unbound/insecure-domains: add norwegianwifi.com

while it's unlikely for me to run unbound on flight

conf/librewolf.overrides.cfg.js

@@ -79,7 +79,7 @@ defaultPref("network.dns.use_https_rr_as_altsvc", true);
 defaultPref("network.trr.exclude-etc-hosts", false);
 defaultPref(
 	"network.trr.excluded-domains",
-	"http.badssl.com,norwegianwifi.com",
+	"http.badssl.com,norwegianwifi.com,mywifiext.net,tplinkrepeater.net,router.asus.com",
 );
 
 // Default UI scale

conf/sway/config.d/autostart-foot-journalctl.conf

@@ -1,6 +1,7 @@
 exec --no-startup-id foot --title=system\ journal journalctl -f
 exec --no-startup-id foot --title=user\ journal journalctl -f --user
 exec --no-startup-id foot --title=iwd\ log journalctl -u iwd -f
+exec --no-startup-id foot --title=networkd\ log journalctl -u systemd-networkd -f
 exec --no-startup-id foot --title=resolved\ log journalctl -u systemd-resolved -f
 exec --no-startup-id foot --title=unbound\ log journalctl -u unbound -f
 # Debian uses chrony, Fedora chronyd. Comment inappropiate.

etc/iwd/main.conf

@@ -12,7 +12,8 @@ Country=FI
 use_default_interface=true
 
 # build-in network configuration including DHCP client
-EnableNetworkConfiguration=true
+# true if not using systemd-networkd!
+#EnableNetworkConfiguration=false
 
 # NOTE! Disable this in case of trouble connecting to network entirely, e.g.
 # REALTEK devices!

etc/systemd/network/10-wlan.network

@@ -9,9 +9,11 @@ Type=wlan
 RequiredFamilyForOnline=both
 # Always set administrative state to up. Implies RequiredForOnline=yes
 ActivationPolicy=always-up
-# Managed by iwd
-Unmanaged=true
+# If something else (like iwd EnableNetworkConfiguration=true) manages network,
+# uncomment
+#Unmanaged=true
 
 [Network]
+DHCP=yes
 IPv6PrivacyExtensions=true
 IPv6LinkLocalAddressGenerationMode=stable-privacy

etc/systemd/system/nordvpnd.service.d/.gitignore

@@ -0,0 +1,3 @@
+iwd.conf
+network-online.conf
+never-fail.conf

etc/systemd/system/nordvpnd.service.d/iwd.conf

@@ -0,0 +1 @@
+../service.d/iwd.conf

etc/systemd/system/nordvpnd.service.d/network-online.conf

@@ -0,0 +1 @@
+../service.d/network-online.conf

etc/systemd/system/nordvpnd.service.d/never-fail.conf

@@ -0,0 +1 @@
+../service.d/never-fail.conf

etc/systemd/system/service.d/iwd.conf

@@ -0,0 +1,3 @@
+[Unit]
+Wants=iwd.service
+After=iwd.service

etc/systemd/system/service.d/network-online.conf

@@ -0,0 +1,3 @@
+[Unit]
+Wants=network-online.service
+After=network-online.service

etc/unbound/unbound.conf.d/00-insecure-domains.conf

@@ -21,6 +21,11 @@ forward-zone:
 	forward-tls-upstream: no
 	forward-addr: 8.8.8.8
 
+forward-zone:
+	name: "norwegianwifi.com"
+	forward-tls-upstream: no
+	forward-addr: 8.8.8.8
+
 # Can I refer to subdomain as a zone?
 forward-zone:
 	name: "http.badssl.com"