systemd-resolved: add 91-avahi.conf for replacing avahi

etc/firefox/policies/policies.json

@@ -52,6 +52,43 @@
 				"jid1-ZAdIEUB7XOzOJw@jetpack": {
 					"hasSeenPostInstall": true
 				},
+				"uBOLiteRedux@raymondhill.net": {
+					"disableFirstRunPage": true,
+					"noFiltering": [
+						"accountscenter.facebook.com",
+						"accountscenter.instagram.com",
+						"accounts.google.com",
+						"auth-prod.megical.com",
+						"challenges.cloudflare.com",
+						"chrome-extension-scheme",
+						"kansalainen.kanta.fi",
+						"kanta.fi",
+						"klarna.com",
+						"moz-extension-scheme",
+						"myaccount.google.com",
+						"omakanta.kanta.fi",
+						"oma.kela.fi",
+						"omavero.vero.fi",
+						"pp-attester-turnstile.research.cloudflare.com",
+						"research.cloudflare.com",
+						"suomi.fi",
+						"tunnistautuminen.suomi.fi",
+						"tunnistus.telia.fi",
+						"www.ecosia.org",
+						"www.npmjs.com",
+						"www.suomi.fi"
+					],
+					"rulesets": [
+						"+default",
+						"+badware",
+						"+block-lan",
+						"+openphish-domains",
+						"+urlhaus-full",
+						"+fin-0",
+						"+annoyances-cookies",
+						"+annoyances-overlays"
+					]
+				},
 				"uBlock0@raymondhill.net": {
 					"advancedSettings": [
 						[
@@ -365,6 +402,13 @@
 				"private_browsing": true,
 				"restricted_domains": []
 			},
+			"uBOLiteRedux@raymondhill.net": {
+				"blocked_install_message": "uBlock Origin Lite. Self-distributed",
+				"default_area": "navbar",
+				"installation_mode": "allowed",
+				"private_browsing": true,
+				"restricted_domains": []
+			},
 			"uBlock0@raymondhill.net": {
 				"blocked_install_message": "uBlock Origin",
 				"default_area": "navbar",

etc/systemd/network/10-ether.network

@@ -9,6 +9,8 @@ ActivationPolicy=always-up
 Unmanaged=false
 
 [Network]
+LLMNR=resolve
+MulticastDNS=resolve
 DHCP=true
 IPv6PrivacyExtensions=true
 IPv6LinkLocalAddressGenerationMode=stable-privacy

etc/systemd/network/10-ether.network.d/home-static.conf

@@ -7,6 +7,8 @@ MACAddress=ff:ff:ff:ff:ff:ff
 #ActivationPolicy=always-up
 
 [Network]
+LLMNR=true
+MulticastDNS=true
 # /24, /16, /8 are the the class C, B, A networks
 Address=192.168.0.2/24
 Gateway=192.168.0.1

etc/systemd/network/10-none.network

@@ -4,3 +4,7 @@ Type=none
 
 [Link]
 Unmanaged=true
+
+[Network]
+LLMNR=false
+MulticastDNS=false

etc/systemd/network/10-wireguard.network

@@ -3,3 +3,7 @@ Type=wireguard
 
 [Link]
 Unmanaged=true
+
+[Network]
+LLMNR=false
+MulticastDNS=false

etc/systemd/network/10-wlan.network

@@ -9,6 +9,8 @@ ActivationPolicy=always-up
 Unmanaged=false
 
 [Network]
+LLMNR=true
+MulticastDNS=true
 DHCP=true
 IPv6PrivacyExtensions=true
 IPv6LinkLocalAddressGenerationMode=stable-privacy

etc/systemd/network/10-wlan.network.d/example.conf

@@ -2,6 +2,8 @@
 SSID=ExampleSSID_nomap BusinessSSID_nomap
 
 [Network]
+LLMNR=true
+MulticastDNS=true
 DHCP=false
 Address=10.1.2.3/8
 Gateway=10.0.0.1

etc/systemd/resolved.conf.d/90-resolve-mdns.conf

@@ -0,0 +1,5 @@
+# Enable resolver, but not responder
+[Resolve]
+LLMNR=resolve
+MulticastDNS=resolve
+# vim: filetype=systemd

etc/systemd/resolved.conf.d/91-avahi.conf

@@ -0,0 +1,5 @@
+# Enable resolver and responder, practically replacing avahi-daemon
+[Resolve]
+LLMNR=true
+MulticastDNS=true
+# vim: filetype=systemd