12 files changed, 133 insertions, 0 deletions
diff --git a/etc/systemd/network/10-wlp3s0.network b/etc/systemd/network/10-wlp3s0.network
new file mode 100644
index 0000000..65dfd51
--- /dev/null
+++ b/etc/systemd/network/10-wlp3s0.network
@@ -0,0 +1,5 @@
+[Match]
+Name=wlp3s0
+
+[Network]
+DHCP=yes
diff --git a/etc/systemd/network/20-dummy1.netdev b/etc/systemd/network/20-dummy1.netdev
new file mode 100644
index 0000000..318bb09
--- /dev/null
+++ b/etc/systemd/network/20-dummy1.netdev
@@ -0,0 +1,3 @@
+[NetDev]
+Name=dummy1
+Kind=dummy
diff --git a/etc/systemd/network/20-dummy1.network b/etc/systemd/network/20-dummy1.network
new file mode 100644
index 0000000..41bf4be
--- /dev/null
+++ b/etc/systemd/network/20-dummy1.network
@@ -0,0 +1,6 @@
+[Match]
+Name=dummy1
+Unmanaged=yes
+
+[Network]
+Domains=~home.arpa
diff --git a/etc/systemd/network/20-dummy3.netdev b/etc/systemd/network/20-dummy3.netdev
new file mode 100644
index 0000000..c9fa450
--- /dev/null
+++ b/etc/systemd/network/20-dummy3.netdev
@@ -0,0 +1,3 @@
+[NetDev]
+Name=dummy3
+Kind=dummy
diff --git a/etc/systemd/network/20-dummy3.network b/etc/systemd/network/20-dummy3.network
new file mode 100644
index 0000000..e0d4be5
--- /dev/null
+++ b/etc/systemd/network/20-dummy3.network
@@ -0,0 +1,6 @@
+[Match]
+Name=dummy3
+Unmanaged=yes
+
+[Network]
+Domains=~home.arpa
diff --git a/etc/systemd/network/25-he-ipv6.netdev b/etc/systemd/network/25-he-ipv6.netdev
new file mode 100644
index 0000000..b2d2047
--- /dev/null
+++ b/etc/systemd/network/25-he-ipv6.netdev
@@ -0,0 +1,10 @@
+[NetDev]
+Name=he-ipv6
+Kind=sit
+MTUBytes=1480
+
+[Tunnel]
+Local=192.168.1.103
+Remote=209.51.161.14
+TTL=255
+Independent=true
diff --git a/etc/systemd/network/25-he-ipv6.network b/etc/systemd/network/25-he-ipv6.network
new file mode 100644
index 0000000..6ce754f
--- /dev/null
+++ b/etc/systemd/network/25-he-ipv6.network
@@ -0,0 +1,9 @@
+[Match]
+Name=he-ipv6
+
+[Network]
+Gateway=2001:470:1f06:1d3::1
+Address=2001:470:1f06:1d3::2/64
+Address=2001:470:89ac:3::1/64
+DNS=2001:470:20::2
+BindCarrier=wlp3s0 enp5s0
diff --git a/etc/systemd/resolved.conf b/etc/systemd/resolved.conf
new file mode 100644
index 0000000..b40f8c0
--- /dev/null
+++ b/etc/systemd/resolved.conf
@@ -0,0 +1,34 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it under the
+#  terms of the GNU Lesser General Public License as published by the Free
+#  Software Foundation; either version 2.1 of the License, or (at your option)
+#  any later version.
+#
+# Entries in this file show the compile time defaults. Local configuration
+# should be created by either modifying this file, or by creating "drop-ins" in
+# the resolved.conf.d/ subdirectory. The latter is generally recommended.
+# Defaults can be restored by simply deleting this file and all drop-ins.
+#
+# Use 'systemd-analyze cat-config systemd/resolved.conf' to display the full config.
+#
+# See resolved.conf(5) for details.
+
+[Resolve]
+# Some examples of DNS servers which may be used for DNS= and FallbackDNS=:
+# Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
+# Google:     8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
+# Quad9:      9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
+#DNS=
+FallbackDNS=1.1.1.1#cloudflare-dns.com 8.8.8.8#dns.google
+Domains=rak.ac
+#DNSSEC=yes
+#DNSOverTLS=no
+#MulticastDNS=yes
+LLMNR=no
+#Cache=yes
+#CacheFromLocalhost=no
+#DNSStubListener=yes
+#DNSStubListenerExtra=
+#ReadEtcHosts=yes
+#ResolveUnicastSingleLabel=no
diff --git a/etc/systemd/system/fix-f4-led.service b/etc/systemd/system/fix-f4-led.service
new file mode 100644
index 0000000..87ccb0f
--- /dev/null
+++ b/etc/systemd/system/fix-f4-led.service
@@ -0,0 +1,11 @@
+# Enable with
+# systemctl enable --now fix-f4-led.service
+[Unit]
+Description=Fix F4 LED on Thinkpad
+
+[Service]
+Type=oneshot
+ExecStart=/bin/sh -c "echo 0 > /sys/class/leds/platform::micmute/brightness"
+
+[Install]
+WantedBy=multi-user.target
diff --git a/etc/systemd/system/he-ipv6-update.service b/etc/systemd/system/he-ipv6-update.service
new file mode 100644
index 0000000..e265b60
--- /dev/null
+++ b/etc/systemd/system/he-ipv6-update.service
@@ -0,0 +1,26 @@
+[Unit]
+Description=Update he-ipv6 tunnel end point
+After=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=curl --silent "https://USERNAME:PASSWORD@ipv4.tunnelbroker.net/nic/update?hostname=801807"
+# Prevent acquiring new privileges. Warning: breaks execution of SUID binaries
+NoNewPrivileges=yes
+PermissionsStartOnly=true
+# Prevent access to /dev
+PrivateDevices=yes
+# Use dedicated /tmp
+PrivateTmp=yes
+PrivateUsers=true
+# Hide user homes
+ProtectHome=yes
+# Prevent loading or reading kernel modules
+ProtectKernelModules=yes
+# Prevent altering kernel tunables
+ProtectKernelTunables=yes
+# strict or full, see docs
+ProtectSystem=strict
+
+[Install]
+WantedBy=network-online.target
diff --git a/etc/systemd/system/var-lib-mpd-music.automount b/etc/systemd/system/var-lib-mpd-music.automount
new file mode 100644
index 0000000..7314a79
--- /dev/null
+++ b/etc/systemd/system/var-lib-mpd-music.automount
@@ -0,0 +1,9 @@
+[Unit]
+Description=Automount /var/lib/mpd/music
+
+[Automount]
+Where=/var/lib/mpd/music
+DirectoryMode=0555
+
+[Install]
+WantedBy=multi-user.target mpd.service
diff --git a/etc/systemd/system/var-lib-mpd-music.mount b/etc/systemd/system/var-lib-mpd-music.mount
new file mode 100644
index 0000000..bab6239
--- /dev/null
+++ b/etc/systemd/system/var-lib-mpd-music.mount
@@ -0,0 +1,11 @@
+[Unit]
+Description=MPD music mount
+Requires=zfs-mount.service
+
+[Mount]
+What=/media/t/music_clean
+Where=/var/lib/mpd/music
+Options=bind,ro
+
+[Install]
+WantedBy=multi-user.target