unbound/dot-dns0-quad9.conf: fix duplicate forward zone

{firefox,chromium}: add Floccus bookmarks sync so I will remember its existence
sway/brave: add the browser itself, increase sleeps for PWAs
2024-04-14 14:23:58 +03:00 · 2024-04-14 14:10:39 +03:00 · 2024-04-14 12:41:23 +03:00 · 2024-04-14 09:21:56 +03:00 · 2024-04-14 09:18:05 +03:00 · 2024-04-14 09:10:06 +03:00
7 changed files with 38 additions and 13 deletions
--- a/conf/sway/config.d/autostart-brave-pwa.conf
+++ b/conf/sway/config.d/autostart-brave-pwa.conf
@ -1,20 +1,28 @@
 # Autostarting Progressive WebApps using Brave
 # App IDs are theoretically the same globally

+# Brave itself so it's already running when the PWAs start and may avoid
+# another race condition (the sleep is for VPN/DNS in addition to secrets
+# store).
+exec --no-startup-id sleep 30 && /usr/local/bin/brave --profile-directory=Default
+
 # chat.pikaviestin.fi
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=gnfnegplbndhneeicgmmlacdcafhbloj --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=gnfnegplbndhneeicgmmlacdcafhbloj --app-run-on-os-login-mode=windowed

 # web.whatsapp.com
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=hnpfjngllnobngcgfapefoaidbinmjnm --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=hnpfjngllnobngcgfapefoaidbinmjnm --app-run-on-os-login-mode=windowed

 # latest.glowing-bear.org
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf --app-run-on-os-login-mode=windowed

 # web.telegram.org/a
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi --app-run-on-os-login-mode=windowed

 # ntfy.sh
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckng --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckng --app-run-on-os-login-mode=windowed

 # webchat.disroot.org
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ndhcmhblfbbcejhpmekjaoljlkgmlebj --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=ndhcmhblfbbcejhpmekjaoljlkgmlebj --app-run-on-os-login-mode=windowed
+
+# music.youtube.com
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod --app-run-on-os-login-mode=windowed
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@ -43,6 +43,10 @@
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/adnauseam/latest.xpi",
        "installation_mode": "force_installed"
      },
+      "floccus@handmadeideas.org": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/floccus/latest.xpi",
+        "installation_mode": "normal_installed"
+      },
      "ipfs-firefox-addon@lidel.org": {
        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipfs-companion/latest.xpi",
        "installation_mode": "normal_installed"
--- a/etc/opt/chromium/policies/managed/README.md
+++ b/etc/opt/chromium/policies/managed/README.md
@ -14,6 +14,7 @@
  - [OpenDyslexic](#opendyslexic)
  - [Dark Reader](#dark-reader)
  - [Indiewiki Buddy](#indiewiki-buddy)
+  - [Floccus bookmarks sync](#floccus-bookmarks-sync)
  - [Wayback Machine](#wayback-machine)
  - [Privacy Manager](#privacy-manager)
  - [Terms of Service; Didn't Read](#terms-of-service-didnt-read)
@ -102,6 +103,13 @@ in not so hardened Chromium for a bit due to hardened Firefox being too much
 for my task and there is no reason occassionally needed Chromium shouldn't be
 tolerable for a few minutes.

+### [Floccus bookmarks sync](https://chromewebstore.google.com/detail/floccus-bookmarks-sync/fnaicdffflnofjppbagibeoednhnbjhg)
+
+- `fnaicdffflnofjppbagibeoednhnbjhg`
+
+Bookmarks sync either through selfhosted webdav or Google Drive working even
+across different web browsers.
+
 ### [Wayback Machine](https://chrome.google.com/webstore/detail/fpnmgdkabkmnadcjpehmlllkndpkmiak)

 - `fpnmgdkabkmnadcjpehmlllkndpkmiak`
--- a/etc/opt/chromium/policies/managed/aminda-extensions.json
+++ b/etc/opt/chromium/policies/managed/aminda-extensions.json
@ -50,6 +50,12 @@
      "toolbar_pin": "default_unpinned",
      "update_url": "https://clients2.google.com/service/update2/crx"
    },
+    "fnaicdffflnofjppbagibeoednhnbjhg": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "default_unpinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
    "fpnmgdkabkmnadcjpehmlllkndpkmiak": {
      "installation_mode": "normal_installed",
      "override_update_url": true,
--- a/etc/resolv.tsv
+++ b/etc/resolv.tsv
@ -10,15 +10,17 @@ BlahDNS Germany (encrypted-only, needs SNI)	https://doh-de.blahdns.com/dns-query
 Cleanbrowsing adult	https://doh.cleanbrowsing.org/doh/adult-filter/	adult-filter-dns.cleanbrowsing.org	2a0d:2a00:1::1	2a0d:2a00:2::1	185.228.168.10	185.228.169.11	https://my.cleanbrowsing.org/download-mobile-config.php?filter=adult	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Cleanbrowsing family (anti-proxy/VPN/Reddit)	https://doh.cleanbrowsing.org/doh/family-filter/	family-filter-dns.cleanbrowsing.org	2a0d:2a00:1:: 	2a0d:2a00:2::	185.228.168.168	185.228.169.168	https://my.cleanbrowsing.org/download-mobile-config.php?filter=family	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Cleanbrowsing security	https://doh.cleanbrowsing.org/doh/security-filter/	security-filter-dns.cleanbrowsing.org	2a0d:2a00:1::2	2a0d:2a00:2::2	185.228.168.9	85.228.169.9	https://my.cleanbrowsing.org/download-mobile-config.php?filter=security	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
-Cloudflare	https://cloudflare-dns.com/dns-query	cloudflare-dns.com	2606:4700:4700::1001	2606:4700:4700::1111	1.1.1.1	1.0.0.1		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
-Cloudflare antimalware	https://security.cloudflare-dns.com/dns-query		2606:4700:4700::1112	2606:4700:4700::1002	1.1.1.2	1.0.0.2		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
-Cloudflare family	https://family.cloudflare-dns.com/dns-query		2606:4700:4700::1113	2606:4700:4700::1003	1.1.1.3	1.0.0.3		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
+Cloudflare (Android DoH3)	https://cloudflare-dns.com/dns-query	cloudflare-dns.com	2606:4700:4700::1001	2606:4700:4700::1111	1.1.1.1	1.0.0.1		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
+Cloudflare antimalware	https://security.cloudflare-dns.com/dns-query	security.cloudflare-dns.com	2606:4700:4700::1112	2606:4700:4700::1002	1.1.1.2	1.0.0.2		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
+Cloudflare family	https://family.cloudflare-dns.com/dns-query	family.cloudflare-dns.com	2606:4700:4700::1113	2606:4700:4700::1003	1.1.1.3	1.0.0.3		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
 Cloudflare MozillaFirefox	https://mozilla.cloudflare-dns.com/dns-query							no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
 CZ.NIC ODVR	https://odvr.nic.cz/dns-query	odvr.nic.cz	2001:148f:ffff::1	2001:148f:fffe::1	193.17.47.1	185.43.135.1		No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 DNS0	https://dns0.eu	dns0.eu	2a0f:fc80::	2a0f:fc81::	193.110.81.0	185.253.5.0	https://www.dns0.eu/dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
 DNS0 Kids	https://kids.dns0.eu	kids.dns0.eu	2a0f:fc80::1	2a0f:fc81::1	193.110.81.1	185.253.5.1	https://www.dns0.eu/kids.dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
 DNS0 Open (unfiltered, discouraged)	https://open.dns0.eu	open.dns0.eu	2a0f:fc80::ffff	2a0f:fc81::ffff	193.110.81.254	185.253.5.254	https://dns0.eu/open.dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
 DNS0 Zero	https://zero.dns0.eu	zero.dns0.eu	2a0f:fc80::9	2a0f:fc81::9	193.110.81.9	185.253.5.9	https://www.dns0.eu/zero.dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
+Google DNS (Android DoH3)	https://dns.google/dns-query	dns.google	2001:4860:4860::8888	2001:4860:4860::8844	8.8.8.8	8.8.4.4		yes	https://developers.google.com/speed/public-dns/docs/ecs
+Google DNS64 (Android DoH3)	https://dns64.dns.google/dns-query	dns64.dns.google	2001:4860:4860::6464	2001:4860:4860::64				probably	https://developers.google.com/speed/public-dns/docs/ecs
 Mullvad Vanilla	https://dns.mullvad.net/dns-query	dns.mullvad.net	2a07:e340::2		194.242.2.2		https://github.com/mullvad/encrypted-dns-profiles	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Mullvad Adblock	https://adblock.dns.mullvad.net/dns-query	adblock.dns.mullvad.net	2a07:e340::3		194.242.2.3		https://github.com/mullvad/encrypted-dns-profiles	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Mullvad Base	https://base.dns.mullvad.net/dns-query	base.dns.mullvad.net	2a07:e340::4		194.242.2.4		https://github.com/mullvad/encrypted-dns-profiles		
--- a/etc/unbound/unbound.conf.d/dot-dns0-quad9.conf
+++ b/etc/unbound/unbound.conf.d/dot-dns0-quad9.conf
@ -32,9 +32,6 @@ forward-zone:
 	# forward-addr: 185.253.5.9@853#zero.dns0.eu

 ## Quad9
-forward-zone:
-	name: "."
-	forward-tls-upstream: yes
 	## Default
 	# forward-addr: 2620:fe::fe@853#dns.quad9.net
 	# forward-addr: 9.9.9.9@853#dns.quad9.net
--- a/submodules/jauderho-nts-servers
+++ b/submodules/jauderho-nts-servers
@ -1 +1 @@
-Subproject commit 9eab8051749ede4c1014e0c23840f3316e874027
+Subproject commit ee52e648efc64443185543fef1bc561691524751
Author	SHA1	Message	Date
Aminda Suomalainen	8c748dd2d6	unbound/dot-dns0-quad9.conf: fix duplicate forward zone	2024-04-14 14:23:58 +03:00
Aminda Suomalainen	ac922aea86	{firefox,chromium}: add Floccus bookmarks sync so I will remember its existence	2024-04-14 14:10:39 +03:00
Aminda Suomalainen	89fc9bd2ed	sway/brave: add the browser itself, increase sleeps for PWAs It seems to work other than opening an extra window with just new tab page, but good enough	2024-04-14 12:41:23 +03:00
Aminda Suomalainen	64933b691f	update submodule jauderho-nts-servers	2024-04-14 09:21:56 +03:00
Aminda Suomalainen	cd2ae2c852	etc/resolv.tsv: add Google DNS & DNS64 as they too are Android hard-coded for DoH3	2024-04-14 09:18:05 +03:00
Aminda Suomalainen	cc25967b22	etc/resolv.tsv: note Cloudflare being DoH3 on Android, add Cloudflare antimalware/family DoT addresses	2024-04-14 09:10:06 +03:00
Aminda Suomalainen	85dc4b8c5b	sway/brave: double sleep for DNS race condition with VPN? At least it works	2024-04-14 08:20:55 +03:00