aboutsummaryrefslogtreecommitdiffstatshomepage
Commit message (Expand)AuthorAgeFilesLines
* feat(podman): switch rootless storage driver to btrfsLibravatar sommerfeld2 days4-4/+19
* fix(hardened): restore podman compatibility on linux-hardenedLibravatar sommerfeld2 days2-0/+8
* docs(bootstrap): also suggest fallback UKI EFI entriesLibravatar sommerfeld2 days1-1/+7
* Revert "refactor(boot): drop linux-hardened-fallback UKI"Libravatar sommerfeld2 days1-1/+4
* refactor(boot): drop linux-hardened-fallback UKILibravatar sommerfeld2 days1-4/+1
* docs(bootstrap): mention optional linux-hardened EFI entryLibravatar sommerfeld2 days1-0/+4
* feat(sandbox): bwrap wrappers for mpv, yt-dlp, streamlinkLibravatar sommerfeld2 days5-0/+75
* feat(boot): add linux-hardened as parallel UKILibravatar sommerfeld2 days2-0/+21
* feat(iwd): per-SSID MAC randomisationLibravatar sommerfeld2 days1-0/+23
* feat(polkit): restrict systemd + udisks system actions to active local sessionsLibravatar sommerfeld2 days2-0/+26
* feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardeningLibravatar sommerfeld2 days1-1/+39
* chore(nix): flake.lock update (home-manager, nixpkgs, tuicr)Libravatar sommerfeld2 days1-9/+9
* fix(nix): tuicr switched to packages.${system}.default schemaLibravatar sommerfeld2 days1-3/+1
* fix(nftables): waydroid DHCP/DNS ingress, drop manual NAT tableLibravatar sommerfeld9 days1-19/+9
* fix(sway): disable shortcut inhibitor for waydroid windowsLibravatar sommerfeld9 days1-0/+1
* fix(nftables): add MASQUERADE for waydroid0Libravatar sommerfeld9 days1-3/+19
* Revert "fix(sysctl): enable net.ipv4.ip_forward for NAT bridges"Libravatar sommerfeld9 days1-5/+0
* fix(sysctl): enable net.ipv4.ip_forward for NAT bridgesLibravatar sommerfeld9 days1-0/+5
* fix(net): positive-match physical NICs into bond0Libravatar sommerfeld9 days1-14/+9
* fix(net): keep waydroid0 out of bond0, allow it through nftablesLibravatar sommerfeld9 days2-2/+10
* feat(tuicr): side-by-side diff, mouse, space leaderLibravatar sommerfeld10 days1-0/+3
* feat(tuicr): configure gruvbox-dark themeLibravatar sommerfeld10 days2-0/+4
* fix(ssh): make agent.sock symlink concurrent-connection-safeLibravatar sommerfeld10 days2-13/+32
* feat(zsh): recover Arch site-functions + HELPDIR after removing system zshLibravatar sommerfeld10 days1-3/+18
* fix(nix,zsh): tuicr flake schema + restore XDG_DATA_DIRSLibravatar sommerfeld10 days3-2/+132
* fix(sway): propagate PATH / GPG env into systemd --user + dbusLibravatar sommerfeld10 days1-2/+11
* fix(ssh): stabilise forwarded ssh-agent socket across reconnectsLibravatar sommerfeld10 days2-3/+40
* docs(rules): document nix/vm.nix symlink invariantLibravatar sommerfeld10 days1-0/+11
* feat(nix): audit + expand vm xdg.configFile symlink coverageLibravatar sommerfeld10 days1-1/+38
* feat(claude): add tuicr skill (zellij-adapted)Libravatar sommerfeld10 days2-0/+212
* feat(nix): add tuicr from upstream flake to common profileLibravatar sommerfeld10 days2-1/+15
* fix(just): chsh to nix-managed zsh after nix-switchLibravatar sommerfeld10 days1-0/+14
* refactor(pkg): drop provider-resolution fallback in mark_explicitLibravatar sommerfeld10 days1-9/+4
* chore(pkg): drop redundant ttf-font-awesome from base.txtLibravatar sommerfeld10 days1-1/+0
* fix(pkg): skip mark-explicit for packages resolved to a different providerLibravatar sommerfeld10 days1-1/+9
* fix(pkg): mark declared packages as explicit on applyLibravatar sommerfeld10 days1-2/+16
* feat(pkg): declare btrfs-progs in base.txtLibravatar sommerfeld10 days2-6/+7
* feat(nix): add ipython to common profileLibravatar sommerfeld10 days1-0/+1
* feat(pkg): declare linux + dosfstools in base.txtLibravatar sommerfeld10 days1-0/+2
* feat(zsh): enrich pacopt with reverse-optdep infoLibravatar sommerfeld10 days1-1/+35
* feat(nix): silence home-manager news notificationsLibravatar sommerfeld10 days1-0/+3
* perf(git): disable delta hyperlinksLibravatar sommerfeld10 days1-1/+1
* fix(systemd): pin PASSWORD_STORE_DIR for pass-secret-serviceLibravatar sommerfeld10 days1-0/+2
* refactor(zsh): drop FIRECRAWL_API_KEY exportLibravatar sommerfeld11 days1-4/+0
* style(justfile): apply just --fmt (blank line between nix-update doc comments)Libravatar sommerfeld11 days1-0/+1
* fix(waybar): refactor A && B || C patterns to avoid shellcheck SC2015Libravatar sommerfeld11 days3-3/+4
* ci: install basedpyright so just doctor passesLibravatar sommerfeld11 days1-0/+3
* zsh: hm wrapper needs --impure for builtins.getEnvLibravatar sommerfeld11 days1-1/+1
* zsh: add hm wrapper for flake-based home-managerLibravatar sommerfeld11 days1-0/+12
* meta: declare bolt (Thunderbolt dock daemon)Libravatar sommerfeld11 days1-0/+3