| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | feat(boot): add linux-hardened as parallel UKI |  sommerfeld | 2 days | 2 | -0/+21 |
| * | feat(iwd): per-SSID MAC randomisation | sommerfeld | 2 days | 1 | -0/+23 |
| * | feat(polkit): restrict systemd + udisks system actions to active local sessions | sommerfeld | 2 days | 2 | -0/+26 |
| * | feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardening | sommerfeld | 2 days | 1 | -1/+39 |
| * | chore(nix): flake.lock update (home-manager, nixpkgs, tuicr) | sommerfeld | 2 days | 1 | -9/+9 |
| * | fix(nix): tuicr switched to packages.${system}.default schema | sommerfeld | 2 days | 1 | -3/+1 |
| * | fix(nftables): waydroid DHCP/DNS ingress, drop manual NAT table | sommerfeld | 9 days | 1 | -19/+9 |
| * | fix(sway): disable shortcut inhibitor for waydroid windows | sommerfeld | 9 days | 1 | -0/+1 |
| * | fix(nftables): add MASQUERADE for waydroid0 | sommerfeld | 9 days | 1 | -3/+19 |
| * | Revert "fix(sysctl): enable net.ipv4.ip_forward for NAT bridges" | sommerfeld | 9 days | 1 | -5/+0 |
| * | fix(sysctl): enable net.ipv4.ip_forward for NAT bridges | sommerfeld | 9 days | 1 | -0/+5 |
| * | fix(net): positive-match physical NICs into bond0 | sommerfeld | 9 days | 1 | -14/+9 |
| * | fix(net): keep waydroid0 out of bond0, allow it through nftables | sommerfeld | 9 days | 2 | -2/+10 |
| * | feat(tuicr): side-by-side diff, mouse, space leader | sommerfeld | 10 days | 1 | -0/+3 |
| * | feat(tuicr): configure gruvbox-dark theme | sommerfeld | 10 days | 2 | -0/+4 |
| * | fix(ssh): make agent.sock symlink concurrent-connection-safe | sommerfeld | 10 days | 2 | -13/+32 |
| * | feat(zsh): recover Arch site-functions + HELPDIR after removing system zsh | sommerfeld | 10 days | 1 | -3/+18 |
| * | fix(nix,zsh): tuicr flake schema + restore XDG_DATA_DIRS | sommerfeld | 10 days | 3 | -2/+132 |
| * | fix(sway): propagate PATH / GPG env into systemd --user + dbus | sommerfeld | 10 days | 1 | -2/+11 |
| * | fix(ssh): stabilise forwarded ssh-agent socket across reconnects | sommerfeld | 10 days | 2 | -3/+40 |
| * | docs(rules): document nix/vm.nix symlink invariant | sommerfeld | 10 days | 1 | -0/+11 |
| * | feat(nix): audit + expand vm xdg.configFile symlink coverage | sommerfeld | 10 days | 1 | -1/+38 |
| * | feat(claude): add tuicr skill (zellij-adapted) | sommerfeld | 10 days | 2 | -0/+212 |
| * | feat(nix): add tuicr from upstream flake to common profile | sommerfeld | 10 days | 2 | -1/+15 |
| * | fix(just): chsh to nix-managed zsh after nix-switch | sommerfeld | 10 days | 1 | -0/+14 |
| * | refactor(pkg): drop provider-resolution fallback in mark_explicit | sommerfeld | 10 days | 1 | -9/+4 |
| * | chore(pkg): drop redundant ttf-font-awesome from base.txt | sommerfeld | 10 days | 1 | -1/+0 |
| * | fix(pkg): skip mark-explicit for packages resolved to a different provider | sommerfeld | 10 days | 1 | -1/+9 |
| * | fix(pkg): mark declared packages as explicit on apply | sommerfeld | 10 days | 1 | -2/+16 |
| * | feat(pkg): declare btrfs-progs in base.txt | sommerfeld | 10 days | 2 | -6/+7 |
| * | feat(nix): add ipython to common profile | sommerfeld | 10 days | 1 | -0/+1 |
| * | feat(pkg): declare linux + dosfstools in base.txt | sommerfeld | 10 days | 1 | -0/+2 |
| * | feat(zsh): enrich pacopt with reverse-optdep info | sommerfeld | 10 days | 1 | -1/+35 |
| * | feat(nix): silence home-manager news notifications | sommerfeld | 10 days | 1 | -0/+3 |
| * | perf(git): disable delta hyperlinks | sommerfeld | 10 days | 1 | -1/+1 |
| * | fix(systemd): pin PASSWORD_STORE_DIR for pass-secret-service | sommerfeld | 10 days | 1 | -0/+2 |
| * | refactor(zsh): drop FIRECRAWL_API_KEY export | sommerfeld | 11 days | 1 | -4/+0 |
| * | style(justfile): apply just --fmt (blank line between nix-update doc comments) | sommerfeld | 11 days | 1 | -0/+1 |
| * | fix(waybar): refactor A && B || C patterns to avoid shellcheck SC2015 | sommerfeld | 11 days | 3 | -3/+4 |
| * | ci: install basedpyright so just doctor passes | sommerfeld | 11 days | 1 | -0/+3 |
| * | zsh: hm wrapper needs --impure for builtins.getEnv | sommerfeld | 11 days | 1 | -1/+1 |
| * | zsh: add hm wrapper for flake-based home-manager | sommerfeld | 11 days | 1 | -0/+12 |
| * | meta: declare bolt (Thunderbolt dock daemon) | sommerfeld | 11 days | 1 | -0/+3 |
| * | justfile: add nix-update recipe, wire into update | sommerfeld | 11 days | 1 | -2/+15 |
| * | nix: re-add github-copilot-cli (now prebuilt-binary derivation) | sommerfeld | 11 days | 1 | -5/+1 |
| * | drop residual Mason references after p6 migration | sommerfeld | 11 days | 3 | -6/+4 |
| * | nix: add codex; meta: virt-viewer to work.txt | sommerfeld | 11 days | 2 | -10/+2 |
| * | refactor(nix): deployment in vm.nix only; host uses chezmoi for dotfiles | sommerfeld | 11 days | 3 | -82/+68 |
| * | fix(nix): parameterize dotfiles path per profile; rename dockerfile LSP | sommerfeld | 11 days | 3 | -2/+26 |
| * | fix(nix,nvim): drop nodePackages.* (removed from nixpkgs), drop github-copilo... | sommerfeld | 11 days | 2 | -5/+7 |
