rm etc/sysctl.d/99-enable-ipv6.conf

Refer to crontab, yggdrasil.service.d and nordvpn.service.d

etc/firefox/policies/policies.json

@@ -87,7 +87,7 @@
       },
       "{48748554-4c01-49e8-94af-79662bf34d50}": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/privacy-pass/latest.xpi",
-        "installation_mode": "normal_installed"
+        "installation_mode": "force_installed"
       },
       "{6a65273e-2b26-40f5-b66e-8eed317307da}": {
         "install_url": "https://addons.mozilla.org/firefox/downloads/latest/new-tab-suspender/latest.xpi",

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -20,7 +20,7 @@
   },
   "ExtensionSettings": {
     "ajhmfdgkijocedmfjonnpjfojldioehi": {
-      "installation_mode": "normal_installed",
+      "installation_mode": "force_installed",
       "override_update_url": true,
       "toolbar_pin": "default_unpinned",
       "update_url": "https://clients2.google.com/service/update2/crx"

etc/sudoers.d/nordvpnd

@@ -2,3 +2,6 @@
 %nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.service
 %nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.service
 %nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
+# used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
+# it works
+%nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service

etc/sysctl.d/99-enable-ipv6.conf

@@ -1,7 +0,0 @@
-# This is only required because of NordVPN
-net.ipv6.conf.all.disable_ipv6 = 0
-net.ipv6.conf.default.disable_ipv6 = 0
-net.ipv6.conf.lo.disable_ipv6 = 0
-net.ipv6.conf.tun0.disable_ipv6 = 0
-net.ipv6.conf.nordlynx.disable_ipv6 = 0
-net.ipv6.conf.yggdrasil.disable_ipv6 = 0

etc/systemd/system/nordvpnd.service.d/yggdrasil.conf

@@ -0,0 +1,4 @@
+# nordvpnd disables IPv6 which Yggdrasil depends on, so let's restart it.
+# Note ../yggdrasil.service.d/ enabling IPv6 for all interfaces.
+[Service]
+ExecStartPost=systemctl restart yggdrasil.service --quiet

etc/systemd/system/yggdrasil.service.d/nordvpnd.conf

@@ -0,0 +1,7 @@
+# nordvpnd disables IPv6 for all interfaces and thus breaks Yggdrasil. This
+# override gives yggdrasil.service two chances to ensure IPv6 is enabled.
+[Service]
+ExecStartPre=sysctl net.ipv6.conf.all.disable_ipv6=0
+ExecStartPost=sysctl net.ipv6.conf.all.disable_ipv6=0
+# I cannot use this as the interface won't exist until Yggdrasil starts
+#ExecStartPost=sysctl net.ipv6.conf.yggdrasil.disable_ipv6=0

var/spool/cron/root

@@ -6,4 +6,8 @@
 @reboot /usr/sbin/duperemove -rdhq --hashfile=/root/flatpak.hash /var/lib/flatpak
 @reboot /usr/sbin/duperemove -rdhq --hashfile=/root/snap.hash /var/lib/snapd
 
+# Another attempt at ensuring Yggdrasil works with nordvpnd
+@reboot /usr/bin/sleep 300 && /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
+@reboot /usr/bin/sleep 315 && /usr/bin/systemctl systemctl restart yggdrasil.service --quiet
+
 # vim: filetype=crontab