Refactored folder structure

little snitch/README.md

@@ -0,0 +1,19 @@
+# Little Snitch
+
+1. [Rules](#rules)
+1. [Sources](#sources)
+
+## Rules
+
+Available [complete][full ruleset] or in [parts].
+
+## Sources
+
+- [Commonly whitelisted domains]
+
+<!-- internal references-->
+[full ruleset]: rules/all.lsrules
+[parts]: rules/parts/
+
+<!-- external references -->
+[commonly whitelisted domains]: https://discourse.pi-hole.net/t/commonly-whitelisted-domains/212

little snitch/rules/all.lsrules

@@ -52,6 +52,8 @@
                 "ocsp.godaddy.com",
                 "ocsp.pki.goog",
                 "ocsp.r2m01.amazontrust.com",
+                "ocsp.r2m02.amazontrust.com",
+                "ocsp.rootca1.amazontrust.com",
                 "ocsp.sca1b.amazontrust.com",
                 "ocsp.sectigo.com",
                 "ocsp.usertrust.com",
@@ -193,7 +195,7 @@
             "action": "allow",
             "notes": "Allow Spotify to advertise its capabilities on the local network.",
             "ports": "1900",
-            "process": "/Users/mek/Applications/Spotify.app/Contents/MacOS/Spotify",
+            "process": "/Applications/Spotify.app/Contents/MacOS/Spotify",
             "protocol": "udp",
             "remote-addresses": "239.255.255.250"
         },
@@ -210,6 +212,8 @@
                 "ocsp.godaddy.com",
                 "ocsp.pki.goog",
                 "ocsp.r2m01.amazontrust.com",
+                "ocsp.r2m02.amazontrust.com",
+                "ocsp.rootca1.amazontrust.com",
                 "ocsp.sca1b.amazontrust.com",
                 "ocsp.sectigo.com",
                 "ocsp.usertrust.com",

little snitch/rules/build-full-ruleset.sh

@@ -23,6 +23,6 @@ done
 
 jq --indent 4 -M \
 	'.rules=([inputs.rules]|flatten)' \
-	"${WORKDIR}/ruleset.lsrules" \
+	"${WORKDIR}/all.lsrules" \
 	"${WORKDIR}/parts/"*.lsrules \
-| sponge "${WORKDIR}/ruleset.lsrules"
+| sponge "${WORKDIR}/all.lsrules"

little snitch/rules/parts/spotify.lsrules

@@ -6,7 +6,7 @@
             "action": "allow",
             "notes": "Allow Spotify to advertise its capabilities on the local network.",
             "ports": "1900",
-            "process": "/Users/mek/Applications/Spotify.app/Contents/MacOS/Spotify",
+            "process": "/Applications/Spotify.app/Contents/MacOS/Spotify",
             "protocol": "udp",
             "remote-addresses": "239.255.255.250"
         }