Update router guide configs and sync

domains/apple

@@ -1,18 +1,34 @@
 address=/aaplimg.com/
 address=/apple-dns.net/
 address=/apple.com.akadns.net/
+address=/apple.com.edgekey.net.globalredir.akadns.net/
 address=/apple.com.edgekey.net/
 address=/apple.com.edgesuite.net/
 address=/apple.com/
+address=/blobstore-apple.com.akadns.net/
 address=/cddbp.net/
 address=/cdn-apple.com/
+address=/courier-push-applecom.akadns.net/
 address=/courier-sandbox-push-apple.com.akadns.net/
+address=/courier-sandbox-push-applecom.akadns.net/
 address=/ess-apple.com.akadns.net/
+address=/gc-apple.com.akadns.net/
+address=/gcsis-applecom.akadns.net/
+address=/guzzoni-apple.com.akadns.net/
+address=/icloud.com.akadns.net/
 address=/icloud.com/
+address=/iphone.com/
 address=/itunes-apple.com.akadns.net/
 address=/itunes-nocookie.com/
 address=/itunes.com/
 address=/ls-apple.com.akadns.net/
+address=/me.com.akadns.net/
+address=/me.com/
 address=/mzstatic.com/
+address=/oa-apple.com.akadns.net/
 address=/origin-apple.com.akadns.net/
+address=/push-apple.com.akadns.net/
+address=/seed-siri-apple.com.akadns.net/
+address=/siri.com/
+address=/smoot-applecom.akadns.net/
 address=/wwwitunes.com/

domains/microsoft

@@ -63,6 +63,7 @@ address=/live-str.com/
 address=/live-tst.com/
 address=/live-tst.net/
 address=/live.ca/
+address=/live.com.akadns.net/
 address=/live.com/
 address=/live.it/
 address=/live.net/
@@ -353,6 +354,7 @@ address=/msn.co.jp/
 address=/msn.co.kr/
 address=/msn.co.th/
 address=/msn.co.uk/
+address=/msn.com.akadns.net/
 address=/msn.com.cn/
 address=/msn.com.hk/
 address=/msn.com.my/
@@ -375,6 +377,7 @@ address=/msngamecenter.net/
 address=/msngamecenter.org/
 address=/msngamescenter.net/
 address=/msngamescenter.org/
+address=/msnmessenger.com/
 address=/msnmobile.in/
 address=/msnupdate.bz/
 address=/msnusers.com/
@@ -425,6 +428,7 @@ address=/skype.net/
 address=/skype/
 address=/skypeassets.com/
 address=/skypeassets.net/
+address=/skypedata.akadns.net/
 address=/start.com/
 address=/startwindowsmobile.com/
 address=/stationq.com/

hashes.csv

@@ -10,25 +10,33 @@ apu2-tinycore6.4.img,f5a20eeb01dfea438836e48cb15a18c5780194fed6bf21564fc7c894a1a
 apu2-tinycore6.4.img.gz,4b834077ec5da535b07ab7e17215eb8d64b71dbcfd3f9076d51252a0f7158f3c
 apu2_160311.rom,42e1678b3a8e7ebfd1c2a1827ca441cae5a7bb9101b0d6067fd2622174cf0ec1
 apu2_v4.0.20.rom.tar.gz,943f962944a59d5fa2e549db2a6d55cd5f17ca40c3afce2815830e309388a3ff
+apu2_v4.0.23.rom.tar.gz,de2a058066c8ae7fa53841fac13eb4517ba99b755a5df9927aca92455a3ed499
 apu2_v4.8.0.1.rom.tar.gz,dd2714a26f2d02c00d9215fa7592804bc6164dfa166ec011311f308b86b564ec
 apu2_v4.8.0.5.rom.tar.gz,761c25711d04c642eb139c69c7f6463b86ac0e3a7c8a2537d4c5a2601f8c7f15
 apu2_v4.8.0.6.rom.tar.gz,3d08f66510b0b9c328beaf3a3323379178230441fbcf80c7dfa52df0e64854b3
 apu2_v4.8.0.7.rom.tar.gz,b0862908341f715e16af55eaec9868de8de7ac1a0e262d85da6f47d483923789
+apu2_v4.9.0.1.rom.tar.gz,3388343eb3114102df2d8f9332077033f49caf5605041f259bad5043a8cfd842
 apu3_v4.0.20.rom.tar.gz,a4fac78636f5c7c88af14f9cde0a17b1af8ebda16792c06b7b480cd2624e4f18
 apu3_v4.0.21.rom.tar.gz,6c762e5b0570601e48711b01c15200fdc06010efcab01c5d6bd68bcde2ac9bb1
 apu3_v4.0.22.rom.tar.gz,9c06b7821858a50425d2bfa3538afba883c5f178e65dd6496beff366a6745637
+apu3_v4.0.23.rom.tar.gz,0c997f525637119b9eaca022ff8b1baa7f10f0c5f0a343f6bbf66d9c5070739f
 apu3_v4.8.0.1.rom.tar.gz,96f0ce1985312f411271cfec2a1a6ed674fa44a6961420b40cce9946f5c51f7f
 apu3_v4.8.0.5.rom.tar.gz,264373798a4d8b4b0ba7d203eb52a9d268e0abc28ff112780be242e62d1220d2
 apu3_v4.8.0.6.rom.tar.gz,ae3175fda5d9c459d690d8c624f164ae4c9efbe174dd51096a7171c670f07d79
 apu3_v4.8.0.7.rom.tar.gz,3cd5cf8bc69dd6029058a212359d7027e620183b65762a7e6f12ce168db6c74e
+apu3_v4.9.0.1.rom.tar.gz,ca3d0829210327fc7f47a61f00340ed1bc34b49383ec9e7d708f86d927ec7f83
 apu4_v4.0.20.rom.tar.gz,1ef1b64f6dc722259eedec6e70201e28a1ae4ef5044ec36e66314956b5c18dc2
 apu4_v4.0.21.rom.tar.gz,0356629c83204cdc44b51bcb6c27a0095cdb18221bf9f22cc2357919fd2f0a9c
 apu4_v4.0.22.rom.tar.gz,a0c4dd340a46c3f0b827fd8acb001de7b4ef915b1fa8a5e1a91828fcad5315ab
+apu4_v4.0.23.rom.tar.gz,7c3ed57cc5b3a7e6f1b4fc16973456244995e5c0714ff09b63a8cbb008402539
 apu4_v4.8.0.1.rom.tar.gz,7554e6340befdfc1f18327ec8145466014435d4cf14799dcad3804992380e309
 apu4_v4.8.0.2.rom.tar.gz,1bb35e18abe38cd9a7f98d6dda918c976db1f773623bd1301900ab35bd8ef4ec
 apu4_v4.8.0.5.rom.tar.gz,8dfc3b877a66c1f508976cf2bd77579eb9163852274bf8b7868a5c7239f4f2b2
 apu4_v4.8.0.6.rom.tar.gz,df0318ca2e7a60cf229fe367fa3254384338193432b2945b565a9f08c1ccbd0f
 apu4_v4.8.0.7.rom.tar.gz,1617e40989ffa0f87a9f7f0c17e39bc02c65dbd79d370593b92c83610f1dd3bc
+apu4_v4.9.0.1.rom.tar.gz,09daf7c0dc8482a01898b8d73571946ab97612479ebc3af9af6ff7139e02fc3d
+coreboot-4.9.0.2.tar.gz,5137d8f6948320622600713decf70287aba14634bfb7122d2937c09efe59e755
+coreboot-4.9.tar.gz,4c36e1d09f7c6fc60dacc4e6c65b49d204eb70075093160d1d1a58717b5bb7bc
 debian-9.2.1-amd64-xfce-CD-1.iso,a071a2c647f2222cd19fe54944be162c3d58cf5fa11c156686e88ca9442aebd5
 debian-9.3.0-amd64-xfce-CD-1.iso,0be8d6924cfd8df4a15466da0eceb4b66e5e23b121218d4e383a0623c251d35d
 debian-9.4.0-amd64-netinst.iso,124d270006703f2111224dec3bf7a9d01450168be41d4834f88fdd035552b044
@@ -53,6 +61,7 @@ install62.iso,b7994d29c7db3087db65158901d700fb7d10500b9b7496c1d86b285cabce0a2b
 install63.fs,df19266be16079ccd6114447f7bb13bdedb9c5cb66ecc1ea98544290fa4dc138
 install63.iso,ee775405dd7926975befbc3fef23de8c4b5a726c3b5075e4848fcd3a2a712ea8
 install64.fs,7aa4344cb39efbf67300f97ac7eec005b607e8c19d4e31a0a593a8ee2b7136e4
+onerng_3.6-1_all.deb,a9ccf7b04ee317dbfc91518542301e2d60ebe205d38e80563f29aac7cd845ccb
 slock-1.4.tar.gz,b53849dbc60109a987d7a49b8da197305c29307fd74c12dc18af0d3044392e6a
 st-0.7.tar.gz,f7870d906ccc988926eef2cc98950a99cc78725b685e934c422c03c1234e6000
 st-0.8.1.tar.gz,c4fb0fe2b8d2d3bd5e72763e80a8ae05b7d44dbac8f8e3bb18ef0161c7266926

hostapd.conf

@@ -3,6 +3,7 @@
 ssid2=P"M9yEJEEG6XabZVWF7WuDiFifFhaOO3"
 wpa_passphrase=6cHDuuvmdSCUaFxhqdsvYYrAVQJLy7
 #interface=athn0
+#interface=wlp4s0
 interface=wlan0
 driver=nl80211
 # a = IEEE 802.11a (5 GHz)

lighttpd/lighttpd.conf

@@ -1,13 +1,14 @@
+# https://github.com/drduh/config/blob/master/lighttpd/lighttpd.conf
+# https://redmine.lighttpd.net/projects/lighttpd/repository/revisions/master/entry/doc/config/lighttpd.conf
 server.modules = (
   "mod_access",
   "mod_accesslog",
   "mod_alias",
   "mod_magnet",
 )
-
+#server.bind                   = "192.168.0.1"
 server.bind                   = "127.0.0.1"
 server.port                   = 80
-
 server.range-requests         = "disable"
 server.follow-symlink         = "disable"
 server.document-root          = "/var/www"
@@ -21,14 +22,11 @@ server.max-read-idle          = 15
 server.max-request-size       = 1
 server.max-write-idle         = 15
 static-file.etags             = "disable"
-
 accesslog.filename            = "/var/log/lighttpd/access.log"
-
 debug.log-request-header      = "enable"
 debug.log-response-header     = "enable"
 debug.log-file-not-found      = "enable"
 dir-listing.activate          = "enable"
-
 index-file.names              = ( "index.html" )
 url.access-deny               = ( "~", ".inc" )
 mimetype.assign               = (
@@ -39,24 +37,22 @@ mimetype.assign               = (
   ".jpg"  => "image/jpg",
   ".png"  => "image/png"
 )
-
-$SERVER["socket"] == ":443" {
-  ssl.engine                  = "enable"
-  ssl.honor-cipher-order      = "enable"
-  ssl.cipher-list             = "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH"
-  ssl.use-compression         = "disable"
-  ssl.use-sslv2               = "disable"
-  ssl.use-sslv3               = "disable"
-  ssl.pemfile                 = "/etc/pki/lighttpd.pem"
-  ssl.ca-file                 = "/etc/pki/chain.pem"
-  ssl.verifyclient.activate   = "enable"
-  ssl.verifyclient.enforce    = "enable"
-  ssl.verifyclient.username   = "Root CA"
-  setenv.add-response-header  = ( "Strict-Transport-Security" => "max-age=31536000" )
-}
-
+#$SERVER["socket"] == ":443" {
+#  ssl.engine                  = "enable"
+#  ssl.honor-cipher-order      = "enable"
+#  ssl.cipher-list             = "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH"
+#  ssl.use-compression         = "disable"
+#  ssl.use-sslv2               = "disable"
+#  ssl.use-sslv3               = "disable"
+#  ssl.pemfile                 = "/etc/pki/lighttpd.pem"
+#  ssl.ca-file                 = "/etc/pki/chain.pem"
+#  ssl.verifyclient.activate   = "enable"
+#  ssl.verifyclient.enforce    = "enable"
+#  ssl.verifyclient.username   = "Root CA"
+#  setenv.add-response-header  = ( "Strict-Transport-Security" => "max-age=31536000" )
+#}
 $HTTP["url"] !~ "^/public/(.*)$" {
-  $SERVER["socket"] != ":443" {
+#  $SERVER["socket"] != ":443" {
     magnet.attract-physical-path-to = ("/etc/lighttpd/magnet.luau" )
-  }
+#  }
 }

lighttpd/magnet.luau

@@ -1,3 +1,5 @@
+-- https://github.com/drduh/config/blob/master/lighttpd/magnet.luau
+-- https://redmine.lighttpd.net/projects/lighttpd/wiki/Docs_ModMagnet
 lighty.content = {{ filename = "/var/www/index.html" }}
 lighty.header["Content-Type"] = "text/html"
 return 200

privoxy/user.action

@@ -166,7 +166,7 @@ google.com/amp/s/.*
 .awsstatic.com
 .bankofamerica.com
 .bbc.com
-.bcc.co.uk
+.bbc.co.uk
 .bing.com
 .bit.ly
 .blogblog.com
@@ -216,7 +216,6 @@ google.com/amp/s/.*
 .etsy.com
 .etsystatic.com
 .export.gov
-.express.co.uk
 .fastly.com
 .fastly.net
 .fbi.gov
@@ -328,6 +327,7 @@ google.com/amp/s/.*
 .openvpn.org
 .parallels.com
 .paypal.com
+.pcengines.ch
 .pcpartpicker.com
 .phys.org
 .phys.uwm.edu

scripts/iptables.sh

@@ -1,6 +1,10 @@
 #!/usr/bin/env bash
 # https://github.com/drduh/config/blob/master/scripts/iptables.sh
 PATH='/sbin'
+#EXT=enp1s0
+#INT=enp2s0
+#DMZ=enp3s0
+#WIFI=wlp4s0
 EXT=eth0
 INT=eth1
 DMZ=eth2

sshd_config

@@ -6,6 +6,7 @@ ListenAddress 0.0.0.0
 #ListenAddress 10.8.1.1
 AllowUsers sysadm
 HostKey /etc/ssh/ssh_host_key
+#HostKey /etc/ssh/ssh_host_ed25519_key
 Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com
 MACs hmac-sha2-512-etm@openssh.com
 KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256

user.js

@@ -1,4 +1,5 @@
 // https://github.com/drduh/config/blob/master/user.js
+// https://github.com/ghacksuserjs/ghacks-user.js/wiki/1.1-Overview
 //user_pref("browser.display.use_document_fonts", 0);  // disable web pages picking fonts
 //user_pref("browser.newtab.url", "about:blank");  // blank new tab page
 //user_pref("browser.newtabpage.enabled", false);  // blank new tab page
@@ -92,6 +93,7 @@ user_pref("browser.link.open_newwindow", 3);  // open new windows in tabs instea
 user_pref("browser.link.open_newwindow.restriction", 0);
 user_pref("browser.newtab.preload", false);  // disable new tab tile preload
 user_pref("browser.newtabpage.activity-stream.asrouter.providers.snippets", "");  // disable activity stream snippets
+user_pref("browser.newtabpage.activity-stream.asrouter.userprefs.cfr", false);
 user_pref("browser.newtabpage.activity-stream.disableSnippets", true);
 user_pref("browser.newtabpage.activity-stream.enabled", false);
 user_pref("browser.newtabpage.activity-stream.feed.topsites", false);
@@ -265,6 +267,9 @@ user_pref("gecko.handlerService.migrated", true);
 user_pref("gecko.handlerService.schemes.webcal.0.uriTemplate", "");
 user_pref("general.warnOnAboutConfig", false);  // disable about:config warning
 user_pref("geo.enabled", false);  // no geo-location
+user_pref("geo.provider.ms-windows-location", false);  // disable geo on windows
+user_pref("geo.provider.use_corelocation", false);  // disable geo on mac
+user_pref("geo.provider.use_gpsd", false);  // disable geo on linux
 user_pref("geo.wifi.logging.enabled", false);
 user_pref("geo.wifi.uri", "");
 user_pref("gfx.downloadable_fonts.woff2.enabled", false);

zshrc

@@ -64,7 +64,7 @@ function zshaddhistory {
   line=${1%%$'\n'}
   cmd=${line%% *}
   [[ ${#line} -ge 5 \
-    && ${cmd} != (base64|bzip2|cal|calc|cat|cd|chmod|cp|curl|cvs|df|diff|dig|dmesg|doas|du|ent|exiftool|fdisk|feh|file|find|git|gpg|grep|hdiutil|head|kill|less|ls|mail|make|man|mkdir|mv|openssl|pdf|ping|pkill|ps|rcctl|rm|scp|scrot|sha256|sort|srm|ssh|stat|sudo|tar|uname|useradd|vi|vim|wc|which|whoami|whois|wireshark|xxd)
+    && ${cmd} != (base64|bzip2|cal|calc|cat|cd|chmod|cp|curl|cvs|date|df|diff|dig|dmesg|doas|du|egrep|ent|exiftool|fdisk|feh|file|find|git|gpg|grep|hdiutil|head|kill|less|ls|mail|make|man|mkdir|mv|openssl|pdf|ping|pkill|ps|rcctl|rm|scp|scrot|sha256|sort|srm|ssh|stat|sudo|tar|uname|useradd|vi|vim|wc|which|whoami|whois|wireshark|xxd)
   ]]
 }
 function path {