summaryrefslogtreecommitdiffstatshomepage
path: root/etc
Commit message (Expand)AuthorAgeFilesLines
* feat(etc/resolved): forward single-label queries upstreamsommerfeld2026-05-291-0/+8
* refactor(eer): install external-editor-revived via nix on the hostsommerfeld2026-05-291-6/+0
* refactor(flatpak): route mpv and thunderbird via flatpak; drop system pkgssommerfeld2026-05-291-0/+6
* refactor(suspend): gate suspend on AC, drop bespoke zellij inhibitsommerfeld2026-05-291-0/+14
* feat(suspend): re-enable suspend on s2idle, drop diagnostic scaffoldingsommerfeld2026-05-294-23/+8
* fix(suspend): switch hardened to s2idle, keep console alive, archive pstoresommerfeld2026-05-291-1/+1
* fix(suspend): load intel_lpss_pci from initramfs (Arch wiki touchpad fix)sommerfeld2026-05-293-6/+5
* feat(suspend): hardened-only init_on_free=0 + hang-detection cmdlinesommerfeld2026-05-292-2/+7
* feat(suspend): disable system suspend until hardened kernel resume issue is f...sommerfeld2026-05-291-0/+17
* fix(iwd): revert MAC randomization — broke DHCPsommerfeld2026-05-291-23/+0
* feat(suspend): bounce snx-rs around system sleepsommerfeld2026-05-291-0/+45
* fix(hardened): restore podman compatibility on linux-hardenedsommerfeld2026-05-291-0/+4
* Revert "refactor(boot): drop linux-hardened-fallback UKI"sommerfeld2026-05-291-1/+4
* refactor(boot): drop linux-hardened-fallback UKIsommerfeld2026-05-291-4/+1
* feat(boot): add linux-hardened as parallel UKIsommerfeld2026-05-291-0/+19
* feat(iwd): per-SSID MAC randomisationsommerfeld2026-05-291-0/+23
* feat(polkit): restrict systemd + udisks system actions to active local sessionssommerfeld2026-05-292-0/+26
* feat(sysctl): kernel info-disclosure + ICMP/IPv6 RA hardeningsommerfeld2026-05-291-1/+39
* fix(nftables): waydroid DHCP/DNS ingress, drop manual NAT tablesommerfeld2026-05-221-19/+9
* fix(nftables): add MASQUERADE for waydroid0sommerfeld2026-05-221-3/+19
* Revert "fix(sysctl): enable net.ipv4.ip_forward for NAT bridges"sommerfeld2026-05-221-5/+0
* fix(sysctl): enable net.ipv4.ip_forward for NAT bridgessommerfeld2026-05-221-0/+5
* fix(net): positive-match physical NICs into bond0sommerfeld2026-05-221-14/+9
* fix(net): keep waydroid0 out of bond0, allow it through nftablessommerfeld2026-05-222-2/+10
* fix(pacman): correct llama.cpp-vulkan IgnorePkg name (was llama-cpp-vulkan)sommerfeld2026-05-191-3/+3
* feat: teams autostart, llama-cpp-vulkan ignore, snxctl-chromium wrappersommerfeld2026-05-141-1/+3
* fix(nftables): use iifname/oifname for virbr0 so rules load before libvirtdsommerfeld2026-05-131-4/+6
* fix(nftables): allow DHCP/DNS and forwarding for libvirt virbr0sommerfeld2026-05-131-0/+16
* fix(networkd): exclude virtual taps/bridges from bond0 enslavementsommerfeld2026-05-131-0/+10
* feat: add libvirt/qemu/swtpm stack for Sii Intune VMsommerfeld2026-05-131-0/+13
* feat(nix): saturate builds, add community cache, pin nixpkgs registrysommerfeld2026-05-131-2/+10
* fix(lostfiles): emit parent directories alongside tracked filessommerfeld2026-05-131-1/+1
* feat(lostfiles): filter known/private/cache paths via auto-synced ignoresommerfeld2026-05-132-1/+36
* refactor(udev): drop hand-rolled ZSA rule, install qmk package insteadsommerfeld2026-05-131-13/+0
* feat(udev,flatpak): allow ungoogled-chromium to talk to ZSA keyboardssommerfeld2026-05-131-0/+13
* refactor(sudoers): drop NOPASSWD poweroff/reboot, polkit handles itsommerfeld2026-05-131-3/+0
* refactor(nftables): minimize diff against upstream pristinesommerfeld2026-05-132-46/+24
* fix(sudoers-rs,waybar): pass DIFFPROG (and friends) through sudo-rssommerfeld2026-05-131-0/+16
* feat(lostfiles): weekly unowned-files refresh + waybar remindersommerfeld2026-05-132-0/+21
* feat(arch-audit): daily CVE refresh + waybar remindersommerfeld2026-05-132-0/+21
* feat(systemd): monthly btrfs balance templatesommerfeld2026-05-132-0/+25
* feat(waybar,sway): htop click handler, app keybinds, VPN togglesommerfeld2026-05-131-0/+13
* fix(logind): ignore KEY_POWER long-press toosommerfeld2026-05-131-6/+12
* refactor(logind): drop device-specific rationale from power-key drop-insommerfeld2026-05-131-8/+5
* fix(logind): ignore KEY_POWER short-press to stop Shokz dongle shutdownssommerfeld2026-05-132-7/+11
* feat(udev): replace shokz blacklist with hwdb keycode overridesommerfeld2026-05-132-1/+7
* fix(privesc): revert bogus AssumeInstalled directivesommerfeld2026-05-131-4/+0
* feat(privesc): drop classic sudo via AssumeInstalledsommerfeld2026-05-131-0/+4
* feat(privesc): migrate from opendoas to sudo-rssommerfeld2026-05-133-3/+17
* feat(nix): hybrid setup with flakes + direnv for per-project dev shellssommerfeld2026-05-131-0/+21
generated by cgit v1.3.1 (git 2.54.0) at 2026-08-30 19:32:32 +0000