2024-10-31 23:49:25 +01:00
16 changed files with 23 additions and 85 deletions
--- a/conf/sway/config.d/autostart-brave-pwa.conf
+++ b/conf/sway/config.d/autostart-brave-pwa.conf
@ -1,20 +0,0 @@
-# Autostarting Progressive WebApps using Brave
-# App IDs are theoretically the same globally
-
-# chat.pikaviestin.fi
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=gnfnegplbndhneeicgmmlacdcafhbloj --app-run-on-os-login-mode=windowed
-
-# web.whatsapp.com
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=hnpfjngllnobngcgfapefoaidbinmjnm --app-run-on-os-login-mode=windowed
-
-# latest.glowing-bear.org
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf --app-run-on-os-login-mode=windowed
-
-# web.telegram.org/a
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi --app-run-on-os-login-mode=windowed
-
-# ntfy.sh
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckng --app-run-on-os-login-mode=windowed
-
-# webchat.disroot.org
-exec --no-startup-id sleep 15 && /usr/local/bin/brave --profile-directory=Default --app-id=ndhcmhblfbbcejhpmekjaoljlkgmlebj --app-run-on-os-login-mode=windowed
--- a/conf/sway/config.d/autostart-vivaldi-pwa.gitignore.conf.sample
+++ b/conf/sway/config.d/autostart-vivaldi-pwa.gitignore.conf.sample
@ -0,0 +1,14 @@
+# Autostarting Progressive WebApps using Vivaldi
+# App IDs may be globally the same?
+
+# Telegram WebZ
+exec --no-startup-id vivaldi --profile-directory=Default --app-id=ibblmnobmgdmpoeblocemifbpglakpoi "--app-url=https://web.telegram.org/z/"
+
+# Glowing Bear, WeeChat Relay protocol client.
+exec --no-startup-id vivaldi --profile-directory=Default --app-id=copdfoibmmeogdkkhnckdgnngdchekmf "--app-url=https://latest.glowing-bear.org/index.html"
+
+# YouTube Music
+exec --no-startup-id vivaldi --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod "--app-url=https://music.youtube.com/?source=pwa"
+
+# Ntfy.sh Web
+exec --no-startup-id vivaldi --profile-directory=Default --app-id=cmgiilnmnfechkeifkepembegeckngog "--app-url=https://ntfy.sh/app"
--- a/etc/NetworkManager/conf.d/mdns.conf
+++ b/etc/NetworkManager/conf.d/mdns.conf
@ -1,4 +0,0 @@
-# Enables mDNS for systemd-resolved
-[connection]
-connection.mdns=2
-connection.llmnr=2
--- a/etc/firefox/policies/policies.json
+++ b/etc/firefox/policies/policies.json
@ -8,10 +8,7 @@
            "app.element.io",
            "staging.element.io",
            "develop.element.io",
-            "chat.pikaviestin.fi",
-            "webchat.disroot.org",
-            "learn.microsoft.com",
-            "teams.microsoft.com"
+            "chat.pikaviestin.fi"
          ],
          "learnInIncognito": true,
          "learnLocally": true,
--- a/etc/opt/chromium/policies/managed/aminda-extensions.json
+++ b/etc/opt/chromium/policies/managed/aminda-extensions.json
@ -7,10 +7,7 @@
          "app.element.io",
          "staging.element.io",
          "develop.element.io",
-          "chat.pikaviestin.fi",
-          "webchat.disroot.org",
-          "learn.microsoft.com",
-          "teams.microsoft.com"
+          "chat.pikaviestin.fi"
        ],
        "learnInIncognito": true,
        "learnLocally": true,
--- a/etc/opt/chromium/policies/managed/brave-shields-disabled.json
+++ b/etc/opt/chromium/policies/managed/brave-shields-disabled.json
@ -1,13 +0,0 @@
-{
-  "BraveShieldsDisabledForUrls": [
-    "https://app.element.io",
-    "https://staging.element.io",
-    "https://develop.element.io",
-    "https://chat.pikaviestin.fi",
-    "https://webchat.disroot.org",
-    "https://learn.microsoft.com",
-    "https://teams.microsoft.com",
-    "https://glowing-bear.org/",
-    "https://latest.glowing-bear.org/"
-  ]
-}
--- a/etc/opt/chromium/policies/managed/doh-quad9.json
+++ b/etc/opt/chromium/policies/managed/doh-quad9.json
@ -1,4 +0,0 @@
-{
-  "DnsOverHttpsMode": "automatic",
-  "DnsOverHttpsTemplates": "https://dns.quad9.net/dns-query"
-}
--- a/etc/resolv.conf
+++ b/etc/resolv.conf
@ -20,8 +20,6 @@ options rotate edns0 trust-ad

 # no sending local domain to upstream whenever NXDOMAIN happens
 search .
-# Attempt to mDNS everything?
-#search .local

 # PS. Remove empty lines and comments if this ends up in /etc/resolv.conf
 # PPS. The traditional spell is:
--- a/etc/systemd/network/10-ether.network
+++ b/etc/systemd/network/10-ether.network
@ -7,16 +7,14 @@ Type=ether
 [Link]
 # My devices generally also have WiFi so lack of ethernet is not a reason
 # to wait for systemd-networkd-wait-online.service
-RequiredForOnline=false
+RequiredForOnline=no
 # Takes "ipv4", "ipv6", "both", or "any" (default).
 RequiredFamilyForOnline=both
-# Always set administrative state to up. Implies RequiredForOnline=true
+# Always set administrative state to up. Implies RequiredForOnline=yes
 #ActivationPolicy=always-up
-# Required for mDNS
-Multicast=true

 [Network]
-#DHCP=true
+#DHCP=yes
 # /24, /16, /8 are the the class C, B, A networks
 Address=192.168.0.2/24
 Gateway=192.168.0.1
@ -32,7 +30,3 @@ IPv6LinkLocalAddressGenerationMode=stable-privacy
 # multiple times, but you are using Chrony instead, right?
 #NTP=fi.pool.ntp.org
 #NTP=time.cloudflare.com
-# Enable mDNS/.local for systemd-resolved
-MulticastDNS=true
-# Windows
-LLMNR=true
--- a/etc/systemd/network/10-wlan.network
+++ b/etc/systemd/network/10-wlan.network
@ -7,19 +7,13 @@ Type=wlan
 [Link]
 # Takes "ipv4", "ipv6", "both", or "any" (default).
 RequiredFamilyForOnline=both
-# Always set administrative state to up. Implies RequiredForOnline=true
+# Always set administrative state to up. Implies RequiredForOnline=yes
 ActivationPolicy=always-up
 # If something else (like iwd EnableNetworkConfiguration=true) manages network,
 # uncomment
 #Unmanaged=true
-# Required for mDNS
-Multicast=true

 [Network]
-DHCP=true
+DHCP=yes
 IPv6PrivacyExtensions=true
 IPv6LinkLocalAddressGenerationMode=stable-privacy
-# Enable mDNS/.local for systemd-resolved
-MulticastDNS=true
-# Windows
-LLMNR=true
--- a/etc/systemd/resolved.conf.d/00-defaults.conf
+++ b/etc/systemd/resolved.conf.d/00-defaults.conf
@ -10,7 +10,3 @@ Cache=true
 DNS=127.0.0.1
 DNS=::1
 Domains=~.
-# .local domains
-MulticastDNS=true
-# Microsoft Windows compatibility?
-LLMNR=true
--- a/etc/systemd/system/systemd-resolved.service.d/conflicts-avahi.conf
+++ b/etc/systemd/system/systemd-resolved.service.d/conflicts-avahi.conf
@ -1,2 +0,0 @@
-[Unit]
-Conflicts=avahi-daemon.service avahi-daemon.socket
--- a/etc/unbound/unbound.conf.d/prefer-ipv6.conf
+++ b/etc/unbound/unbound.conf.d/prefer-ipv6.conf
--- a/etc/unbound/unbound.conf.d/local-tlds.conf
+++ b/etc/unbound/unbound.conf.d/local-tlds.conf
@ -1,6 +0,0 @@
-server:
-# mDNS, must not be sent to upstream servers. static replies nxdomain/nodata
-# unless local data specifies how to answer
-local-zone: "local." static
-local-zone: "internal." static
-local-zone: "invalid." static
--- a/etc/unbound/unbound.conf.d/debian-root-auto-trust-anchor-file.conf
+++ b/etc/unbound/unbound.conf.d/debian-root-auto-trust-anchor-file.conf
--- a/var/spool/cron/root
+++ b/var/spool/cron/root
@ -1,6 +1,3 @@
-# Ensure /etc/sysctl.d/ gets read
-@reboot /usr/sbin/sysctl -p --system >/dev/null 2>&1
-
 # 3rd party Xbox controller initialization. See Mikaela/gist/gayming/
@reboot /root/fixcontroller.py

@ -10,7 +7,7 @@
@reboot /usr/sbin/duperemove -rdhq --hashfile=/root/snap.hash /var/lib/snapd

 # Another attempt at ensuring Yggdrasil works with nordvpnd
-@reboot /usr/bin/sleep 300 && /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0 >/dev/null 2>&1
-@reboot /usr/bin/sleep 315 && /usr/bin/systemctl restart yggdrasil.service --quiet
+@reboot /usr/bin/sleep 300 && /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
+@reboot /usr/bin/sleep 315 && /usr/bin/systemctl systemctl restart yggdrasil.service --quiet

 # vim: filetype=crontab