Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-08-19 12:47:27 +02:00
Code Issues Projects Releases Wiki Activity

Compare commits

base: Mikaela:c81c1dd7d08f4ace8a97db14a8da7e2bbe1c0026
Branches Tags
Mikaela:cxefa
..
compare: Mikaela:70646e7edcb3859d2337b4afb9184aacffaa0422
Branches Tags
Mikaela:cxefa

5 Commits
c81c1dd7d0 ... 70646e7edc

Author SHA1 Message Date
Aminda Suomalainen
70646e7edc
rc/curlrc: enable http/3 (although on Fedora it warns about this libcurl not supporting it) 2024-05-10 20:33:31 +03:00
Aminda Suomalainen
9f03f54f98
rc/curlrc: add comments, default to Quad9 DoH 2024-05-10 20:31:38 +03:00
Aminda Suomalainen
bd55140975
rc/curlrc: add possibly missing slash 2024-05-10 20:28:45 +03:00
Aminda Suomalainen
9fcb0aa289
dnf.conf: note install_only_limit and kernel updates 2024-05-10 19:27:32 +03:00
Aminda Suomalainen
0cb5b0992b
sudoers.d/nordvpnd: instead of restarting DNS, allow reloading it. Also IPv6 enabling 2024-05-10 18:27:06 +03:00
3 changed files with 20 additions and 3 deletions
Show Stats Expand all files Collapse all files

2
etc/dnf/dnf.conf
View File

@ -1,5 +1,7 @@
[main] [main]
gpgcheck=1 gpgcheck=1
# 3 is the default, increase this in case of kernel upgrade trouble (unrelated
# to space, see dracut.conf.d for that)
installonly_limit=3 installonly_limit=3
clean_requirements_on_remove=True clean_requirements_on_remove=True
best=False best=False

7
etc/sudoers.d/nordvpnd
View File

@ -4,6 +4,7 @@
%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.socket %nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.socket %nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.socket
%nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service %nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
%nordvpn ALL=NOPASSWD: /usr/sbin/sysctl net.ipv6.conf.all.disable_ipv6=0
# used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure # used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
# it works # it works
%nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service %nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service
@ -13,8 +14,10 @@
# Tells Chrony we are connected and thus maybe connects to IPv6 NTP servers # Tells Chrony we are connected and thus maybe connects to IPv6 NTP servers
%nordvpn ALL=NOPASSWD: /usr/bin/chronyc online %nordvpn ALL=NOPASSWD: /usr/bin/chronyc online
# Clearing DNS caches once we are disconnected # Clearing DNS caches once we are disconnected
%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service #%nordvpn ALL=NOPASSWD: /bin/systemctl restart unbound.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service %nordvpn ALL=NOPASSWD: /usr/sbin/unbound-control reload
#%nordvpn ALL=NOPASSWD: /bin/systemctl restart systemd-resolved.service
%nordvpn ALL=NOPASSWD: /usr/bin/resolvectl flush-caches
# Tor complains about failures for a while and then notes IP change and # Tor complains about failures for a while and then notes IP change and
# regenerates keys, so it should probably be here too. # regenerates keys, so it should probably be here too.
%nordvpn ALL=NOPASSWD: /bin/systemctl restart tor.service %nordvpn ALL=NOPASSWD: /bin/systemctl restart tor.service

14
rc/curlrc
View File

@ -1,2 +1,14 @@
# ~/.curlrc # ~/.curlrc
doh-url = https://dns0.eu
# DNS-over-HTTPS (maybe HTTP/3, I don't know)
#
# https://dns0.eu - Anycast with servers in the EU. Private ECS.
#doh-url = https://dns0.eu/
#
# https://quad9.net - Anycast, no ECS
doh-url = https://dns.quad9.net/dns-query
# ECS
#doh-url = https://dns.quad9.net/dns-query
# Attempt to use HTTP/3
http3