Enable CT for non-play builds

app/src/debug/AndroidManifest.xml

@@ -133,13 +133,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->

app/src/fdroid/AndroidManifest.xml

@@ -132,13 +132,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->

app/src/github/AndroidManifest.xml

@@ -132,13 +132,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->

app/src/large/AndroidManifest.xml

@@ -132,13 +132,14 @@
         android:icon="@mipmap/ic_launcher"
         android:label="@string/app_name"
         android:largeHeap="${largeHeap}"
-        android:networkSecurityConfig="@xml/network_security_config"
+        android:networkSecurityConfig="@xml/network_security_config_ct"
         android:requestLegacyExternalStorage="true"
         android:resizeableActivity="true"
         android:restoreAnyVersion="true"
         android:roundIcon="@mipmap/ic_launcher_round"
         android:supportsRtl="true"
-        android:theme="@style/Theme.AppCompat.TranslucentSplash">
+        android:theme="@style/Theme.AppCompat.TranslucentSplash"
+        tools:replace="android:networkSecurityConfig">
         <!-- https://developer.samsung.com/samsung-dex/modify-optimizing.html -->
 
         <!-- https://firebase.google.com/docs/analytics/configure-data-collection?platform=android -->

app/src/main/res/xml/network_security_config_ct.xml

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config xmlns:tools="http://schemas.android.com/tools"
+    tools:ignore="InsecureBaseConfiguration,AcceptsUserCertificates">
+    <!-- https://developer.android.com/training/articles/security-config -->
+    <base-config cleartextTrafficPermitted="true">
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="user" />
+        </trust-anchors>
+        <certificateTransparency enabled="true" />
+    </base-config>
+</network-security-config>