{chromium,firefox}: allow disabling/uninstalling multiple extensions

etc/firefox/policies/policies.json

@@ -232,6 +232,13 @@
 				"installation_mode": "blocked",
 				"private_browsing": false
 			},
+			"@ublacklist": {
+				"blocked_install_message": "uBlackList",
+				"default_area": "menupanel",
+				"install_url": "https://addons.mozilla.org/firefox/downloads/latest//latest.xpi",
+				"installation_mode": "normal_installed",
+				"private_browsing": true
+			},
 			"ATBC@EasonWong": {
 				"blocked_install_message": "Adaptive Tab Bar Colour",
 				"default_area": "menupanel",
@@ -279,7 +286,7 @@
 				"blocked_install_message": "IPFS Companion",
 				"default_area": "navbar",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/ipfs-companion/latest.xpi",
-				"installation_mode": "normal_installed",
+				"installation_mode": "allowed",
 				"private_browsing": false
 			},
 			"ipvfoo@pmarks.net": {
@@ -418,7 +425,7 @@
 				"blocked_install_message": "Epub Reader",
 				"default_area": "menupanel",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/epubreader/latest.xpi",
-				"installation_mode": "normal_installed",
+				"installation_mode": "allowed",
 				"private_browsing": false,
 				"restricted_domains": []
 			},
@@ -441,7 +448,7 @@
 				"blocked_install_message": "HTTP Indicator",
 				"default_area": "navbar",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/http-indicator/latest.xpi",
-				"installation_mode": "normal_installed",
+				"installation_mode": "allowed",
 				"private_browsing": false,
 				"restricted_domains": []
 			},
@@ -478,7 +485,7 @@
 				"blocked_install_message": "Tor Snowflake proxy (for prividing the proxy for others)",
 				"default_area": "navbar",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/torproject-snowflake/latest.xpi",
-				"installation_mode": "normal_installed",
+				"installation_mode": "allowed",
 				"private_browsing": false
 			},
 			"{b5501fd1-7084-45c5-9aa6-567c2fcf5dc6}": {
@@ -514,7 +521,7 @@
 				"blocked_install_message": "Read Aloud. Suggested in Mozilla Firefox Accessibility blogpost. Compatible with Epub Reader above.",
 				"default_area": "navbar",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/read-aloud/latest.xpi",
-				"installation_mode": "normal_installed",
+				"installation_mode": "allowed",
 				"private_browsing": false
 			}
 		},

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -264,7 +264,7 @@
 			"update_url": "https://clients2.google.com/service/update2/crx"
 		},
 		"ddkjiahejlhfcafbddmgiahcphecmpfh": {
-			"blocked_install_message": "uBlock Origin Lite",
+			"blocked_install_message": "uBlock Origin Lite. Force installed simultaneously with uBlock Origin for the transition period after which uBo is removed.",
 			"installation_mode": "force_installed",
 			"override_update_url": true,
 			"toolbar_pin": "force_pinned",
@@ -342,7 +342,7 @@
 		},
 		"hgcomhbcacfkpffiphlmnlhpppcjgmbl": {
 			"blocked_install_message": "HTTP Indicator",
-			"installation_mode": "normal_installed",
+			"installation_mode": "allowed",
 			"override_update_url": true,
 			"toolbar_pin": "force_pinned",
 			"update_url": "https://clients2.google.com/service/update2/crx"
@@ -377,7 +377,7 @@
 		},
 		"mafpmfcccpbjnhfhjnllmmalhifmlcie": {
 			"blocked_install_message": "Tor Snowflake",
-			"installation_mode": "normal_installed",
+			"installation_mode": "allowed",
 			"override_update_url": true,
 			"toolbar_pin": "default_unpinned",
 			"update_url": "https://clients2.google.com/service/update2/crx"
@@ -391,7 +391,7 @@
 		},
 		"nibjojkomfdiaoajekhjakgkdhaomnch": {
 			"blocked_install_message": "IPFS Companion",
-			"installation_mode": "normal_installed",
+			"installation_mode": "allowed",
 			"override_update_url": true,
 			"toolbar_pin": "force_pinned",
 			"update_url": "https://clients2.google.com/service/update2/crx"
@@ -405,7 +405,7 @@
 		},
 		"nlbjncdgjeocebhnmkbbbdekmmmcbfjd": {
 			"blocked_install_message": "RSS Subscription Extension (by Google)",
-			"installation_mode": "force_installed",
+			"installation_mode": "normal_installed",
 			"override_update_url": true,
 			"toolbar_pin": "force_pinned",
 			"update_url": "https://clients2.google.com/service/update2/crx"
@@ -451,6 +451,13 @@
 			"override_update_url": true,
 			"toolbar_pin": "force_pinned",
 			"update_url": "https://clients2.google.com/service/update2/crx"
+		},
+		"pncfbmialoiaghdehhbnbhkkgmjanfhe": {
+			"blocked_install_message": "uBlacklist",
+			"installation_mode": "normal_installed",
+			"override_update_url": true,
+			"toolbar_pin": "default_unpinned",
+			"update_url": "https://clients2.google.com/service/update2/crx"
 		}
 	},
 	"NetworkPredictionOptions": 2,

etc/unbound/unbound.conf.d/dot-dns0-quad9.conf

@@ -0,0 +1,43 @@
+# For those who really cannot choose between DNS0.eu and Quad9. At least the
+# latter has a nice non-standard port. Climate and distance take priority,
+# thus ECS, but with any luck DNS0 gets preferred and no attacker fingerprints
+# DNS resolvers used.
+
+server:
+	# Debian ca-certificates location
+	#tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
+	# Fedora
+	#tls-cert-bundle: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem
+	# Use system certificates no matter where they are
+	tls-system-cert: yes
+	# Quad9 says pointless performance impact on forwarders.
+	# https://docs.quad9.net/Quad9_For_Organizations/DNS_Forwarder_Best_Practices/#disable-qname-minimization
+	qname-minimisation: no
+
+forward-zone:
+	name: "."
+	forward-tls-upstream: yes
+	forward-addr: 2a0f:fc80::@853#dns0.eu
+	forward-addr: 193.110.81.0@853#dns0.eu
+	forward-addr: 2a0f:fc81::@853#dns0.eu
+	forward-addr: 185.253.5.0@853#dns0.eu
+	## Quad9 Secure
+	#forward-addr: 2620:fe::fe@8853#dns.quad9.net
+	#forward-addr: 2620:fe::9@8853#dns.quad9.net
+	#forward-addr: 9.9.9.9@8853#dns.quad9.net
+	#forward-addr: 149.112.112.112@8853#dns.quad9.net
+	#forward-addr: 2620:fe::fe@853#dns.quad9.net
+	#forward-addr: 2620:fe::9@853#dns.quad9.net
+	#forward-addr: 9.9.9.9@853#dns.quad9.net
+	#forward-addr: 149.112.112.112@853#dns.quad9.net
+	## Quad9 Secure + ECS
+	forward-addr: 2620:fe::fe:11@8853#dns11.quad9.net
+	forward-addr: 9.9.9.11@8853#dns11.quad9.net
+	forward-addr: 2620:fe::11@8853#dns11.quad9.net
+	forward-addr: 149.112.112.11@853#dns11.quad9.net
+	forward-addr: 2620:fe::fe:11@853#dns11.quad9.net
+	forward-addr: 9.9.9.11@853#dns11.quad9.net
+	forward-addr: 2620:fe::11@853#dns11.quad9.net
+	forward-addr: 149.112.112.11@853#dns11.quad9.net
+
+# vim: filetype=unbound.conf

local/share/dark-mode.d/10-adwaita-breeze-dark.bash

@@ -19,3 +19,8 @@ lookandfeeltool --platform offscreen --apply "org.kde.breezedark.desktop"
 
 # Kvantum Qt
 #kvantummanager --set KvGnomeDark --noAssign-All
+
+# Cursors
+gsettings set org.gnome.desktop.interface cursor-theme Oxygen_Yellow
+gsettings set org.mate.peripherals-mouse cursor-theme Oxygen_Yellow
+xfconf-query --channel xsettings --property /Gtk/CursorThemeName --set Oxygen_Yellow

local/share/icons/default/README.md

@@ -0,0 +1,3 @@
+# Maybe a workaround for cursors not working on Plasma
+
+[Arch Wiki: KDE: Plasma cursor sometimes shown incorrectly](https://wiki.archlinux.org/title/KDE#Plasma_cursor_sometimes_shown_incorrectly)

local/share/icons/default/index.theme

@@ -0,0 +1,2 @@
+[Icon Theme]
+Inherits=Oxygen_Yellow

local/share/light-mode.d/10-breeze.bash

@@ -17,3 +17,8 @@ lookandfeeltool --platform offscreen --apply "org.kde.breeze.desktop"
 
 # Kvantum Qt
 #sleep 3 && kvantummanager --set KvGnome --noAssign-All
+
+# Cursors
+gsettings set org.gnome.desktop.interface cursor-theme Oxygen_Yellow
+gsettings set org.mate.peripherals-mouse cursor-theme Oxygen_Yellow
+xfconf-query --channel xsettings --property /Gtk/CursorThemeName --set Oxygen_Yellow