aboutsummaryrefslogtreecommitdiffstatshomepage
Commit message (Expand)AuthorAgeFilesLines
...
* feat(suspend): re-enable suspend on s2idle, drop diagnostic scaffoldingLibravatar sommerfeld2026-05-2911-51/+36
* fix(suspend): switch hardened to s2idle, keep console alive, archive pstoreLibravatar sommerfeld2026-05-292-1/+2
* fix(suspend): load intel_lpss_pci from initramfs (Arch wiki touchpad fix)Libravatar sommerfeld2026-05-293-6/+5
* feat(suspend): hardened-only init_on_free=0 + hang-detection cmdlineLibravatar sommerfeld2026-05-294-2/+9
* feat(suspend): disable system suspend until hardened kernel resume issue is f...Libravatar sommerfeld2026-05-295-21/+47
* fix(suspend): only inhibit for SSH-spawned zellij sessionsLibravatar sommerfeld2026-05-293-13/+37
* fix(iwd): revert MAC randomization — broke DHCPLibravatar sommerfeld2026-05-291-23/+0
* feat(suspend): hold inhibit lock while any zellij session existsLibravatar sommerfeld2026-05-295-5/+65
* feat(zsh): inhibit suspend while an SSH session is activeLibravatar sommerfeld2026-05-291-0/+17
* feat(suspend): bounce snx-rs around system sleepLibravatar sommerfeld2026-05-292-0/+48
* feat(podman): switch rootless storage driver to btrfsLibravatar sommerfeld2026-05-294-4/+19
* fix(hardened): restore podman compatibility on linux-hardenedLibravatar sommerfeld2026-05-292-0/+8
* docs(bootstrap): also suggest fallback UKI EFI entriesLibravatar sommerfeld2026-05-291-1/+7
* Revert "refactor(boot): drop linux-hardened-fallback UKI"Libravatar sommerfeld2026-05-291-1/+4
* refactor(boot): drop linux-hardened-fallback UKILibravatar sommerfeld2026-05-291-4/+1
* docs(bootstrap): mention optional linux-hardened EFI entryLibravatar sommerfeld2026-05-291-0/+4
* feat(sandbox): bwrap wrappers for mpv, yt-dlp, streamlinkLibravatar sommerfeld2026-05-295-0/+75
* feat(boot): add linux-hardened as parallel UKILibravatar sommerfeld2026-05-292-0/+21
* feat(iwd): per-SSID MAC randomisationLibravatar sommerfeld2026-05-291-0/+23
* feat(polkit): restrict systemd + udisks system actions to active local sessionsLibravatar sommerfeld2026-05-292-0/+26
* feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardeningLibravatar sommerfeld2026-05-291-1/+39
* chore(nix): flake.lock update (home-manager, nixpkgs, tuicr)Libravatar sommerfeld2026-05-291-9/+9
* fix(nix): tuicr switched to packages.${system}.default schemaLibravatar sommerfeld2026-05-291-3/+1
* fix(nftables): waydroid DHCP/DNS ingress, drop manual NAT tableLibravatar sommerfeld2026-05-221-19/+9
* fix(sway): disable shortcut inhibitor for waydroid windowsLibravatar sommerfeld2026-05-221-0/+1
* fix(nftables): add MASQUERADE for waydroid0Libravatar sommerfeld2026-05-221-3/+19
* Revert "fix(sysctl): enable net.ipv4.ip_forward for NAT bridges"Libravatar sommerfeld2026-05-221-5/+0
* fix(sysctl): enable net.ipv4.ip_forward for NAT bridgesLibravatar sommerfeld2026-05-221-0/+5
* fix(net): positive-match physical NICs into bond0Libravatar sommerfeld2026-05-221-14/+9
* fix(net): keep waydroid0 out of bond0, allow it through nftablesLibravatar sommerfeld2026-05-222-2/+10
* feat(tuicr): side-by-side diff, mouse, space leaderLibravatar sommerfeld2026-05-221-0/+3
* feat(tuicr): configure gruvbox-dark themeLibravatar sommerfeld2026-05-222-0/+4
* fix(ssh): make agent.sock symlink concurrent-connection-safeLibravatar sommerfeld2026-05-222-13/+32
* feat(zsh): recover Arch site-functions + HELPDIR after removing system zshLibravatar sommerfeld2026-05-221-3/+18
* fix(nix,zsh): tuicr flake schema + restore XDG_DATA_DIRSLibravatar sommerfeld2026-05-223-2/+132
* fix(sway): propagate PATH / GPG env into systemd --user + dbusLibravatar sommerfeld2026-05-221-2/+11
* fix(ssh): stabilise forwarded ssh-agent socket across reconnectsLibravatar sommerfeld2026-05-222-3/+40
* docs(rules): document nix/vm.nix symlink invariantLibravatar sommerfeld2026-05-221-0/+11
* feat(nix): audit + expand vm xdg.configFile symlink coverageLibravatar sommerfeld2026-05-221-1/+38
* feat(claude): add tuicr skill (zellij-adapted)Libravatar sommerfeld2026-05-222-0/+212
* feat(nix): add tuicr from upstream flake to common profileLibravatar sommerfeld2026-05-222-1/+15
* fix(just): chsh to nix-managed zsh after nix-switchLibravatar sommerfeld2026-05-221-0/+14
* refactor(pkg): drop provider-resolution fallback in mark_explicitLibravatar sommerfeld2026-05-221-9/+4
* chore(pkg): drop redundant ttf-font-awesome from base.txtLibravatar sommerfeld2026-05-221-1/+0
* fix(pkg): skip mark-explicit for packages resolved to a different providerLibravatar sommerfeld2026-05-221-1/+9
* fix(pkg): mark declared packages as explicit on applyLibravatar sommerfeld2026-05-221-2/+16
* feat(pkg): declare btrfs-progs in base.txtLibravatar sommerfeld2026-05-222-6/+7
* feat(nix): add ipython to common profileLibravatar sommerfeld2026-05-221-0/+1
* feat(pkg): declare linux + dosfstools in base.txtLibravatar sommerfeld2026-05-221-0/+2
* feat(zsh): enrich pacopt with reverse-optdep infoLibravatar sommerfeld2026-05-221-1/+35