rc/curlrc: enable http/3 (although on Fedora it warns about this libcurl not supporting it)

etc/dnf/dnf.conf

@@ -1,5 +1,7 @@
 [main]
 gpgcheck=1
+# 3 is the default, increase this in case of kernel upgrade trouble (unrelated
+# to space, see dracut.conf.d for that)
 installonly_limit=3
 clean_requirements_on_remove=True
 best=False

etc/sudoers.d/nordvpnd

@@ -4,6 +4,7 @@
 %nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.socket
 %nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.socket
 %nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
+%nordvpn ALL=NOPASSWD: /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
 # used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
 # it works
 %nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service
@@ -13,8 +14,10 @@
 # Tells Chrony we are connected and thus maybe connects to IPv6 NTP servers
 %nordvpn ALL=NOPASSWD: /usr/bin/chronyc online
 # Clearing DNS caches once we are disconnected
-%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
-%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
+#%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
+%nordvpn ALL=NOPASSWD: /usr/sbin/unbound-control reload
+#%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
+%nordvpn ALL=NOPASSWD: /usr/bin/resolvectl flush-caches
 # Tor complains about failures for a while and then notes IP change and
 # regenerates keys, so it should probably be here too.
 %nordvpn ALL=NOPASSWD: /bin/systemctl restart tor.service

rc/curlrc

@@ -1,2 +1,14 @@
 # ~/.curlrc
-doh-url = https://dns0.eu
+
+# DNS-over-HTTPS (maybe HTTP/3, I don't know)
+#
+# https://dns0.eu - Anycast with servers in the EU. Private ECS.
+#doh-url = https://dns0.eu/
+#
+# https://quad9.net - Anycast, no ECS
+doh-url = https://dns.quad9.net/dns-query
+# ECS
+#doh-url = https://dns.quad9.net/dns-query
+
+# Attempt to use HTTP/3
+http3