summaryrefslogtreecommitdiffstatshomepage
path: root/etc
Commit message (Expand)AuthorAgeFilesLines
* Remove unused libvirt configurationsommerfeld2026-08-142-29/+0
* Remove former work environment configurationsommerfeld2026-08-142-21/+0
* Update locale definitionssommerfeld2026-08-141-0/+1
* Add network document scanningsommerfeld2026-08-141-0/+1
* Prune stale dotfiles commentarysommerfeld2026-07-025-41/+6
* Remove SNX Waybar integrationsommerfeld2026-07-021-32/+0
* Reduce Arch package surfacesommerfeld2026-06-185-2/+14
* Reduce AUR package surfacesommerfeld2026-06-153-19/+30
* Move more host tooling to Nixsommerfeld2026-06-052-1/+54
* feat(kernel): swap stock linux for linux-lts as fallback kernelsommerfeld2026-05-293-26/+37
* feat(etc/resolved): forward single-label queries upstreamsommerfeld2026-05-291-0/+8
* refactor(eer): install external-editor-revived via nix on the hostsommerfeld2026-05-291-6/+0
* refactor(flatpak): route mpv and thunderbird via flatpak; drop system pkgssommerfeld2026-05-291-0/+6
* refactor(suspend): gate suspend on AC, drop bespoke zellij inhibitsommerfeld2026-05-291-0/+14
* feat(suspend): re-enable suspend on s2idle, drop diagnostic scaffoldingsommerfeld2026-05-294-23/+8
* fix(suspend): switch hardened to s2idle, keep console alive, archive pstoresommerfeld2026-05-291-1/+1
* fix(suspend): load intel_lpss_pci from initramfs (Arch wiki touchpad fix)sommerfeld2026-05-293-6/+5
* feat(suspend): hardened-only init_on_free=0 + hang-detection cmdlinesommerfeld2026-05-292-2/+7
* feat(suspend): disable system suspend until hardened kernel resume issue is f...sommerfeld2026-05-291-0/+17
* fix(iwd): revert MAC randomization — broke DHCPsommerfeld2026-05-291-23/+0
* feat(suspend): bounce snx-rs around system sleepsommerfeld2026-05-291-0/+45
* fix(hardened): restore podman compatibility on linux-hardenedsommerfeld2026-05-291-0/+4
* Revert "refactor(boot): drop linux-hardened-fallback UKI"sommerfeld2026-05-291-1/+4
* refactor(boot): drop linux-hardened-fallback UKIsommerfeld2026-05-291-4/+1
* feat(boot): add linux-hardened as parallel UKIsommerfeld2026-05-291-0/+19
* feat(iwd): per-SSID MAC randomisationsommerfeld2026-05-291-0/+23
* feat(polkit): restrict systemd + udisks system actions to active local sessionssommerfeld2026-05-292-0/+26
* feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardeningsommerfeld2026-05-291-1/+39
* fix(nftables): waydroid DHCP/DNS ingress, drop manual NAT tablesommerfeld2026-05-221-19/+9
* fix(nftables): add MASQUERADE for waydroid0sommerfeld2026-05-221-3/+19
* Revert "fix(sysctl): enable net.ipv4.ip_forward for NAT bridges"sommerfeld2026-05-221-5/+0
* fix(sysctl): enable net.ipv4.ip_forward for NAT bridgessommerfeld2026-05-221-0/+5
* fix(net): positive-match physical NICs into bond0sommerfeld2026-05-221-14/+9
* fix(net): keep waydroid0 out of bond0, allow it through nftablessommerfeld2026-05-222-2/+10
* fix(pacman): correct llama.cpp-vulkan IgnorePkg name (was llama-cpp-vulkan)sommerfeld2026-05-191-3/+3
* feat: teams autostart, llama-cpp-vulkan ignore, snxctl-chromium wrappersommerfeld2026-05-141-1/+3
* fix(nftables): use iifname/oifname for virbr0 so rules load before libvirtdsommerfeld2026-05-131-4/+6
* fix(nftables): allow DHCP/DNS and forwarding for libvirt virbr0sommerfeld2026-05-131-0/+16
* fix(networkd): exclude virtual taps/bridges from bond0 enslavementsommerfeld2026-05-131-0/+10
* feat: add libvirt/qemu/swtpm stack for Sii Intune VMsommerfeld2026-05-131-0/+13
* feat(nix): saturate builds, add community cache, pin nixpkgs registrysommerfeld2026-05-131-2/+10
* fix(lostfiles): emit parent directories alongside tracked filessommerfeld2026-05-131-1/+1
* feat(lostfiles): filter known/private/cache paths via auto-synced ignoresommerfeld2026-05-132-1/+36
* refactor(udev): drop hand-rolled ZSA rule, install qmk package insteadsommerfeld2026-05-131-13/+0
* feat(udev,flatpak): allow ungoogled-chromium to talk to ZSA keyboardssommerfeld2026-05-131-0/+13
* refactor(sudoers): drop NOPASSWD poweroff/reboot, polkit handles itsommerfeld2026-05-131-3/+0
* refactor(nftables): minimize diff against upstream pristinesommerfeld2026-05-132-46/+24
* fix(sudoers-rs,waybar): pass DIFFPROG (and friends) through sudo-rssommerfeld2026-05-131-0/+16
* feat(lostfiles): weekly unowned-files refresh + waybar remindersommerfeld2026-05-132-0/+21
* feat(arch-audit): daily CVE refresh + waybar remindersommerfeld2026-05-132-0/+21