Prune stale dotfiles commentary

5 files changed, 6 insertions, 41 deletions

diff --git a/etc/nftables.conf b/etc/nftables.conf
index e4f68ed..355465a 100644
--- a/etc/nftables.conf
+++ b/etc/nftables.conf
@@ -1,8 +1,7 @@
 #!/usr/bin/nft -f
 # vim:set ts=2 sw=2 et:
 
-# IPv4/IPv6 Simple & Safe firewall ruleset.
-# More examples in /usr/share/nftables/ and /usr/share/doc/nftables/examples/.
+# IPv4/IPv6 default-deny firewall ruleset.
 
 destroy table inet filter
 table inet filter {
@@ -22,12 +21,6 @@ table inet filter {
     iifname "virbr0" udp dport { 53, 67 } accept comment "libvirt: DHCP+DNS from guests"
     iifname "virbr0" tcp dport 53 accept comment "libvirt: DNS over TCP from guests"
 
-    # Waydroid's NAT bridge: same pattern as libvirt. The Android container's
-    # DhcpClient broadcasts DHCPDISCOVER on waydroid0; without this rule it's
-    # dropped before dnsmasq sees it and the container never gets an IP.
-    iifname "waydroid0" udp dport { 53, 67 } accept comment "waydroid: DHCP+DNS from container"
-    iifname "waydroid0" tcp dport 53 accept comment "waydroid: DNS over TCP from container"
-
     pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited
     counter
   }
@@ -44,11 +37,5 @@ table inet filter {
     # load before libvirtd has created virbr0 at boot.
     iifname "virbr0" accept comment "libvirt: guest egress"
     oifname "virbr0" ct state established,related accept comment "libvirt: guest return"
-
-    # Waydroid's NAT bridge: same pattern as libvirt. Waydroid's container
-    # service installs MASQUERADE itself via iptables-nft compat, so no
-    # explicit nat table is needed here -- only the forward-chain accepts.
-    iifname "waydroid0" accept comment "waydroid: guest egress"
-    oifname "waydroid0" ct state established,related accept comment "waydroid: guest return"
   }
 }
diff --git a/etc/pacman.conf b/etc/pacman.conf
index aaa7fef..f6e7e64 100644
--- a/etc/pacman.conf
+++ b/etc/pacman.conf
@@ -22,8 +22,6 @@ HoldPkg     = pacman glibc
 Architecture = auto
 
 # Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
-# llama.cpp-vulkan: formerly pinned as an AUR package because every upstream
-# commit triggered a 1-2 hour rebuild. Kept as a reminder if it returns.
 #IgnorePkg   =
 #IgnoreGroup =
 
diff --git a/etc/systemd/logind.conf.d/10-ignore-power-key.conf b/etc/systemd/logind.conf.d/10-ignore-power-key.conf
index 1ca4cc3..5b1dc15 100644
--- a/etc/systemd/logind.conf.d/10-ignore-power-key.conf
+++ b/etc/systemd/logind.conf.d/10-ignore-power-key.conf
@@ -1,14 +1,4 @@
 [Login]
-# Ignore KEY_POWER from any source. Misbehaving USB devices (cheap
-# keyboards, KVM switches, headset dongles) sometimes emit KEY_POWER on
-# enumeration, hot-plug, or for unrelated buttons -- and some emit a
-# press without a matching release, which logind classifies as a
-# long-press and acts on after 5s. Ignoring both short and long press
-# is the only reliable policy without per-device evdev filtering.
-#
-# Real shutdowns: `systemctl poweroff` or GUI menus. The laptop's
-# physical power button also emits KEY_POWER and is now a no-op for
-# clean shutdowns; a very long hold (~10s) still triggers a firmware
-# force-off as a last resort.
+# Ignore KEY_POWER events, including long-press handling.
 HandlePowerKey=ignore
 HandlePowerKeyLongPress=ignore
diff --git a/etc/systemd/logind.conf.d/20-lid-ac.conf b/etc/systemd/logind.conf.d/20-lid-ac.conf
index 08e5014..6865232 100644
--- a/etc/systemd/logind.conf.d/20-lid-ac.conf
+++ b/etc/systemd/logind.conf.d/20-lid-ac.conf
@@ -1,14 +1,4 @@
 [Login]
-# Suspend policy: closing the lid suspends ONLY when on battery. When
-# AC is connected the lid switch is ignored entirely. The rationale is
-# simple and matches user mental model -- if you don't want the
-# machine to sleep, plug it in.
-#
-# This obsoletes the previous SSH/zellij-aware inhibit machinery: any
-# long-running task (build, download, SSH session, server) just needs
-# AC and will never be suspended out from under itself.
-#
-# `HandleLidSwitch` (default = suspend) still applies on battery.
-# `HandleLidSwitchDocked` (default = ignore) still applies when an
-# external monitor / dock is attached.
+# On AC, closing the lid does not suspend. Battery/docked behavior uses
+# logind defaults.
 HandleLidSwitchExternalPower=ignore
diff --git a/etc/systemd/network/30-ethernet-bond0.network b/etc/systemd/network/30-ethernet-bond0.network
index 31f14a2..f58f7bd 100644
--- a/etc/systemd/network/30-ethernet-bond0.network
+++ b/etc/systemd/network/30-ethernet-bond0.network
@@ -1,7 +1,7 @@
 # Match only real, physical ethernet via Path= (PCI + USB) and udev's
 # predictable name pattern. This is more robust than Type=ether + Name= negation:
-# negations on Name= matched veth/virbr/waydroid interfaces in practice, which
-# enslaved them into bond0 and broke host networking (waydroid, libvirt, etc.).
+# negations on Name= matched virtual interfaces in practice, which enslaved
+# them into bond0 and broke container/VM networking.
 #
 # Path=pci-*  covers built-in PCIe NICs (enpXsY, ethN).
 # Path=platform-*  covers SoC-attached NICs (none on x86 laptops but harmless).