domains=~.
 MulticastDNS=true
 # Microsoft Windows compatibility?
 LLMNR=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/00-only-local-resolver.conf

@@ -10,3 +10,5 @@ Domains=~.
 MulticastDNS=true
 # Microsoft Windows compatibility?
 LLMNR=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/dot-443.conf

@@ -0,0 +1,5 @@
+[Resolve]
+DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
+#DNSOverTLS=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/dot-adguard.conf

@@ -1,5 +1,5 @@
 [Resolve]
 DNS=2a10:50c0::ad1:ff#dns.adguard.com 94.140.14.14#dns.adguard.com 2a10:50c0::ad2:ff#dns.adguard.com 94.140.15.15#dns.adguard.com
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/dot-cloudflare.conf

@@ -1,5 +1,5 @@
 [Resolve]
 DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/dot-dns0.conf

@@ -3,6 +3,6 @@ DNS=2a0f:fc80::#dns0.eu 2a0f:fc81::#dns0.eu 193.110.81.0#dns0.eu 185.253.5.0#dns
 #DNS=2a0f:fc80::1#kids.dns0.eu 2a0f:fc81::1#kids.dns0.eu 193.110.81.1#kids.dns0.eu 185.253.5.1#kids.dns0.eu
 #DNS=2a0f:fc80::ffff#open.dns0.eu 2a0f:fc81::ffff#open.dns0.eu 193.110.81.254#open.dns0.eu 185.253.5.254#open.dns0.eu
 #DNS=2a0f:fc80::9#zero.dns0.eu 2a0f:fc81::9#zero.dns0.eu 193.110.81.9#zero.dns0.eu 185.253.5.9#zero.dns0.eu
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/dot-mullvad.conf

@@ -4,6 +4,6 @@ DNS=2a07:e340::2#dns.mullvad.net 194.242.2.2#dns.mullvad.net
 #DNS=2a07:e340::4#base.dns.mullvad.net 194.242.2.4#base.dns.mullvad.net
 #DNS=2a07:e340::5#extended.dns.mullvad.net 194.242.2.5#extended.dns.mullvad.net
 #DNS=2a07:e340::9#all.dns.mullvad.net 194.242.2.9#all.dns.mullvad.net
-# Uncomment for port 443 resolver
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/dot-quad9.conf

@@ -1,12 +1,16 @@
 [Resolve]
 # Secure
 DNS=2620:fe::9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 9.9.9.9#dns.quad9.net
+DNS=[2620:fe::9]:8853#dns.quad9.net 149.112.112.112:8853#dns.quad9.net [2620:fe::fe]:8853#dns.quad9.net 9.9.9.9:8853#dns.quad9.net
 # No Threat Blocking
 #DNS=2620:fe::10#dns10.quad9.net 149.112.112.10#dns10.quad9.net 2620:fe::fe:10#dns10.quad9.net 9.9.9.10#dns10.quad9.net
+#DNS=[2620:fe::10]:8853#dns10.quad9.net 149.112.112.10:8853#dns10.quad9.net [2620:fe::fe:10]:8853#dns10.quad9.net 9.9.9.10:8853#dns10.quad9.net
 # Secure + ECS
 #DNS=2620:fe::11#dns11.quad9.net 149.112.112.11#dns11.quad9.net 2620:fe::fe:11#dns11.quad9.net 9.9.9.11#dns11.quad9.net
+#DNS=[2620:fe::11]:8853#dns11.quad9.net 149.112.112.11:8853#dns11.quad9.net [2620:fe::fe:11]:8853#dns11.quad9.net 9.9.9.11:8853#dns11.quad9.net
 # No Threat Blocking + ECS
 #DNS=9.9.9.12#dns12.quad9.net 149.112.112.12#dns12.quad9.net 2620:fe::12#dns12.quad9.net 2620:fe::fe:12#dns12.quad9.net
-# Uncomment for port 443 resolver
+#DNS=9.9.9.12:8853#dns12.quad9.net 149.112.112.12:8853#dns12.quad9.net [2620:fe::12]:8853#dns12.quad9.net [2620:fe::fe:12]:8853#dns12.quad9.net
-#DNS=[2a02:1b8:10:234::2]:443#dot1.applied-privacy.net 146.255.56.98:443#dot1.applied-privacy.net
 #DNSOverTLS=true
+
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/nordvpn.conf

@@ -1,3 +1,5 @@
 [Resolve]
 DNS=2400:bb40:4444::103 2400:bb40:8888::103
 DNS=103.86.96.100 103.86.99.100
+
+# vim: filetype=systemd

etc/unbound/unbound.conf.d/dot-quad9.conf

@@ -21,20 +21,36 @@ forward-zone:
 	forward-addr: 9.9.9.9@853#dns.quad9.net
 	forward-addr: 2620:fe::9@853#dns.quad9.net
 	forward-addr: 149.112.112.112@853#dns.quad9.net
+	forward-addr: 2620:fe::fe@8853#dns.quad9.net
+	forward-addr: 9.9.9.9@8853#dns.quad9.net
+	forward-addr: 2620:fe::9@8853#dns.quad9.net
+	forward-addr: 149.112.112.112@8853#dns.quad9.net
 	## No Threat Blocking
 	#forward-addr: 2620:fe::fe:10@853#dns10.quad9.net
 	#forward-addr: 149.112.112.10@853#dns10.quad9.net
 	#forward-addr: 2620:fe::10@853#dns10.quad9.net
 	#forward-addr: 9.9.9.10@853#dns10.quad9.net
+	#forward-addr: 2620:fe::fe:10@8853#dns10.quad9.net
+	#forward-addr: 149.112.112.10@8853#dns10.quad9.net
+	#forward-addr: 2620:fe::10@8853#dns10.quad9.net
+	#forward-addr: 9.9.9.10@8853#dns10.quad9.net
 	## Secure + ECS
 	#forward-addr: 2620:fe::fe:11@853#dns11.quad9.net
 	#forward-addr: 9.9.9.11@853#dns11.quad9.net
 	#forward-addr: 2620:fe::11@853#dns11.quad9.net
 	#forward-addr: 149.112.112.11@853#dns11.quad9.net
+	#forward-addr: 2620:fe::fe:11@8853#dns11.quad9.net
+	#forward-addr: 9.9.9.11@8853#dns11.quad9.net
+	#forward-addr: 2620:fe::11@8853#dns11.quad9.net
+	#forward-addr: 149.112.112.11@8853#dns11.quad9.net
 	## No Threat Blocking + ECS
 	#forward-addr: 2620:fe::fe:12@853#dns12.quad9.net
 	#forward-addr: 9.9.9.12@853#dns12.quad9.net
 	#forward-addr: 2620:fe::12@853#dns12.quad9.net
 	#forward-addr: 149.112.112.12@853#dns12.quad9.net
+	#forward-addr: 2620:fe::fe:12@8853#dns12.quad9.net
+	#forward-addr: 9.9.9.12@8853#dns12.quad9.net
+	#forward-addr: 2620:fe::12@8853#dns12.quad9.net
+	#forward-addr: 149.112.112.12@8853#dns12.quad9.net
 
 # vim: filetype=unbound.conf