.mikaela/motivational-message.txt

@@ -1,49 +1,27 @@
-# This file is read by my {zsh,bash}rc if current user is either aminda
-# or mikaela, or alternatively something hardware specific such as deck.
-# The reading command is:
-# tail -n +1 $HOME/.shell-things/.mikaela/motivational-message.txt | grep -v '#'
-# Older motivational messages are stored in case bringing them back is
-# desired later. Don't forget, this is a living document.
 
-Aferoj emas funkcii sin mem...  OM MANI PEME HUNG...
+# Motivational messages
 # Tavun OM värähtely poistaa ylpeyttä, MA kateutta, NI takertumista. PE
 # leikkaa tietämättömyyden läpi, ME hälventää ahneuden ja rintakehässä
 # värähtelevä HUNG muuntaa vihan.
 #   Kuinka asiat ovat (s. 74-75) - Lama Ole Nydahl
-#
+Aferoj emas funkcii sin mem...  OM MANI PEME HUNG...
+# Illusions I & II - Richard Bach
 # Here is a test to find whether your mission on earth is finished:
 #   If you’re alive, it isn’t.
 # You are a perfect expression of perfect Love, here and now.
-# Illusions I & II - Richard Bach
 
-  "They say that I must learn to kill before I can feel safe. But I,
+      Memoru ankauh
-    I'd rather kill myself then turn into their slave."
+  - Know fear. Face fears. Don't obey in advance! Fluff the SPOTLIGHT
-# The Rasmus: In the Shadows
+    EFFECT! Break the SPIRAL OF SILENCE!
-
+    - Be the gay propawganda they are so afraid of! Wear pride, be
-MEMENTO VIVERE! Advice, total nonsense or something between:
+      genderqueer, unshaved, unashamedly braless!
-
+  - Act Like You Belong. And you shall belong.
-* Stand out! Otherwise there is no diversity, no comfort zone, just
+  - Leave the world a better place than you found it. Remember
-  nazis as not standing out means obeying in advance. Act Like You
-  Belong and Belong You Shall.
-* Know fear. Face {it,them}. Break the Spiral of Silence. "Fear is the
-  tool of tyrants"
-  * Be their fears. Queer propawganda to remind them we are people.
-    Naturist to remind they are the same as us under their covers.
-#      Memoru ankauh
-#  - Know fear. Face fears. Don't obey in advance! Fluff the SPOTLIGHT
-#    EFFECT! Break the SPIRAL OF SILENCE!
-#    - Be the gay propawganda they are so afraid of! Wear pride, be
-#      genderqueer, unshaved, unashamedly braless!
-#  - Act Like You Belong. And you shall belong.
-* Leave the world a better place than you found it. Remember
     EMPATHY, SYMPATHY and COMPASSION! Let them lead you to KINDNESS!
-  * Remember them towards everyone. Everyone includes you. Respect your
+    - Remember your own boundaries too, you too are allowed to say no
-    boundaries as well, you can say "no" and continue your path without
+      and continue walking past without explaining yourself! They are
-    explanations.
+      afraid of your judgment too employed right now or not.
-#    - Remember your own boundaries too, you too are allowed to say no
+- May your heart be your guiding key ;)
-#      and continue walking past without explaining yourself! They are
+- MEMENTO VIVERE
-#      afraid of your judgment too employed right now or not.
-* May your heart be your guiding key ;)
-#
-#Make your tech grayscale painting your life with colours
 
+Make your tech grayscale painting your life with colours

etc/firefox/policies/policies.json

@@ -2,7 +2,93 @@
 	"policies": {
 		"3rdparty": {
 			"Extensions": {
-				"adnauseam@rednoise.org": {
+				"jid1-MnnxcxisBPnSXQ@jetpack": {
+					"checkForDNTPolicy": true,
+					"disabledSites": [
+						"www.ecosia.org",
+						"pp-attester-turnstile.research.cloudflare.com"
+					],
+					"learnInIncognito": true,
+					"learnLocally": true,
+					"sendDNTSignal": true,
+					"showCounter": true,
+					"showIntroPage": false,
+					"socialWidgetReplacementEnabled": true,
+					"trackingDomains": [
+						{
+							"domain": "tunnus.almamedia.fi",
+							"action": "cookieblock"
+						},
+						{
+							"domain": "bitwarden.eu",
+							"action": "allow"
+						},
+						{
+							"domain": "google.com",
+							"action": "block"
+						},
+						{
+							"domain": "recaptcha.net",
+							"action": "block"
+						},
+						{
+							"domain": "vimeo.com",
+							"action": "block"
+						},
+						{
+							"domain": "vimeocdn.com",
+							"action": "block"
+						},
+						{
+							"domain": "youtube.com",
+							"action": "block"
+						},
+						{
+							"domain": "youtube-nocookie.com",
+							"action": "block"
+						}
+					]
+				},
+				"jid1-ZAdIEUB7XOzOJw@jetpack": {
+					"hasSeenPostInstall": true
+				},
+				"uBOLiteRedux@raymondhill.net": {
+					"defaultFiltering": "basic",
+					"disableFirstRunPage": true,
+					"noFiltering": [
+						"-all-urls",
+						"accountscenter.facebook.com",
+						"accountscenter.instagram.com",
+						"accounts.google.com",
+						"auth-prod.megical.com",
+						"challenges.cloudflare.com",
+						"chrome-extension-scheme",
+						"kansalainen.kanta.fi",
+						"kanta.fi",
+						"klarna.com",
+						"moz-extension-scheme",
+						"myaccount.google.com",
+						"omakanta.kanta.fi",
+						"oma.kela.fi",
+						"omavero.vero.fi",
+						"pp-attester-turnstile.research.cloudflare.com",
+						"research.cloudflare.com",
+						"suomi.fi",
+						"tunnistautuminen.suomi.fi",
+						"tunnistus.telia.fi",
+						"www.ecosia.org",
+						"www.npmjs.com",
+						"www.suomi.fi"
+					],
+					"rulesets": [
+						"-*",
+						"+default",
+						"+block-lan",
+						"+fin-0"
+					],
+					"showBlockedCount": true
+				},
+				"uBlock0@raymondhill.net": {
 					"advancedSettings": [
 						[
 							"filterAuthorMode",
@@ -61,11 +147,7 @@
 							"ublock-filters",
 							"ublock-privacy",
 							"ublock-quick-fixes",
-							"ublock-unbreak",
+							"ublock-unbreak"
-							"user-filters",
-							"adnauseam-filters",
-							"easyprivacy",
-							"urlhaus-1"
 						]
 					},
 					"userSettings": [
@@ -103,56 +185,6 @@
 						]
 					]
 				},
-				"jid1-MnnxcxisBPnSXQ@jetpack": {
-					"checkForDNTPolicy": true,
-					"disabledSites": [
-						"www.ecosia.org",
-						"pp-attester-turnstile.research.cloudflare.com"
-					],
-					"learnInIncognito": true,
-					"learnLocally": true,
-					"sendDNTSignal": true,
-					"showCounter": true,
-					"showIntroPage": false,
-					"socialWidgetReplacementEnabled": true,
-					"trackingDomains": [
-						{
-							"domain": "tunnus.almamedia.fi",
-							"action": "cookieblock"
-						},
-						{
-							"domain": "bitwarden.eu",
-							"action": "allow"
-						},
-						{
-							"domain": "google.com",
-							"action": "block"
-						},
-						{
-							"domain": "recaptcha.net",
-							"action": "block"
-						},
-						{
-							"domain": "vimeo.com",
-							"action": "block"
-						},
-						{
-							"domain": "vimeocdn.com",
-							"action": "block"
-						},
-						{
-							"domain": "youtube.com",
-							"action": "block"
-						},
-						{
-							"domain": "youtube-nocookie.com",
-							"action": "block"
-						}
-					]
-				},
-				"jid1-ZAdIEUB7XOzOJw@jetpack": {
-					"hasSeenPostInstall": true
-				},
 				"{446900e4-71c2-419f-a6a7-df9c091e268b}": {
 					"environment": {
 						"base": "https://vault.bitwarden.eu",
@@ -213,8 +245,8 @@
 				"https://www.ecosia.org",
 				"https://pp-attester-turnstile.research.cloudflare.com"
 			],
-			"Locked": true,
+			"Locked": false,
-			"Value": false
+			"Value": true
 		},
 		"EncryptedMediaExtensions": {
 			"Enabled": false,
@@ -256,14 +288,6 @@
 				"installation_mode": "allowed",
 				"private_browsing": true
 			},
-			"adnauseam@rednoise.org": {
-				"blocked_install_message": "AdNauseam",
-				"default_area": "navbar",
-				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/adnauseam/latest.xpi",
-				"installation_mode": "force_installed",
-				"private_browsing": true,
-				"restricted_domains": []
-			},
 			"chrome-mask@overengineer.dev": {
 				"blocked_install_message": "Chrome Mask",
 				"default_area": "navbar",
@@ -371,7 +395,7 @@
 			"uBOLiteRedux@raymondhill.net": {
 				"blocked_install_message": "uBlock Origin Lite. Self-distributed",
 				"default_area": "navbar",
-				"installation_mode": "blocked",
+				"installation_mode": "allowed",
 				"private_browsing": true,
 				"restricted_domains": []
 			},
@@ -379,7 +403,7 @@
 				"blocked_install_message": "uBlock Origin",
 				"default_area": "navbar",
 				"install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi",
-				"installation_mode": "blocked",
+				"installation_mode": "normal_installed",
 				"private_browsing": true,
 				"restricted_domains": []
 			},
@@ -611,7 +635,7 @@
 			"browser.contentblocking.category": {
 				"Status": "locked",
 				"Type": "string",
-				"Value": "standard"
+				"Value": "strict"
 			},
 			"browser.contentblocking.report.hide_vpn_banner": {
 				"Status": "default",

etc/systemd/system/socket.d/freebind.conf

@@ -1,2 +0,0 @@
-[Socket]
-FreeBind=true

etc/systemd/system/socket.d/upheld.conf

@@ -1,3 +0,0 @@
-# https://github.com/systemd/systemd/issues/11553#issuecomment-1700933643
-[Install]
-UpheldBy=sockets.target

install

@@ -174,7 +174,7 @@ if [ "$(id -u)" == "0" ]; then
 	mkdir -vp /etc/systemd/system/{ssh,sshd,oidentd}.socket.d/
 	# SECURITY WARNING!
 	cp -v etc/systemd/system/service.d/rngd-wanted.conf /etc/systemd/system/service.d/
-	cp -v etc/systemd/system/socket.d/{dualstack-bind,freebind,upheld}.conf /etc/systemd/system/socket.d/
+	cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/socket.d/
 	# SECURITY WARNING!
 	cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/ssh.service.d/
 	cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/sshd.service.d/
@@ -187,10 +187,9 @@ if [ "$(id -u)" == "0" ]; then
 	cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/unbound.service.d/
 	cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/tor.service.d/
 	cp -v etc/systemd/system/service.d/never-fail.conf /etc/systemd/system/yggdrasil.service.d/
-	#cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/ssh.socket.d/
+	cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/ssh.socket.d/
-	#cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/sshd.socket.d/
+	cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/sshd.socket.d/
-	#cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/oidentd.socket.d/
+	cp -v etc/systemd/system/socket.d/dualstack-bind.conf /etc/systemd/system/oidentd.socket.d/
-	rm -v /etc/systemd/system/*.socket.d/dualstack-bind.conf
 
 	if hash systemctl 2> /dev/null; then
 		systemctl daemon-reload