extend documentation
This commit is contained in:
@@ -13,3 +13,8 @@
|
|||||||
###! Software Configuration
|
###! Software Configuration
|
||||||
|
|
||||||
- [Librewolf Browser](software/001-librewolf.qd)
|
- [Librewolf Browser](software/001-librewolf.qd)
|
||||||
|
- [Thunderbird](software/002-thunderbird.qd)
|
||||||
|
- [Spotify](software/003-spotify.qd)
|
||||||
|
- [Signal](software/004-signal.qd)
|
||||||
|
- [Telegram](software/005-telegram.qd)
|
||||||
|
- [GnuPG](software/006-opengpg.qd)
|
||||||
|
|||||||
@@ -0,0 +1,70 @@
|
|||||||
|
.docname {Thunderbird}
|
||||||
|
.include {docs}
|
||||||
|
|
||||||
|
Install thunderbird with `yay -S thunderbird`.
|
||||||
|
For support of external GnuPG for encryption, also install `yay -S gnupg gcr`.
|
||||||
|
|
||||||
|
## Settings
|
||||||
|
|
||||||
|
### General
|
||||||
|
|
||||||
|
- Thunderbird Start Page: `https://zechert.net`
|
||||||
|
- Default Search Engine: Duck Duck Go
|
||||||
|
- Disable Auto hide tab bar
|
||||||
|
- Set Fonts:
|
||||||
|
- Serif: Inter
|
||||||
|
- Sans-serif: Inter
|
||||||
|
- Monospace: RobotoMono
|
||||||
|
- Disable: Display emoticons as graphics
|
||||||
|
- Add display language English GB
|
||||||
|
- Enable Use autoscrolling
|
||||||
|
- Disable Show only display name for people in my address book
|
||||||
|
- In the advanced config editor set the property
|
||||||
|
- `mail.server.default.check_all_folders_for_new` to `true`
|
||||||
|
- `mail.opengpg.allow_external_gnupg` to `true`
|
||||||
|
- `mail.dsn.always_request_on to true`
|
||||||
|
|
||||||
|
### Composition
|
||||||
|
|
||||||
|
For spelling checks, install the packages `yay -S hunspell-de hunspell-en_gb`
|
||||||
|
|
||||||
|
- Disable `Offer to share for files larger than`
|
||||||
|
|
||||||
|
### Privacy & Security
|
||||||
|
|
||||||
|
- Junk: `When messages are marked as junk` -> `Move them to the account's Junk folder`
|
||||||
|
- Enable `Send web sites a "Do Not Track" signal"`
|
||||||
|
- Enable `Automatically enable encryption when possible`
|
||||||
|
- Enable `Automatically disable encryption when recipients change and encryption is no longer possible`
|
||||||
|
- Enable Show a notification whenever encryption is disabled automatically`
|
||||||
|
|
||||||
|
### Accounts
|
||||||
|
|
||||||
|
Add the email accounts.
|
||||||
|
|
||||||
|
### Theme
|
||||||
|
|
||||||
|
Get the theme from here: <https://github.com/catppuccin/thunderbird>.
|
||||||
|
|
||||||
|
Chezmoi will download the theme to `~/.config/thunderbird-theme`.
|
||||||
|
|
||||||
|
### Address Book
|
||||||
|
|
||||||
|
Go to the Address Book / Contacts Tab. Click on New Address Book. Select `Add Remote Address Book`
|
||||||
|
Add username and URL. The URL can be found from within nextcloud:
|
||||||
|
Go to `Contacts` -> `All Contacts` -> Click on `Contact Settings` -> Copy the link to the Contacts address book.
|
||||||
|
|
||||||
|
### Calendar
|
||||||
|
|
||||||
|
Go to the Calendar Tab and add the calendar from `cloud.zechert.net`.
|
||||||
|
|
||||||
|
- `Add Calendar` -> `On the Network`
|
||||||
|
- `Username: xxxxx`, `Location: https://cloud.zechert.net/remote.php/dav/calendars/xxxx`
|
||||||
|
(You can find the link by clicking the Edit button on the calendar in nextcloud, then go to `Internal Link`.
|
||||||
|
- For the password, open the Personal Settings in Nextcloud and go to `Security` -> `Devices & Sessions`.
|
||||||
|
Create a new app password.
|
||||||
|
|
||||||
|
## External OpenPGP
|
||||||
|
|
||||||
|
Thunderbird can use external openPGP program to handle private keys instead of storing them in
|
||||||
|
Thunderbird directly. But the public keys still need to be added to the key manager first.
|
||||||
@@ -0,0 +1,11 @@
|
|||||||
|
.docname {Spotify}
|
||||||
|
.include {docs}
|
||||||
|
|
||||||
|
Install spotify with `yay -S spotify`
|
||||||
|
|
||||||
|
In the settings, make sure to
|
||||||
|
|
||||||
|
- set Audio quality to `Very High`
|
||||||
|
- disable all `Social` features
|
||||||
|
- disable `Startup` autostart
|
||||||
|
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
.docname {Signal}
|
||||||
|
.include {docs}
|
||||||
|
|
||||||
|
Install signal messenger with `sudo pacman -S signal-desktop`
|
||||||
|
|
||||||
|
Signal has no catppuccin port, but you can switch to a dark theme.
|
||||||
@@ -0,0 +1,6 @@
|
|||||||
|
.docname {Telegram}
|
||||||
|
.include {docs}
|
||||||
|
|
||||||
|
Install telegram messenger with `sudo pacman -S telegram-desktop`
|
||||||
|
|
||||||
|
To apply the catppuccin theme, open this link <https://t.me/addtheme/ctp_macchiato>
|
||||||
@@ -0,0 +1,61 @@
|
|||||||
|
.docname {GnuPG}
|
||||||
|
.include {docs}
|
||||||
|
|
||||||
|
Make sure the package `gnupg` is installed
|
||||||
|
|
||||||
|
## Configuration
|
||||||
|
|
||||||
|
GPG configuration is stored in `~/.gnupg`. Default configuration file is `~/.gnupg/gpg.conf`.
|
||||||
|
|
||||||
|
Enable the gpg agent by adding `~/.gnupg/gpg-agent.conf` with content
|
||||||
|
|
||||||
|
```txt
|
||||||
|
default-cache-ttl 3600
|
||||||
|
pinentry-program
|
||||||
|
```
|
||||||
|
|
||||||
|
Select the GPG Keyserver by adding `~/.gnupg/gpg-dirmngr.conf` with content
|
||||||
|
```txt
|
||||||
|
keyserver hkps://keys.openpgp.org
|
||||||
|
```
|
||||||
|
|
||||||
|
## List Keys
|
||||||
|
|
||||||
|
List known public keys with `gpg --list-keys` .br
|
||||||
|
List known private keys with `gpg --list-secret-keys`
|
||||||
|
|
||||||
|
## Backup Keys
|
||||||
|
|
||||||
|
Export your secret key with `gpg --export-secret-keys --armor --output <private-key.asc> <user id>`
|
||||||
|
|
||||||
|
If you need to export a subkey only, list subkeys first with `gpg --list-secret-keys --with-subkey-fingerprint`,
|
||||||
|
then export the subkey with `gpg --armor --export-secret-subkeys --output <subkey.asc> <subkey-id>!`.
|
||||||
|
|
||||||
|
The revocation certificate can be backed up with `gpg --gen-revoke --armor --output <revcert.asc> <user id>`
|
||||||
|
|
||||||
|
## Import a Backed Up Key
|
||||||
|
|
||||||
|
Import your key with `gpg --import <private-key.asc>`
|
||||||
|
|
||||||
|
## Modify Trust
|
||||||
|
|
||||||
|
Edit the key with `gpg --edit-key <user-id>` and choose `trust`.
|
||||||
|
|
||||||
|
## Edit Expiry Date
|
||||||
|
|
||||||
|
Never delete an expired key, edit the expiry date with `gpg --edit-key <user-id>` and choose `expiry`.
|
||||||
|
|
||||||
|
## Create a New Key
|
||||||
|
|
||||||
|
Run `gpg --full-generate-key --expert` to create the primary key. Choose
|
||||||
|
|
||||||
|
- Key Type: `ECC (set your own capabilities)`
|
||||||
|
- This key should only have the `Certify` capability
|
||||||
|
|
||||||
|
Now edit the key to add subkeys `gpg --export --edit-key <user-id>`
|
||||||
|
|
||||||
|
- Encryption Subkey: `addkey` choose `ECC (encrypt only)`
|
||||||
|
- Signing Subkey: `addkey` choose `ECC (sign only)`
|
||||||
|
- Authentication Subkey: `addkey` choose `ECC (set your own capabilities)`.
|
||||||
|
Only the Authenticate capability should be enabled
|
||||||
|
- `save` to save the changes
|
||||||
@@ -306,6 +306,21 @@ Create the file `/etc/cmdline.d/03-resume.conf` with the following content
|
|||||||
resume=/dev/vgsys/lvswap
|
resume=/dev/vgsys/lvswap
|
||||||
```
|
```
|
||||||
|
|
||||||
|
On some systems, the kernel will default to s2sleep when displays are turned of or when the laptop goes to suspend.
|
||||||
|
Unfortunately, some devices have trouble waking up from this. The fix is to switch from s2sleep to deep sleep.
|
||||||
|
|
||||||
|
Create `/etC/cmdline.d/04-sleep.conf` with the following content
|
||||||
|
|
||||||
|
```ini
|
||||||
|
mem_sleep_default=deep
|
||||||
|
```
|
||||||
|
|
||||||
|
On some systems, deep sleep needs to be activated in the Bios
|
||||||
|
|
||||||
|
- Disable `Modern Standby`
|
||||||
|
- Disable `S0 Low Power Idle`
|
||||||
|
- Enable `Deep Sleep`
|
||||||
|
|
||||||
## Enable Unified Kernel Image Booting
|
## Enable Unified Kernel Image Booting
|
||||||
|
|
||||||
UKI creates a single executable that can be directly booted from the UEFI firmware without any bootloader.
|
UKI creates a single executable that can be directly booted from the UEFI firmware without any bootloader.
|
||||||
|
|||||||
@@ -123,7 +123,7 @@ You can now start hyprland with `uwsm start hyprland.desktop`.
|
|||||||
|
|
||||||
## Automatic Configuration
|
## Automatic Configuration
|
||||||
|
|
||||||
A lot of the paage installation and configuration in the `$HOME` and `$HOME/.config` folders can be automated
|
A lot of the package installation and configuration in the `$HOME` and `$HOME/.config` folders can be automated
|
||||||
with `chezmoi`.
|
with `chezmoi`.
|
||||||
|
|
||||||
1. Make sure that `chezmoi` is installed on the system with `pacman -S chezmoi`.
|
1. Make sure that `chezmoi` is installed on the system with `pacman -S chezmoi`.
|
||||||
@@ -154,6 +154,27 @@ ExecStart=-/sbin/agetty -o '-p -f -- \\u' --noclear --autologin <username> %I $T
|
|||||||
After the automatic login of the user, Hyprland will be started on TTY1 by the `uwsm` commands
|
After the automatic login of the user, Hyprland will be started on TTY1 by the `uwsm` commands
|
||||||
in the `~/.bash_profile` file. On other TTYs, Hyprland will not be started automatically.
|
in the `~/.bash_profile` file. On other TTYs, Hyprland will not be started automatically.
|
||||||
|
|
||||||
|
## Prevent Action When Laptop Lid is Closed
|
||||||
|
|
||||||
|
In some situations it might be useful to prevent all actions when the laptop lid is closed (or is being closed).
|
||||||
|
Usually systemd will go to sleep mode when the lid is closed on no other idle inhibitors are present (e.g. keyboards,
|
||||||
|
external monitors etc.).
|
||||||
|
|
||||||
|
If this works correctly it is fine, but it is buggy on some systems. If you notice symptoms like these
|
||||||
|
|
||||||
|
- The laptop goes into sleep immediately after booting and before the dock and external monitors are online
|
||||||
|
- The laptop goes into sleep when monitors turn off (e.g. due to dpms)
|
||||||
|
- The laptop goes into sleep although it is connected to a dock (dock detection is not reliable)
|
||||||
|
|
||||||
|
You can disdable the auto-suspend in `/etc/systemd/logind.conf`
|
||||||
|
|
||||||
|
```ini
|
||||||
|
[Login]
|
||||||
|
HandleLidSwitch=ignore
|
||||||
|
HandleLidSwitchExternalPower=ignore
|
||||||
|
HandleLidSwitchDocked=ignore
|
||||||
|
```
|
||||||
|
|
||||||
## Create Default User Directories
|
## Create Default User Directories
|
||||||
|
|
||||||
Execute the command `xdg-user-dirs-update` to create or update the default user directories.
|
Execute the command `xdg-user-dirs-update` to create or update the default user directories.
|
||||||
|
|||||||
Reference in New Issue
Block a user