install: violate security further by installing sudoers.d files (although more harmless ones)

conf/MangoHud.conf

@@ -0,0 +1,34 @@
+# ~/.MangoHud/$APPNAME.conf
+# MangoHud.conf in binary directory
+# ~/.MangoHud/MangoHud.conf
+background_alpha=0
+battery_time
+battery
+blacklist=
+cpu_stats
+cpu_temp
+device_battery=gamepad+mouse
+device_battery_icon
+display_server
+fan
+font_size=13
+fps
+frametime
+frame_timing
+gpu_stats
+gpu_temp
+horizontal
+mangoapp_steam
+no_small_font
+position=bottom-left
+ram
+read_cfg
+retro
+swap
+text_outline
+throttling_status
+time
+time_format=%X
+time_no_label
+vram
+wine

conf/foot/foot.ini

@@ -10,8 +10,10 @@ background=000000
 cursor=282a36 ffffff
 foreground=ffffff
 
-#[environment]
-#name=value
+[environment]
+COLORTERM=truecolor
+TERM=foot
+MANGOHUD=1
 
-[tweak]
-render-timer=osd
+#[tweak]
+#render-timer=osd

conf/mpv.conf

@@ -30,10 +30,10 @@ save-position-on-quit
 # subtitles and UI. Subtitle preferred font may get used if it exists in the
 # system though?
 embeddedfonts=no
-#sub-font='Inclusive Sans'
-#osd-font='Inclusive Sans'
-sub-font='OpenDyslexic'
-osd-font='OpenDyslexic'
+#sub-font='OpenDyslexic'
+#osd-font='OpenDyslexic'
+sub-font='Atkinson Hyperlegible Next'
+osd-font='Atkinson Hyperlegible Mono'
 
 # Amber font color for subtitles, unless they otherwise specify?
 sub-color='#ffb700'

etc/ssh/ssh_config

@@ -38,7 +38,7 @@ Host *
 
 	# Send needed environment variables. I don't like setting wildcards
 	# and LC_ALL is disabled on purpouse.
-	SendEnv EDITOR LANG LANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION TERM TMUX TZ
+	SendEnv COLORTERM EDITOR LANG LANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION TERM TMUX TZ
 
 	# "ssh will automatically add new host keys to the user's known_hosts file, but will not permit connections to hosts with changed host keys."
 	StrictHostKeyChecking accept-new

etc/ssh/sshd_config.d/01-acceptenv.conf

@@ -0,0 +1,3 @@
+# Allow the client to send needed environment variables. I don't like
+# setting wildcards and LC_ALL is disabled on purpose.
+AcceptEnv COLORTERM EDITOR LANG LANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION TMUX TERM TZ

etc/ssh/sshd_config.d/acceptenv.conf

@@ -1,3 +0,0 @@
-# Allow the client to send needed environment variables. I don't like
-# setting wildcards and LC_ALL is disabled on purpose.
-AcceptEnv EDITOR LANG LANGUAGE LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT LC_IDENTIFICATION TMUX TERM TZ

etc/sudoers.d/envkeep-extras

@@ -0,0 +1,2 @@
+# Remember these environment variables
+Defaults	env_keep += "TERM COLORTERM"

install

@@ -37,7 +37,10 @@ cp -v rc/zshrc $HOME/.zshrc
 cp -v rc/profile $HOME/.profile
 
 # Create configuration directories missed later
-mkdir -vp $HOME/.config/{autostart,foot,git,mpv,nvim,systemd/user,yt-dlp}/
+mkdir -vp $HOME/.config/{autostart,foot,git,MangoHud,mpv,nvim,systemd/user,yt-dlp}/
+
+# terminfo just in case it needs to be copied to remote system
+mkdir -vp $HOME/.terminfo/{A..z}
 
 # Git config, legacy support for old location as well.
 # The other script appends sourced file, so if thou aren't I, thou should
@@ -54,6 +57,9 @@ cp -v rc/vimrc $HOME/.vimrc
 cp -v conf/init.vim $HOME/.config/nvim/init.vim
 cp -v conf/makepkg.conf $HOME/.makepkg.conf
 
+# system information overlay
+cp -v conf/MangoHud.conf $HOME/.config/MangoHud/
+
 # the media player
 cp -v conf/mpv.conf $HOME/.config/mpv/mpv.conf
 mkdir -vp $HOME/.var/app/io.mpv.Mpv/config/mpv
@@ -86,7 +92,11 @@ mkdir -vp $HOME/.inxi
 cp -v conf/inxi.conf $HOME/.inxi/inxi.conf
 
 # laziness
-gpg --quiet --import .mikaela/keys/*.asc &
+if [ -d submodules/pgp-alt-wot/me ]; then
+	gpg --quiet --import submodules/pgp-alt-wot/me/*.asc &
+else
+	gpg --quiet --import .mikaela/keys/*.asc &
+fi
 
 # Utilized by my ssh_config (not to be confused with sshd_config)
 mkdir -vp $HOME/.ssh/sockets/
@@ -146,6 +156,11 @@ if [ "$(id -u)" == "0" ]; then
 	mkdir -vp /usr/local/share/applications/
 	cp -v local/share/applications/*.desktop /usr/local/share/applications/
 
+	# Additional configuration for sudo SECURITY WARNING DANGER ALARM BELLS!
+	if [ -d /etc/sudoers.d ]; then
+		cp -v etc/sudoers.d/{lecture,password-feedback,always-ask-password,envkeep-extras} /etc/sudoers.d/
+	fi
+
 	# Profile configuration. SECURITY WARNING
 	cp -v etc/profile.d/*.sh /etc/profile.d/
 	chmod -v a+r /etc/profile.d/*.sh
@@ -158,7 +173,7 @@ if [ "$(id -u)" == "0" ]; then
 	# SSHd hardening hopefully. SECURITY WARNING
 	mkdir -vp /etc/ssh/sshd_config.d/
 	chmod -v a+x /etc/ssh/sshd_config.d/
-	cp etc/ssh/sshd_config.d/00-basic-security.conf /etc/ssh/sshd_config.d/
+	cp etc/ssh/sshd_config.d/{00-basic-security.conf,01-acceptenv.conf} /etc/ssh/sshd_config.d/
 	chmod -v a+r /etc/ssh/sshd_config.d/*.conf
 
 	# Systemd configuration directories. SECURITY WARNINGS!

rc/bashrc

@@ -1018,9 +1018,6 @@ if [ -f ~/.bash_custom ]; then
 	source ~/.bash_custom
 fi
 
-#TODO: FIXME:
-TERM=xterm-256color
-
 # If $TMUX, then TERM is tmux-256color
 if [ -v TMUX ]; then
 	TERM=tmux-256color

rc/vimrc

@@ -112,3 +112,6 @@ set textwidth=78
 " Marginal/line just before that. Set separately so it gets affected by
 " editorconfig and modelines?
 set colorcolumn=-1
+
+" Enable truecolor support
+set termguicolors

rc/zshrc

@@ -1011,9 +1011,6 @@ if [ -f ~/.warnings ]; then
 	source ~/.warnings
 fi
 
-#TODO: FIXME:
-TERM=xterm-256color
-
 # If $TMUX, then TERM is tmux-256color
 if [ -v TMUX ]; then
 	TERM=tmux-256color