etc/dnf/dnf.conf

@@ -1,7 +1,5 @@
 [main]
 gpgcheck=1
-# 3 is the default, increase this in case of kernel upgrade trouble (unrelated
-# to space, see dracut.conf.d for that)
 installonly_limit=3
 clean_requirements_on_remove=True
 best=False

etc/sudoers.d/nordvpnd

@@ -4,7 +4,6 @@
 %nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.socket
 %nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.socket
 %nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
-%nordvpn ALL=NOPASSWD: /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
 # used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
 # it works
 %nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service
@@ -14,10 +13,8 @@
 # Tells Chrony we are connected and thus maybe connects to IPv6 NTP servers
 %nordvpn ALL=NOPASSWD: /usr/bin/chronyc online
 # Clearing DNS caches once we are disconnected
-#%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
-%nordvpn ALL=NOPASSWD: /usr/sbin/unbound-control reload
-#%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
-%nordvpn ALL=NOPASSWD: /usr/bin/resolvectl flush-caches
+%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
+%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
 # Tor complains about failures for a while and then notes IP change and
 # regenerates keys, so it should probably be here too.
 %nordvpn ALL=NOPASSWD: /bin/systemctl restart tor.service

rc/curlrc

@@ -1,14 +1,2 @@
 # ~/.curlrc
-
-# DNS-over-HTTPS (maybe HTTP/3, I don't know)
-#
-# https://dns0.eu - Anycast with servers in the EU. Private ECS.
-#doh-url = https://dns0.eu/
-#
-# https://quad9.net - Anycast, no ECS
-doh-url = https://dns.quad9.net/dns-query
-# ECS
-#doh-url = https://dns.quad9.net/dns-query
-
-# Attempt to use HTTP/3
-http3
+doh-url = https://dns0.eu