chromium policy/brave-shields-disabled.json: add glowing-bear

Let's not overwrite files accidentally

conf/sway/config.d/autostart-brave-pwa.conf

@@ -0,0 +1,20 @@
+# Autostarting Progressive WebApps using Brave
+# App IDs are theoretically the same globally
+
+# chat.pikaviestin.fi
+exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=gnfnegplbndhneeicgmmlacdcafhbloj --app-run-on-os-login-mode=windowed
+
+# web.whatsapp.com
+exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=hnpfjngllnobngcgfapefoaidbinmjnm --app-run-on-os-login-mode=windowed
+
+# latest.glowing-bear.org
+exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf --app-run-on-os-login-mode=windowed
+
+# web.telegram.org/a
+exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi --app-run-on-os-login-mode=windowed
+
+# ntfy.sh
+exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckng --app-run-on-os-login-mode=windowed
+
+# webchat.disroot.org
+exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ndhcmhblfbbcejhpmekjaoljlkgmlebj --app-run-on-os-login-mode=windowed

conf/sway/config.d/autostart-vivaldi-pwa.gitignore.conf.sample

@@ -1,14 +0,0 @@
-# Autostarting Progressive WebApps using Vivaldi
-# App IDs may be globally the same?
-
-# Telegram WebZ
-exec --no-startup-id vivaldi --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi "--app-url=https://web.telegram.org/z/"
-
-# Glowing Bear, WeeChat Relay protocol client.
-exec --no-startup-id vivaldi --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf "--app-url=https://latest.glowing-bear.org/index.html"
-
-# YouTube Music
-exec --no-startup-id vivaldi --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod "--app-url=https://music.youtube.com/?source=pwa"
-
-# Ntfy.sh Web
-exec --no-startup-id vivaldi --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckngog "--app-url=https://ntfy.sh/app"

etc/NetworkManager/conf.d/mdns.conf

@@ -0,0 +1,4 @@
+# Enables mDNS for systemd-resolved
+[connection]
+connection.mdns=2
+connection.llmnr=2

etc/firefox/policies/policies.json

@@ -8,7 +8,10 @@
             "app.element.io",
             "staging.element.io",
             "develop.element.io",
-            "chat.pikaviestin.fi"
+            "chat.pikaviestin.fi",
+            "webchat.disroot.org",
+            "learn.microsoft.com",
+            "teams.microsoft.com"
           ],
           "learnInIncognito": true,
           "learnLocally": true,

etc/opt/chromium/policies/managed/aminda-extensions.json

@@ -7,7 +7,10 @@
           "app.element.io",
           "staging.element.io",
           "develop.element.io",
-          "chat.pikaviestin.fi"
+          "chat.pikaviestin.fi",
+          "webchat.disroot.org",
+          "learn.microsoft.com",
+          "teams.microsoft.com"
         ],
         "learnInIncognito": true,
         "learnLocally": true,

etc/opt/chromium/policies/managed/brave-shields-disabled.json

@@ -0,0 +1,13 @@
+{
+  "BraveShieldsDisabledForUrls": [
+    "https://app.element.io",
+    "https://staging.element.io",
+    "https://develop.element.io",
+    "https://chat.pikaviestin.fi",
+    "https://webchat.disroot.org",
+    "https://learn.microsoft.com",
+    "https://teams.microsoft.com",
+    "https://glowing-bear.org/",
+    "https://latest.glowing-bear.org/"
+  ]
+}

etc/opt/chromium/policies/managed/doh-quad9.json

@@ -0,0 +1,4 @@
+{
+  "DnsOverHttpsMode": "automatic",
+  "DnsOverHttpsTemplates": "https://dns.quad9.net/dns-query"
+}

etc/resolv.conf

@@ -20,6 +20,8 @@ options rotate edns0 trust-ad
 
 # no sending local domain to upstream whenever NXDOMAIN happens
 search .
+# Attempt to mDNS everything?
+#search .local
 
 # PS. Remove empty lines and comments if this ends up in /etc/resolv.conf
 # PPS. The traditional spell is:

etc/systemd/network/10-ether.network

@@ -7,14 +7,16 @@ Type=ether
 [Link]
 # My devices generally also have WiFi so lack of ethernet is not a reason
 # to wait for systemd-networkd-wait-online.service
-RequiredForOnline=no
+RequiredForOnline=false
 # Takes "ipv4", "ipv6", "both", or "any" (default).
 RequiredFamilyForOnline=both
-# Always set administrative state to up. Implies RequiredForOnline=yes
+# Always set administrative state to up. Implies RequiredForOnline=true
 #ActivationPolicy=always-up
+# Required for mDNS
+Multicast=true
 
 [Network]
-#DHCP=yes
+#DHCP=true
 # /24, /16, /8 are the the class C, B, A networks
 Address=192.168.0.2/24
 Gateway=192.168.0.1
@@ -30,3 +32,7 @@ IPv6LinkLocalAddressGenerationMode=stable-privacy
 # multiple times, but you are using Chrony instead, right?
 #NTP=fi.pool.ntp.org
 #NTP=time.cloudflare.com
+# Enable mDNS/.local for systemd-resolved
+MulticastDNS=true
+# Windows
+LLMNR=true

etc/systemd/network/10-wlan.network

@@ -7,13 +7,19 @@ Type=wlan
 [Link]
 # Takes "ipv4", "ipv6", "both", or "any" (default).
 RequiredFamilyForOnline=both
-# Always set administrative state to up. Implies RequiredForOnline=yes
+# Always set administrative state to up. Implies RequiredForOnline=true
 ActivationPolicy=always-up
 # If something else (like iwd EnableNetworkConfiguration=true) manages network,
 # uncomment
 #Unmanaged=true
+# Required for mDNS
+Multicast=true
 
 [Network]
-DHCP=yes
+DHCP=true
 IPv6PrivacyExtensions=true
 IPv6LinkLocalAddressGenerationMode=stable-privacy
+# Enable mDNS/.local for systemd-resolved
+MulticastDNS=true
+# Windows
+LLMNR=true

etc/systemd/resolved.conf.d/00-defaults.conf

@@ -10,3 +10,7 @@ Cache=true
 DNS=127.0.0.1
 DNS=::1
 Domains=~.
+# .local domains
+MulticastDNS=true
+# Microsoft Windows compatibility?
+LLMNR=true

etc/systemd/system/systemd-resolved.service.d/conflicts-avahi.conf

@@ -0,0 +1,2 @@
+[Unit]
+Conflicts=avahi-daemon.service avahi-daemon.socket

etc/unbound/unbound.conf.d/local-tlds.conf

@@ -0,0 +1,6 @@
+server:
+# mDNS, must not be sent to upstream servers. static replies nxdomain/nodata
+# unless local data specifies how to answer
+local-zone: "local." static
+local-zone: "internal." static
+local-zone: "invalid." static

var/spool/cron/root

@@ -1,3 +1,6 @@
+# Ensure /etc/sysctl.d/ gets read
+@reboot /usr/sbin/sysctl -p --system >/dev/null 2>&1
+
 # 3rd party Xbox controller initialization. See Mikaela/gist/gayming/
 @reboot /root/fixcontroller.py
 
@@ -7,7 +10,7 @@
 @reboot /usr/sbin/duperemove -rdhq --hashfile=/root/snap.hash /var/lib/snapd
 
 # Another attempt at ensuring Yggdrasil works with nordvpnd
-@reboot /usr/bin/sleep 300 && /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
+@reboot /usr/bin/sleep 300 && /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0 >/dev/null 2>&1
-@reboot /usr/bin/sleep 315 && /usr/bin/systemctl systemctl restart yggdrasil.service --quiet
+@reboot /usr/bin/sleep 315 && /usr/bin/systemctl restart yggdrasil.service --quiet
 
 # vim: filetype=crontab