summaryrefslogtreecommitdiffstatshomepage
Commit message (Expand)AuthorAgeFilesLines
...
* refactor(mail): migrate protonmail-bridge from pacman to nixsommerfeld2026-06-055-4/+26
* fix(systemd): ship poweralertd.service user unitsommerfeld2026-06-052-0/+15
* fix(systemd): ship mako.service user unitsommerfeld2026-06-052-0/+18
* fix(systemd): drop StopWhenUnneeded from sway-session.targetsommerfeld2026-06-051-1/+0
* revert(systemd): drop redundant environment.d PATH filesommerfeld2026-06-051-20/+0
* fix(systemd): use absolute %h/.nix-profile/bin paths in user unitssommerfeld2026-06-059-26/+28
* fix(nix,meta): keep imv/wl-mirror/sparrow on pacman (OpenGL context)sommerfeld2026-06-052-19/+14
* fix(nix,meta): keep ghostty on pacman to fix missing OpenGL contextsommerfeld2026-06-052-3/+11
* fix(systemd): add environment.d PATH so user units find nix binariessommerfeld2026-06-051-0/+22
* fix(nix): replace nonexistent podman-docker attr with writeShellScriptBin shimsommerfeld2026-06-051-1/+5
* chore(bootstrap): drop manual paru-bin AUR build; provision subuid/subgidsommerfeld2026-06-051-51/+55
* chore(meta): drop migrated packages from base.txtsommerfeld2026-06-051-73/+23
* fix(systemd,scripts): unhardcode /usr/bin paths for nix-migrated toolssommerfeld2026-06-0511-17/+18
* feat(nix): migrate user-leaf tools to host profilesommerfeld2026-06-051-10/+114
* feat(nix): unify rootless podman across host and VMsommerfeld2026-06-054-40/+61
* chore(nix): flake.lock update (home-manager)sommerfeld2026-06-051-7/+7
* chore(nix): pin home-manager to release-26.05 (match nixpkgs)sommerfeld2026-06-051-1/+6
* chore(nix): flake.lock update (home-manager, tuicr)sommerfeld2026-05-291-6/+6
* feat(nix/common): expose run-clang-tidy missing from nixpkgs clang-toolssommerfeld2026-05-291-1/+21
* refactor(meta/nvidia): drop linux-headers (covered by base kernels)sommerfeld2026-05-291-1/+0
* feat(kernel): swap stock linux for linux-lts as fallback kernelsommerfeld2026-05-295-33/+46
* feat(etc/resolved): forward single-label queries upstreamsommerfeld2026-05-291-0/+8
* refactor(eer): install external-editor-revived via nix on the hostsommerfeld2026-05-294-19/+38
* refactor(flatpak): route mpv and thunderbird via flatpak; drop system pkgssommerfeld2026-05-2910-23/+29
* chore(nix): flake.lock update (tuicr)sommerfeld2026-05-291-3/+3
* chore(thunderbird): switch flatpak app id to org.mozilla.thunderbirdsommerfeld2026-05-298-21/+21
* refactor(suspend): drop SSH session inhibit; AC rule handles itsommerfeld2026-05-291-20/+0
* refactor(suspend): gate suspend on AC, drop bespoke zellij inhibitsommerfeld2026-05-298-126/+33
* fix(suspend): make zellij inhibit watcher resilient to local-only sessionssommerfeld2026-05-292-15/+59
* feat(suspend): re-enable suspend on s2idle, drop diagnostic scaffoldingsommerfeld2026-05-2911-51/+36
* fix(suspend): switch hardened to s2idle, keep console alive, archive pstoresommerfeld2026-05-292-1/+2
* fix(suspend): load intel_lpss_pci from initramfs (Arch wiki touchpad fix)sommerfeld2026-05-293-6/+5
* feat(suspend): hardened-only init_on_free=0 + hang-detection cmdlinesommerfeld2026-05-294-2/+9
* feat(suspend): disable system suspend until hardened kernel resume issue is f...sommerfeld2026-05-295-21/+47
* fix(suspend): only inhibit for SSH-spawned zellij sessionssommerfeld2026-05-293-13/+37
* fix(iwd): revert MAC randomization — broke DHCPsommerfeld2026-05-291-23/+0
* feat(suspend): hold inhibit lock while any zellij session existssommerfeld2026-05-295-5/+65
* feat(zsh): inhibit suspend while an SSH session is activesommerfeld2026-05-291-0/+17
* feat(suspend): bounce snx-rs around system sleepsommerfeld2026-05-292-0/+48
* feat(podman): switch rootless storage driver to btrfssommerfeld2026-05-294-4/+19
* fix(hardened): restore podman compatibility on linux-hardenedsommerfeld2026-05-292-0/+8
* docs(bootstrap): also suggest fallback UKI EFI entriessommerfeld2026-05-291-1/+7
* Revert "refactor(boot): drop linux-hardened-fallback UKI"sommerfeld2026-05-291-1/+4
* refactor(boot): drop linux-hardened-fallback UKIsommerfeld2026-05-291-4/+1
* docs(bootstrap): mention optional linux-hardened EFI entrysommerfeld2026-05-291-0/+4
* feat(sandbox): bwrap wrappers for mpv, yt-dlp, streamlinksommerfeld2026-05-295-0/+75
* feat(boot): add linux-hardened as parallel UKIsommerfeld2026-05-292-0/+21
* feat(iwd): per-SSID MAC randomisationsommerfeld2026-05-291-0/+23
* feat(polkit): restrict systemd + udisks system actions to active local sessionssommerfeld2026-05-292-0/+26
* feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardeningsommerfeld2026-05-291-1/+39