This website requires JavaScript.
df1458af1f
firefox: use system DNS for ECH (and prefer IPv6 and try image.animation.mode)
master
Aminda Suomalainen
2024-05-18 07:33:10 +0300
38c331494c
chromium/managed: merge enable-ech-ocsp.json into https-everywhere.json
Aminda Suomalainen
2024-05-17 16:15:34 +0300
fb57ae0ea5
firefox & chromium: accidentally silence DuckDuckGo post-install
Aminda Suomalainen
2024-05-17 14:28:14 +0300
c92ded3ad3
firefox & chromium: add Ruffle.rs
Aminda Suomalainen
2024-05-17 11:05:31 +0300
9f8eaab73d
init-browser-policies.bash: why am I creating managed & recommended separately? Let's not
Aminda Suomalainen
2024-05-17 08:31:13 +0300
23bbedf852
.pre-commit-config.yaml: remove deprecated hook fix-encoding-pragma
Aminda Suomalainen
2024-05-16 21:22:54 +0300
344caa700d
Init-browser-policies.bash: how about not making recursive symlinks in the first place?
Aminda Suomalainen
2024-05-16 21:04:01 +0300
05a3cb6c08
firefox: allow private ECS
Aminda Suomalainen
2024-05-16 19:48:39 +0300
38710540f2
firefox & chromium: add missing favicons for DDG & Brave
Aminda Suomalainen
2024-05-16 19:12:10 +0300
6a916ed3b9
chromium/recommended/{duckduckgo,ecosia}.json: also restore forgotten HomepageIsNewTabPage
Aminda Suomalainen
2024-05-16 18:51:51 +0300
7bab72fb3c
chromium/recommended/{duckduckgo,ecosia}.json: trick Brave & Edge into complying by NewTabPageLocation
Aminda Suomalainen
2024-05-16 18:47:22 +0300
006ed65597
Re-integrate Edge policies into Chromium by removing apps-as-homepage.json
Aminda Suomalainen
2024-05-16 18:35:48 +0300
859f2a9f1d
chromium/duckduckgo.json: fill in DefaultSearchProviderNewTabURL
Aminda Suomalainen
2024-05-16 18:25:39 +0300
729013c3c1
firefox: install user-agent-string-switcher automatically so I don't have to worry about that for Microsoft Teams
Aminda Suomalainen
2024-05-16 15:37:59 +0300
e6f4bd72ba
firefox: explicitly enable FirefoxAccounts & Screenshots
Aminda Suomalainen
2024-05-16 15:16:25 +0300
b36f37196f
firefox: lock DoH again since I don't want to worry about multiple places where to edit it when I inevitably do
Aminda Suomalainen
2024-05-16 15:13:11 +0300
34799d0776
firefox & curl: default to dns0.eu, but have comment on unfiltered.adguard-dns.con available as well
Aminda Suomalainen
2024-05-16 15:12:12 +0300
23803ad433
firefox: restore privacy.userContext
Aminda Suomalainen
2024-05-16 15:06:04 +0300
5158b52da4
firefox: apparently HTTPS Only mode can be set here contrary to the documentation
Aminda Suomalainen
2024-05-16 15:03:01 +0300
83d53b8c17
systemd-resolved/10-dot-cloudflare.conf: add malicious domain filtering and alternative SNI
Aminda Suomalainen
2024-05-15 20:38:49 +0300
ef7584566f
systemd/resolved/10-dot-{443,adguard,dns0}.conf: fix server order
Aminda Suomalainen
2024-05-15 20:33:23 +0300
7f918cc797
systemd/resolved.conf.d/README: note my scripts existing
Aminda Suomalainen
2024-05-15 20:29:59 +0300
cb3c944d47
systemd-resolved: note server priority
Aminda Suomalainen
2024-05-15 20:23:27 +0300
1f5815b54e
hosts/dns: comment the IPv4-as-IPv6 hack, uncomment proper IPv6
Aminda Suomalainen
2024-05-15 17:44:50 +0300
4b7eff36b2
firefox: remove privacy.userContext policies for stability reasons (Firefox ESR is upset by them)
Aminda Suomalainen
2024-05-14 15:40:37 +0300
8d34384c78
unbound: mark dot-flushable-cache.conf as .badidea
Aminda Suomalainen
2024-05-14 15:08:26 +0300
901c634424
unbound: I have been using Fedora for a couple of years, I know where the ca bundle is without attributing to ctrl.blog
Aminda Suomalainen
2024-05-14 15:07:11 +0300
78fa2b7b9c
unbound/dns-over-tls.conf: remove ECS and private ECS
Aminda Suomalainen
2024-05-14 15:01:41 +0300
8d3609f171
firefox: lock ecs to disabled
Aminda Suomalainen
2024-05-14 15:01:14 +0300
5672e14c89
Revert "Stop pretending issues of ECS weight more than pros of it after GApple upgrades delayed my going to bed."
Aminda Suomalainen
2024-05-14 14:47:09 +0300
c1b1eaa040
unbound/dot-dns0-quad9.conf: add forgotten ports
Aminda Suomalainen
2024-05-14 12:23:09 +0300
fb6a44d264
firefox: on second thoughts, let the user have some control
Aminda Suomalainen
2024-05-14 11:51:22 +0300
ae0e3beb9a
firefox: fix pdf dark mode
Aminda Suomalainen
2024-05-14 11:49:17 +0300
0a9767bf38
etc/samba/playstation2.conf: hide the share from sight
Aminda Suomalainen
2024-05-14 11:32:46 +0300
b60bc9f1b8
firefox: switch to AMO version of Privacy Badger
Aminda Suomalainen
2024-05-14 11:18:26 +0300
afe50117fe
Stop pretending issues of ECS weight more than pros of it after GApple upgrades delayed my going to bed.
Aminda Suomalainen
2024-05-14 11:06:01 +0300
5d46d529bb
firefox: new tab page crashes? No problem, we can disable it.
Aminda Suomalainen
2024-05-14 11:01:28 +0300
c23e857c91
firefox: confusing user and default means I can use dark theme here
Aminda Suomalainen
2024-05-14 10:44:14 +0300
7b22530eb9
policies.json: seems like I confused default and user
Aminda Suomalainen
2024-05-14 10:38:39 +0300
7b09a7ca1f
LibreAwoo: attempt to comment what the policy sets
Aminda Suomalainen
2024-05-14 10:32:17 +0300
a0795908b2
init-browser-policies.bash: this script requires root by the way
Aminda Suomalainen
2024-05-14 10:25:49 +0300
0ce24f54d9
init-browser-policies.bash: rm recursive symlinks caused by multiple runs
Aminda Suomalainen
2024-05-14 10:20:55 +0300
303af92a6a
firefox/libreawoo: remove wrong warning
Aminda Suomalainen
2024-05-14 10:17:22 +0300
372a032a18
firefox: actually trr.mode 3 may be nice for the ECH
Aminda Suomalainen
2024-05-14 10:10:50 +0300
583cc6a8a3
firefox: please do warn if TRR isn't working
Aminda Suomalainen
2024-05-14 10:08:19 +0300
7c867e1329
firefox: explicitly allow about:{addons,config,profiles,support}
Aminda Suomalainen
2024-05-14 09:57:52 +0300
fb73f8e5d3
firefox: maybe be done with preferences?
Aminda Suomalainen
2024-05-14 09:55:24 +0300
5cc2e5d720
firefox: the end of preferences additions is approaching
Aminda Suomalainen
2024-05-14 09:43:17 +0300
89dd05c882
firefox: set user policies of hiding Mozilla ads
Aminda Suomalainen
2024-05-14 09:38:12 +0300
cb5c844e1c
firefox: TRR IPv6 preference & reading /etc/hosts
Aminda Suomalainen
2024-05-14 09:34:01 +0300
82bcaa0d80
firefox: disable prediction/prefetching
Aminda Suomalainen
2024-05-14 09:25:17 +0300
88c391fd04
firefox: don't protect any domains from extensions
Aminda Suomalainen
2024-05-14 09:18:16 +0300
fd22af5142
firefox: move DoH excluded domains here
Aminda Suomalainen
2024-05-14 09:12:21 +0300
beee380a30
firefox: begin adding security preferences
Aminda Suomalainen
2024-05-14 09:04:56 +0300
7f653b52e3
firefox/policies/README: note WebsiteFilter as not that useful for me
Aminda Suomalainen
2024-05-14 08:49:45 +0300
7a68117198
firefox policies: go wild
Aminda Suomalainen
2024-05-13 21:54:05 +0300
3de5d4cac3
LibreAwoo: where did that extraneous bracket come from?
Aminda Suomalainen
2024-05-13 21:07:05 +0300
81eede0382
stupid workaround for recursive symlinks
Aminda Suomalainen
2024-05-13 19:54:50 +0300
0a0fe39076
note to self: firefox TRR policy lock locks trr.mode to 2 (TRR first)
Aminda Suomalainen
2024-05-13 19:33:30 +0300
95d59857eb
policies.json: lock DoH provider so I only have to configure it at one place
Aminda Suomalainen
2024-05-13 18:07:22 +0300
9b4cc804e5
browsers: expose to Ecosia that we are using gpo (or policies), remove extraneous PostData from Firefox
Aminda Suomalainen
2024-05-13 17:39:29 +0300
d93b8eb3d5
firefox policy: disable bookmarks toolbar, default browser checking & add tracking protection exceptions
Aminda Suomalainen
2024-05-13 06:29:17 +0300
575332b4ce
firefox: return to Quad9 ECS, disable Pocket (I don't actually use it), fix search engine typo
Aminda Suomalainen
2024-05-12 21:43:33 +0300
f6e8c3fb45
chromium/managed: remember I have a README.md and update it
Aminda Suomalainen
2024-05-12 18:42:50 +0300
bb84a4ed65
chromium/managed: add generative-ai.json
Aminda Suomalainen
2024-05-12 18:40:48 +0300
4a642d3dea
chromium/managed: add amber-theme-colour.json.sample
Aminda Suomalainen
2024-05-12 18:34:10 +0300
87f5c78298
chromium: move safe browsings from managed to recommended
Aminda Suomalainen
2024-05-12 18:27:18 +0300
e5fc9bfbaf
{firefox,chromium}: add Plasma Integration mainly for family
Aminda Suomalainen
2024-05-12 15:49:12 +0300
5ea86f54a7
etc/hosts/dns: add the two other adguard options
Aminda Suomalainen
2024-05-12 15:36:05 +0300
c9a4a1c7cc
chromium: add doh-adguard policies
Aminda Suomalainen
2024-05-12 15:30:52 +0300
7057e8fe1f
sway/media.conf: add XF86AudioNext & XF86AudioPrev (provided by BT devices)
Aminda Suomalainen
2024-05-12 09:31:42 +0300
dceb88b272
Revert "chromium/recommended/ecosia: trick Brave into using it as well"
Aminda Suomalainen
2024-05-12 09:26:05 +0300
4835a8c89d
chromium/recommended/ecosia: trick Brave into using it as well
Aminda Suomalainen
2024-05-11 22:31:26 +0300
ef00ae4d90
chromium: set Ecosia's DefaultSearchProviderNewTabURL
Aminda Suomalainen
2024-05-11 22:24:56 +0300
a4c35994e8
chromium: rename black-theme-colour.json -> black-theme-colour.json.sample to stop me accidentally applying it
Aminda Suomalainen
2024-05-11 20:36:08 +0300
4743efb556
chromium: add enable-google-safebrowsing-less-private.json.sample
Aminda Suomalainen
2024-05-11 20:34:36 +0300
e2dd25113a
chromium: ExtensionManifestV2Availability expects 2, not true
Aminda Suomalainen
2024-05-11 19:49:04 +0300
0ad28afe47
chromium: allow manifestv2, enable chromecast, safebrowsing, passwordleakdetection, efficiencymode, suggest disabling bookmarks bar and document previously forgotten policies
Aminda Suomalainen
2024-05-11 19:44:16 +0300
d6aae8fb9a
browsers: add OISD (big) to AdNauseam
Aminda Suomalainen
2024-05-11 18:01:05 +0300
7430dd9e99
{firefox,chromium}: add HTTP Indicator
Aminda Suomalainen
2024-05-11 17:35:37 +0300
28542ca06a
firefox policy: clean-up attempt
Aminda Suomalainen
2024-05-11 17:28:29 +0300
ba4fb50c76
firefox: set DoH to Quad9 DNS as a more international option, Ecosia Search Engine
Aminda Suomalainen
2024-05-11 17:26:33 +0300
fef359500f
firefox: add AdNauseam configuration
Aminda Suomalainen
2024-05-11 17:24:44 +0300
ec40dd0250
chromium: initial commit of AdNauseam managed configuration
Aminda Suomalainen
2024-05-11 17:22:26 +0300
972c866541
chromium/aminda-extensions cleanup
Aminda Suomalainen
2024-05-11 16:46:20 +0300
9a974e7bca
{firefox,chromium,edge}: add Ecosia
Aminda Suomalainen
2024-05-11 16:16:12 +0300
97bbaa09a1
dracut.conf.d: fix name recovery to rescue, add yes_rescue counterpart
Aminda Suomalainen
2024-05-11 10:41:41 +0300
7cf8b4b626
applications/README.md: note defaults via Codium
Aminda Suomalainen
2024-05-11 10:37:05 +0300
a7a8504311
local/share/applications: take inspiration for codium from the snap
Aminda Suomalainen
2024-05-11 10:28:42 +0300
f6c8e15c51
curlrc: fix typo
Aminda Suomalainen
2024-05-11 10:07:34 +0300
70646e7edc
rc/curlrc: enable http/3 (although on Fedora it warns about this libcurl not supporting it)
Aminda Suomalainen
2024-05-10 20:33:31 +0300
9f03f54f98
rc/curlrc: add comments, default to Quad9 DoH
Aminda Suomalainen
2024-05-10 20:31:38 +0300
bd55140975
rc/curlrc: add possibly missing slash
Aminda Suomalainen
2024-05-10 20:28:45 +0300
9fcb0aa289
dnf.conf: note install_only_limit and kernel updates
Aminda Suomalainen
2024-05-10 19:27:32 +0300
0cb5b0992b
sudoers.d/nordvpnd: instead of restarting DNS, allow reloading it. Also IPv6 enabling
Aminda Suomalainen
2024-05-10 18:27:06 +0300
c81c1dd7d0
unbound: restore dot-dns0-quad9.conf with IPv4 for DNS0 & IPv6 for Quad9 ECS This partially reverts commit 422ab0de4e
Aminda Suomalainen
2024-05-09 20:02:23 +0300
93e2ab81dd
chromium policy: fix doh-cloudflare-secure.json name inconsistency
Aminda Suomalainen
2024-05-09 17:11:17 +0300
764073e241
etc/hosts/blocklist: use only ::1, systemd-resolved will fix it automatically to 127.0.0.1 too
Aminda Suomalainen
2024-05-09 12:05:37 +0300
dff016aa45
hosts/dns: IPv4 represented as IPv6 is technically valid, but this feels so wrong...
Aminda Suomalainen
2024-05-09 10:21:23 +0300
f5223b871f
etc/hosts/dns: attempt to block private ECS providers on IPv6
Aminda Suomalainen
2024-05-09 09:48:00 +0300