{firefox,chromium} policy: disable PrivacyBadger on Element Web instances

etc/firefox/policies/policies.json

@@ -4,6 +4,12 @@
       "Extensions": {
         "jid1-MnnxcxisBPnSXQ-eff@jetpack": {
           "checkForDNTPolicy": true,
+          "disabledSites": [
+            "app.element.io",
+            "staging.element.io",
+            "develop.element.io",
+            "chat.pikaviestin.fi"
+          ],
           "learnInIncognito": true,
           "learnLocally": true,
           "sendDNTSignal": true,

etc/opt/chromium/policies/managed/README.md

@@ -18,6 +18,7 @@
   - [Privacy Manager](#privacy-manager)
   - [Terms of Service; Didn't Read](#terms-of-service-didnt-read)
   - [Fedora User Agent](#fedora-user-agent)
+  - [Chrome Remote Desktop](#chrome-remote-desktop)
   - [Bias Finder](#bias-finder)
   - [Snowflake](#snowflake)
   - [AdNauseam](#adnauseam)
@@ -122,6 +123,17 @@ incognito is disabled (which again is not great idea for quick guest access?)
 Communicates websites that Ubuntu isn't the only Linux distribution and makes
 some offer rpm packages directly.
 
+### [Chrome Remote Desktop](https://chrome.google.com/webstore/detail/inomeogfingihgjfjlpeplalcfajhgai)
+
+- `inomeogfingihgjfjlpeplalcfajhgai`
+
+Remote support integrated to Chrome.
+
+The additional component is:
+
+- Debian: `https://dl.google.com/linux/direct/chrome-remote-desktop_current_amd64.deb`
+- Others: _unsupported_
+
 ### [Bias Finder](https://chromewebstore.google.com/detail/jojjlkfeofgcjeanbpghcapjcccbakop)
 
 Political bias of English language media sites powered by allsides.com

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -3,6 +3,12 @@
     "extensions": {
       "pkehgijcmpdhfbdbbnkijodmdjhbjlgp": {
         "checkForDNTPolicy": true,
+        "disabledSites": [
+          "app.element.io",
+          "staging.element.io",
+          "develop.element.io",
+          "chat.pikaviestin.fi"
+        ],
         "learnInIncognito": true,
         "learnLocally": true,
         "sendDNTSignal": true,
@@ -23,9 +29,9 @@
       "installation_mode": "normal_installed",
       "override_update_url": true,
       "runtime_allowed_hosts": [
-        "*://*.duckduckgo.com/*",
+        "*://*.duckduckgo.com",
         "*://*.google.com",
-        "*://*.bing.com/*"
+        "*://*.bing.com"
       ],
       "runtime_blocked_hosts": [
         "<all_urls>"
@@ -53,7 +59,7 @@
       "installation_mode": "normal_installed",
       "override_update_url": true,
       "runtime_allowed_hosts": [
-        "*://*.archive.org/*"
+        "*://*.archive.org"
       ],
       "runtime_blocked_hosts": [
         "<all_urls>"
@@ -79,6 +85,12 @@
       "toolbar_pin": "default_unpinned",
       "update_url": "https://clients2.google.com/service/update2/crx"
     },
+    "inomeogfingihgjfjlpeplalcfajhgai": {
+      "installation_mode": "normal_installed",
+      "override_update_url": true,
+      "toolbar_pin": "default_unpinned",
+      "update_url": "https://clients2.google.com/service/update2/crx"
+    },
     "jojjlkfeofgcjeanbpghcapjcccbakop": {
       "installation_mode": "normal_installed",
       "override_update_url": true,

etc/sudoers.d/teamviewerd

@@ -0,0 +1,8 @@
+# Fedora
+%wheel ALL=NOPASSWD: /bin/systemctl stop teamviewerd.service
+%wheel ALL=NOPASSWD: /bin/systemctl start teamviewerd.service
+%wheel ALL=NOPASSWD: /bin/systemctl restart teamviewerd.service
+# Debian
+%sudo ALL=NOPASSWD: /bin/systemctl stop teamviewerd.service
+%sudo ALL=NOPASSWD: /bin/systemctl start teamviewerd.service
+%sudo ALL=NOPASSWD: /bin/systemctl restart teamviewerd.service

etc/sysctl.d/99-enable-ipv6.conf

@@ -0,0 +1,7 @@
+# This is only required because of NordVPN
+net.ipv6.conf.all.disable_ipv6 = 0
+net.ipv6.conf.default.disable_ipv6 = 0
+net.ipv6.conf.lo.disable_ipv6 = 0
+net.ipv6.conf.tun0.disable_ipv6 = 0
+net.ipv6.conf.nordlynx.disable_ipv6 = 0
+net.ipv6.conf.yggdrasil.disable_ipv6 = 0

etc/yum.repos.d/teamviewer.repo

@@ -0,0 +1,10 @@
+# This is directly what https://www.teamviewer.com/en/download/linux/ gives
+# minus these two lines of comments.
+[teamviewer]
+name=TeamViewer - $basearch
+baseurl=https://linux.teamviewer.com/yum/stable/main/binary-$basearch/
+gpgkey=https://linux.teamviewer.com/pubkey/currentkey.asc
+gpgcheck=1
+repo_gpgcheck=1
+enabled=1
+type=rpm-md