unbound/dot-dns0-quad9.conf: fix duplicate forward zone

It seems to work other than opening an extra window with just new tab page, but good enough

conf/sway/config.d/autostart-brave-pwa.conf

@@ -1,20 +1,28 @@
 # Autostarting Progressive WebApps using Brave
 # App IDs are theoretically the same globally
 
+# Brave itself so it's already running when the PWAs start and may avoid
+# another race condition (the sleep is for VPN/DNS in addition to secrets
+# store).
+exec --no-startup-id sleep 30 && /usr/local/bin/brave --profile-directory=Default
+
 # chat.pikaviestin.fi
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=gnfnegplbndhneeicgmmlacdcafhbloj --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=gnfnegplbndhneeicgmmlacdcafhbloj --app-run-on-os-login-mode=windowed
 
 # web.whatsapp.com
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=hnpfjngllnobngcgfapefoaidbinmjnm --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=hnpfjngllnobngcgfapefoaidbinmjnm --app-run-on-os-login-mode=windowed
 
 # latest.glowing-bear.org
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf --app-run-on-os-login-mode=windowed
 
 # web.telegram.org/a
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi --app-run-on-os-login-mode=windowed
 
 # ntfy.sh
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckng --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckng --app-run-on-os-login-mode=windowed
 
 # webchat.disroot.org
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ndhcmhblfbbcejhpmekjaoljlkgmlebj --app-run-on-os-login-mode=windowed
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=ndhcmhblfbbcejhpmekjaoljlkgmlebj --app-run-on-os-login-mode=windowed
+
+# music.youtube.com
+exec --no-startup-id sleep 45 && /usr/local/bin/brave --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod --app-run-on-os-login-mode=windowed

etc/firefox/policies/policies.json

@@ -43,6 +43,10 @@
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/adnauseam/latest.xpi",
         "installation_mode": "force_installed"
       },
+      "floccus@handmadeideas.org": {
+        "install_url": "https://addons.mozilla.org/firefox/downloads/latest/floccus/latest.xpi",
+        "installation_mode": "normal_installed"
+      },
       "ipfs-firefox-addon@lidel.org": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipfs-companion/latest.xpi",
         "installation_mode": "normal_installed"

etc/opt/chromium/policies/managed/README.md

@@ -14,6 +14,7 @@
   - [OpenDyslexic](#opendyslexic)
   - [Dark Reader](#dark-reader)
   - [Indiewiki Buddy](#indiewiki-buddy)
+  - [Floccus bookmarks sync](#floccus-bookmarks-sync)
   - [Wayback Machine](#wayback-machine)
   - [Privacy Manager](#privacy-manager)
   - [Terms of Service; Didn't Read](#terms-of-service-didnt-read)
@@ -102,6 +103,13 @@ in not so hardened Chromium for a bit due to hardened Firefox being too much
 for my task and there is no reason occassionally needed Chromium shouldn't be
 tolerable for a few minutes.
 
+### [Floccus bookmarks sync](https://chromewebstore.google.com/detail/floccus-bookmarks-sync/fnaicdffflnofjppbagibeoednhnbjhg)
+
+- `fnaicdffflnofjppbagibeoednhnbjhg`
+
+Bookmarks sync either through selfhosted webdav or Google Drive working even
+across different web browsers.
+
 ### [Wayback Machine](https://chrome.google.com/webstore/detail/fpnmgdkabkmnadcjpehmlllkndpkmiak)
 
 - `fpnmgdkabkmnadcjpehmlllkndpkmiak`

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -50,6 +50,12 @@
       "toolbar_pin": "default_unpinned",
       "update_url": "https://clients2.google.com/service/update2/crx"
     },
+    "fnaicdffflnofjppbagibeoednhnbjhg": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "default_unpinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
     "fpnmgdkabkmnadcjpehmlllkndpkmiak": {
       "installation_mode": "normal_installed",
       "override_update_url": true,

etc/resolv.tsv

@@ -10,15 +10,17 @@ BlahDNS Germany (encrypted-only, needs SNI)	https://doh-de.blahdns.com/dns-query
 Cleanbrowsing adult	https://doh.cleanbrowsing.org/doh/adult-filter/	adult-filter-dns.cleanbrowsing.org	2a0d:2a00:1::1	2a0d:2a00:2::1	185.228.168.10	185.228.169.11	https://my.cleanbrowsing.org/download-mobile-config.php?filter=adult	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Cleanbrowsing family (anti-proxy/VPN/Reddit)	https://doh.cleanbrowsing.org/doh/family-filter/	family-filter-dns.cleanbrowsing.org	2a0d:2a00:1:: 	2a0d:2a00:2::	185.228.168.168	185.228.169.168	https://my.cleanbrowsing.org/download-mobile-config.php?filter=family	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Cleanbrowsing security	https://doh.cleanbrowsing.org/doh/security-filter/	security-filter-dns.cleanbrowsing.org	2a0d:2a00:1::2	2a0d:2a00:2::2	185.228.168.9	85.228.169.9	https://my.cleanbrowsing.org/download-mobile-config.php?filter=security	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
-Cloudflare	https://cloudflare-dns.com/dns-query	cloudflare-dns.com	2606:4700:4700::1001	2606:4700:4700::1111	1.1.1.1	1.0.0.1		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
+Cloudflare (Android DoH3)	https://cloudflare-dns.com/dns-query	cloudflare-dns.com	2606:4700:4700::1001	2606:4700:4700::1111	1.1.1.1	1.0.0.1		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
-Cloudflare antimalware	https://security.cloudflare-dns.com/dns-query		2606:4700:4700::1112	2606:4700:4700::1002	1.1.1.2	1.0.0.2		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
+Cloudflare antimalware	https://security.cloudflare-dns.com/dns-query	security.cloudflare-dns.com	2606:4700:4700::1112	2606:4700:4700::1002	1.1.1.2	1.0.0.2		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
-Cloudflare family	https://family.cloudflare-dns.com/dns-query		2606:4700:4700::1113	2606:4700:4700::1003	1.1.1.3	1.0.0.3		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
+Cloudflare family	https://family.cloudflare-dns.com/dns-query	family.cloudflare-dns.com	2606:4700:4700::1113	2606:4700:4700::1003	1.1.1.3	1.0.0.3		no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
 Cloudflare MozillaFirefox	https://mozilla.cloudflare-dns.com/dns-query							no	https://developers.cloudflare.com/1.1.1.1/faq/#does-1.1.1.1-send-edns-client-subnet-header
 CZ.NIC ODVR	https://odvr.nic.cz/dns-query	odvr.nic.cz	2001:148f:ffff::1	2001:148f:fffe::1	193.17.47.1	185.43.135.1		No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 DNS0	https://dns0.eu	dns0.eu	2a0f:fc80::	2a0f:fc81::	193.110.81.0	185.253.5.0	https://www.dns0.eu/dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
 DNS0 Kids	https://kids.dns0.eu	kids.dns0.eu	2a0f:fc80::1	2a0f:fc81::1	193.110.81.1	185.253.5.1	https://www.dns0.eu/kids.dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
 DNS0 Open (unfiltered, discouraged)	https://open.dns0.eu	open.dns0.eu	2a0f:fc80::ffff	2a0f:fc81::ffff	193.110.81.254	185.253.5.254	https://dns0.eu/open.dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
 DNS0 Zero	https://zero.dns0.eu	zero.dns0.eu	2a0f:fc80::9	2a0f:fc81::9	193.110.81.9	185.253.5.9	https://www.dns0.eu/zero.dns0.eu.mobileconfig	private	https://www.dns0.eu/privacy
+Google DNS (Android DoH3)	https://dns.google/dns-query	dns.google	2001:4860:4860::8888	2001:4860:4860::8844	8.8.8.8	8.8.4.4		yes	https://developers.google.com/speed/public-dns/docs/ecs
+Google DNS64 (Android DoH3)	https://dns64.dns.google/dns-query	dns64.dns.google	2001:4860:4860::6464	2001:4860:4860::64				probably	https://developers.google.com/speed/public-dns/docs/ecs
 Mullvad Vanilla	https://dns.mullvad.net/dns-query	dns.mullvad.net	2a07:e340::2		194.242.2.2		https://github.com/mullvad/encrypted-dns-profiles	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Mullvad Adblock	https://adblock.dns.mullvad.net/dns-query	adblock.dns.mullvad.net	2a07:e340::3		194.242.2.3		https://github.com/mullvad/encrypted-dns-profiles	No 2023-03-11	I tested with https://gitea.blesmrt.net/mikaela/scripts/src/branch/master/bash/dns-ecs-debug.bash
 Mullvad Base	https://base.dns.mullvad.net/dns-query	base.dns.mullvad.net	2a07:e340::4		194.242.2.4		https://github.com/mullvad/encrypted-dns-profiles		

etc/unbound/unbound.conf.d/dot-dns0-quad9.conf

@@ -32,9 +32,6 @@ forward-zone:
 	# forward-addr: 185.253.5.9@853#zero.dns0.eu
 
 ## Quad9
-forward-zone:
-	name: "."
-	forward-tls-upstream: yes
 	## Default
 	# forward-addr: 2620:fe::fe@853#dns.quad9.net
 	# forward-addr: 9.9.9.9@853#dns.quad9.net

submodules/jauderho-nts-servers

@@ -1 +1 @@
-Subproject commit 9eab8051749ede4c1014e0c23840f3316e874027
+Subproject commit ee52e648efc64443185543fef1bc561691524751