summaryrefslogtreecommitdiffstatshomepage
Commit message (Expand)AuthorAgeFilesLines
* docs(bootstrap): mention optional linux-hardened EFI entrysommerfeld2026-05-291-0/+4
* feat(sandbox): bwrap wrappers for mpv, yt-dlp, streamlinksommerfeld2026-05-295-0/+75
* feat(boot): add linux-hardened as parallel UKIsommerfeld2026-05-292-0/+21
* feat(iwd): per-SSID MAC randomisationsommerfeld2026-05-291-0/+23
* feat(polkit): restrict systemd + udisks system actions to active local sessionssommerfeld2026-05-292-0/+26
* feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardeningsommerfeld2026-05-291-1/+39
* chore(nix): flake.lock update (home-manager, nixpkgs, tuicr)sommerfeld2026-05-291-9/+9
* fix(nix): tuicr switched to packages.${system}.default schemasommerfeld2026-05-291-3/+1
* fix(nftables): waydroid DHCP/DNS ingress, drop manual NAT tablesommerfeld2026-05-221-19/+9
* fix(sway): disable shortcut inhibitor for waydroid windowssommerfeld2026-05-221-0/+1
* fix(nftables): add MASQUERADE for waydroid0sommerfeld2026-05-221-3/+19
* Revert "fix(sysctl): enable net.ipv4.ip_forward for NAT bridges"sommerfeld2026-05-221-5/+0
* fix(sysctl): enable net.ipv4.ip_forward for NAT bridgessommerfeld2026-05-221-0/+5
* fix(net): positive-match physical NICs into bond0sommerfeld2026-05-221-14/+9
* fix(net): keep waydroid0 out of bond0, allow it through nftablessommerfeld2026-05-222-2/+10
* feat(tuicr): side-by-side diff, mouse, space leadersommerfeld2026-05-221-0/+3
* feat(tuicr): configure gruvbox-dark themesommerfeld2026-05-222-0/+4
* fix(ssh): make agent.sock symlink concurrent-connection-safesommerfeld2026-05-222-13/+32
* feat(zsh): recover Arch site-functions + HELPDIR after removing system zshsommerfeld2026-05-221-3/+18
* fix(nix,zsh): tuicr flake schema + restore XDG_DATA_DIRSsommerfeld2026-05-223-2/+132
* fix(sway): propagate PATH / GPG env into systemd --user + dbussommerfeld2026-05-221-2/+11
* fix(ssh): stabilise forwarded ssh-agent socket across reconnectssommerfeld2026-05-222-3/+40
* docs(rules): document nix/vm.nix symlink invariantsommerfeld2026-05-221-0/+11
* feat(nix): audit + expand vm xdg.configFile symlink coveragesommerfeld2026-05-221-1/+38
* feat(claude): add tuicr skill (zellij-adapted)sommerfeld2026-05-222-0/+212
* feat(nix): add tuicr from upstream flake to common profilesommerfeld2026-05-222-1/+15
* fix(just): chsh to nix-managed zsh after nix-switchsommerfeld2026-05-221-0/+14
* refactor(pkg): drop provider-resolution fallback in mark_explicitsommerfeld2026-05-221-9/+4
* chore(pkg): drop redundant ttf-font-awesome from base.txtsommerfeld2026-05-221-1/+0
* fix(pkg): skip mark-explicit for packages resolved to a different providersommerfeld2026-05-221-1/+9
* fix(pkg): mark declared packages as explicit on applysommerfeld2026-05-221-2/+16
* feat(pkg): declare btrfs-progs in base.txtsommerfeld2026-05-222-6/+7
* feat(nix): add ipython to common profilesommerfeld2026-05-221-0/+1
* feat(pkg): declare linux + dosfstools in base.txtsommerfeld2026-05-221-0/+2
* feat(zsh): enrich pacopt with reverse-optdep infosommerfeld2026-05-221-1/+35
* feat(nix): silence home-manager news notificationssommerfeld2026-05-221-0/+3
* perf(git): disable delta hyperlinkssommerfeld2026-05-221-1/+1
* fix(systemd): pin PASSWORD_STORE_DIR for pass-secret-servicesommerfeld2026-05-221-0/+2
* refactor(zsh): drop FIRECRAWL_API_KEY exportsommerfeld2026-05-201-4/+0
* style(justfile): apply just --fmt (blank line between nix-update doc comments)sommerfeld2026-05-201-0/+1
* fix(waybar): refactor A && B || C patterns to avoid shellcheck SC2015sommerfeld2026-05-203-3/+4
* ci: install basedpyright so just doctor passessommerfeld2026-05-201-0/+3
* zsh: hm wrapper needs --impure for builtins.getEnvsommerfeld2026-05-201-1/+1
* zsh: add hm wrapper for flake-based home-managersommerfeld2026-05-201-0/+12
* meta: declare bolt (Thunderbolt dock daemon)sommerfeld2026-05-201-0/+3
* justfile: add nix-update recipe, wire into updatesommerfeld2026-05-201-2/+15
* nix: re-add github-copilot-cli (now prebuilt-binary derivation)sommerfeld2026-05-201-5/+1
* drop residual Mason references after p6 migrationsommerfeld2026-05-203-6/+4
* nix: add codex; meta: virt-viewer to work.txtsommerfeld2026-05-202-10/+2
* refactor(nix): deployment in vm.nix only; host uses chezmoi for dotfilessommerfeld2026-05-203-82/+68