| Age | Commit message (Expand) | Author |
| 2025-04-19 | sys/web/sites/host: enable DAV reverse proxy | Alejandro Soto |
| 2025-04-19 | sys/web/sites: add host site | Alejandro Soto |
| 2025-04-19 | home/pim: merge home/mail, home/syncthing | Alejandro Soto |
| 2025-04-19 | sys/mta: improve postfix hardening | Alejandro Soto |
| 2025-04-19 | sys/net: harden firewall reverse-path checks, ICMP redirects | Alejandro Soto |
| 2025-04-19 | sys/net: redefine gate0 and nat64 nets using link-local addressing | Alejandro Soto |
| 2025-04-09 | hom/environ: add diceware to path | Alejandro Soto |
| 2025-04-06 | sys: reload services after certificate renewal | Alejandro Soto |
| 2025-04-06 | sys/platform/[lustrated]: prevent default global IPv6 traffic from going thro... | Alejandro Soto |
| 2025-04-06 | sys/net: create custom iptables chains for local rules | Alejandro Soto |
| 2025-03-30 | sys/mta: implement backup MX | Alejandro Soto |
| 2025-01-25 | home, sys: enable syncthing as user service | Alejandro Soto |
| 2025-01-25 | sys/hardware/thinkpad: remove digimend | Alejandro Soto |
| 2025-01-25 | sys/[lustrated]: enable syncthing | Alejandro Soto |
| 2025-01-22 | sys: remove IPv4 on dmz, gate; enable DNS64 for dmz | Alejandro Soto |
| 2025-01-12 | home/baseline/zshrc: add alias: 'gpicview'->'loupe' | Alejandro Soto |
| 2025-01-12 | home/environ/path: add gnucash | Alejandro Soto |
| 2025-01-12 | sys/platform/{[lustrated], [lustrated]}: enable virt | Alejandro Soto |
| 2025-01-11 | flake: update 'nur.overlay' -> 'nur.overlays.default' | Alejandro Soto |
| 2025-01-11 | flake, sys: remove conduit | Alejandro Soto |
| 2025-01-05 | home/environ: add pv to path | Alejandro Soto |
| 2025-01-04 | sys/nspawn/dmz: restore IPv4 private subnet for DMZ | Alejandro Soto |
| 2025-01-03 | sys: update deprecated option names under config.systemd.network | Alejandro Soto |
| 2025-01-03 | sys: allocate global IPv6 addresses for DMZ services | Alejandro Soto |
| 2025-01-03 | sys/net: add conntrack-tools to environment | Alejandro Soto |
| 2025-01-03 | sys/[lustrated]: implement NAT64 | Alejandro Soto |
| 2025-01-03 | sys: unify gate and vpn into a globally-addressable IPv6-only network | Alejandro Soto |
| 2025-01-02 | sys/net: switch gate0 to public subnet 2a03:3b40:fe:888::/64 | Alejandro Soto |
| 2025-01-01 | sys: refactor address and network number management | Alejandro Soto |
| 2025-01-01 | sys/web: do not return 403 for ACME challenge requests | Alejandro Soto |
| 2025-01-01 | sys/mta: fix OpenDKIM signing | Alejandro Soto |
| 2024-12-20 | home/environ/path: add waypipe | Alejandro Soto |
| 2024-12-17 | sys/platform/[lustrated]: enable address-restricted ssh password auth, fail2ban | Alejandro Soto |
| 2024-12-17 | sys/auth: support openssh password authentication (off by default) | Alejandro Soto |
| 2024-12-14 | sys/baseline: completely disable Nix channels | Alejandro Soto |
| 2024-12-11 | pkgs/tmux-open: implement persistent tmux sessions by i3/sway workspace | Alejandro Soto |
| 2024-12-03 | sys/platform/[lustrated]: initial commit, adapted from old [lustrated] repo | Alejandro Soto |
| 2024-12-03 | platform/{admin,[lustrated]}@[lustrated]: initial commit, adapted from old [l... | Alejandro Soto |
| 2024-12-03 | home: big refactor | Alejandro Soto |
| 2024-12-03 | flake: update to 24.11 | Alejandro Soto |
| 2024-10-03 | sys/seat: add xdg-desktop-portal-gtk to xdg.portals | Alejandro Soto |
| 2024-09-30 | sys/nspawn/dmz: add imap domain for ACME | Alejandro Soto |
| 2024-09-30 | sys/virt/libvirt: do not restart user doms after config changes | Alejandro Soto |
| 2024-09-30 | flake.lock: Update | Alejandro Soto |
| 2024-09-09 | sys/seat: enable xdg.portal.wlre | Alejandro Soto |
| 2024-09-06 | Merge branch '[lustrated]' | Alejandro Soto |
| 2024-09-02 | home/desktop: add grimshot shortcuts to sway | Alejandro Soto |
| 2024-08-19 | sys/mail: restore access to sieve extensions | Alejandro Soto |
| 2024-08-18 | home/desktop: fix keyboard layout switch on sway | Alejandro Soto |
| 2024-08-18 | sys/platform/[lustrated], home/ssh: setup for hv SSH over vsock | Alejandro Soto |