install: SECURITY WARNING, don't do what I do

conf/foot/foot.ini

@@ -1,6 +1,10 @@
 # -*- conf -*-
 
-font=Comic Shanns Mono-Regular:size=12,Noto Sans Mono:size=12, Noto Color Emoji
+font=Comic Shanns Mono-Regular:size=10,Noto Sans Mono:size=10, Noto Color Emoji
+dpi-aware=yes
+
+#[environment]
+#name=value
 
 [cursor]
 color=282a36 ffffff
@@ -8,3 +12,6 @@ color=282a36 ffffff
 [colors]
 foreground=ffffff
 background=000000
+
+[tweak]
+render-timer=osd

etc/firefox/policies/policies.json

@@ -432,7 +432,7 @@
 			"{6003eac6-4b07-4aaf-960b-92fa006cd444}": {
 				"blocked_install_message": "Mozilla Orbit. AI hurts climate and the crawlers are DDoSing the internet. However the summary feature sometimes spares my mental health, so begrudgingly it's allowed and won't be normal_installed let alone force_installed.",
 				"default_area": "navbar",
-				"installation_mode": "allowed",
+				"installation_mode": "blocked",
 				"private_browsing": false,
 				"restricted_domains": []
 			},
@@ -650,7 +650,7 @@
 				"Value": 0
 			},
 			"browser.ml.chat.enabled": {
-				"Status": "clear",
+				"Status": "user",
 				"Type": "boolean",
 				"Value": false
 			},
@@ -659,6 +659,11 @@
 				"Type": "string",
 				"Value": "https://chat.mistral.ai/chat"
 			},
+			"browser.ml.linkPreview.enabled": {
+				"Status": "default",
+				"Type": "boolean",
+				"Value": true
+			},
 			"browser.preferences.moreFromMozilla": {
 				"Status": "default",
 				"Type": "boolean",

install

@@ -143,6 +143,21 @@ if [ "$(id -u)" == "0" ]; then
 	mkdir -vp /usr/local/share/applications/
 	cp -v local/share/applications/*.desktop /usr/local/share/applications/
 
+	# Profile configuration. SECURITY WARNING
+	cp -v etc/profile.d/*.sh /etc/profile.d/
+	chmod -v a+r /etc/profile.d/*.sh
+
+	# Kernel configuration. SECURITY WARNING
+	cp -v etc/sysctl.d/*.conf /etc/sysctl.d/
+	chmod -v a+r /etc/sysctl.d/*.conf
+	(sysctl -p --system &)
+
+	# SSHd hardening hopefully. SECURITY WARNING
+	mkdir -vp /etc/ssh/sshd_config.d/
+	chmod -v a+x /etc/ssh/sshd_config.d/
+	cp etc/ssh/sshd_config.d/00-basic-security.conf /etc/ssh/sshd_config.d/
+	chmod -v a+r /etc/ssh/sshd_config.d/*.conf
+
 	# Enables laziness on checking whether or not apt is installed
 	mkdir -vp /etc/apt/apt.conf.d/
 	# Enables progress bar and colours for apt/dpkg, which are helpful at

rc/bashrc

@@ -145,6 +145,7 @@ if hash lsb_release 2> /dev/null; then
 		elif hash hostnamectl 2> /dev/null; then
 			hostnamectl hostname &
 		fi
+		lsb_release -sd &
 
 		if hash ifconfig 2> /dev/null; then
 			\LC_ALL=C.utf8 \ifconfig | \grep inet | \grep -Ev "127.0.0.1|inet6"

rc/zshrc

@@ -42,6 +42,7 @@ if hash lsb_release 2> /dev/null; then
 		elif hash hostnamectl 2> /dev/null; then
 			hostnamectl hostname &
 		fi
+		lsb_release -sd
 
 		if hash ifconfig 2> /dev/null; then
 			LC_ALL=C.utf8 \ifconfig | \grep inet | \grep -Ev "127.0.0.1|inet6"