| Age | Commit message (Expand) | Author |
|---|
| 2025-06-02 | sys/mail: move services.dovecot.modules -> environment.systemPackages after u... | Alejandro Soto |
| 2025-05-31 | sys/auth: enable rssh PAM module | Alejandro Soto |
| 2025-05-31 | home/desktop/sway: switch from swaylock to gtklock | Alejandro Soto |
| 2025-05-19 | sys/auth/openssh: fix syntax error in sshd_config when PerSourcePenaltyExempt... | Alejandro Soto |
| 2025-05-11 | sys/baseline: run Nix gc every Saturday at midnight | Alejandro Soto |
| 2025-04-30 | sys/auth/openssh: add PerSourcePenaltyExemptList | Alejandro Soto |
| 2025-04-26 | sys/ns: enable acme-dns for DNS-01 challenges | Alejandro Soto |
| 2025-04-24 | sys/ns: implement automatic PTR zones | Alejandro Soto |
| 2025-04-19 | sys/ns: sunset junkemailfilter.com as backup MX | Alejandro Soto |
| 2025-04-19 | sys/env: make each user have an 'install' attribute | Alejandro Soto |
| 2025-04-19 | sys/web/sites/host: enable DAV reverse proxy | Alejandro Soto |
| 2025-04-19 | sys/web/sites: add host site | Alejandro Soto |
| 2025-04-19 | sys/mta: improve postfix hardening | Alejandro Soto |
| 2025-04-19 | sys/net: harden firewall reverse-path checks, ICMP redirects | Alejandro Soto |
| 2025-04-19 | sys/net: redefine gate0 and nat64 nets using link-local addressing | Alejandro Soto |
| 2025-04-06 | sys: reload services after certificate renewal | Alejandro Soto |
| 2025-04-06 | sys/platform/[lustrated]: prevent default global IPv6 traffic from going thro... | Alejandro Soto |
| 2025-04-06 | sys/net: create custom iptables chains for local rules | Alejandro Soto |
| 2025-03-30 | sys/mta: implement backup MX | Alejandro Soto |
| 2025-01-25 | home, sys: enable syncthing as user service | Alejandro Soto |
| 2025-01-25 | sys/hardware/thinkpad: remove digimend | Alejandro Soto |
| 2025-01-25 | sys/[lustrated]: enable syncthing | Alejandro Soto |
| 2025-01-22 | sys: remove IPv4 on dmz, gate; enable DNS64 for dmz | Alejandro Soto |
| 2025-01-12 | sys/platform/{[lustrated], [lustrated]}: enable virt | Alejandro Soto |
| 2025-01-11 | flake, sys: remove conduit | Alejandro Soto |
| 2025-01-04 | sys/nspawn/dmz: restore IPv4 private subnet for DMZ | Alejandro Soto |
| 2025-01-03 | sys: update deprecated option names under config.systemd.network | Alejandro Soto |
| 2025-01-03 | sys: allocate global IPv6 addresses for DMZ services | Alejandro Soto |
| 2025-01-03 | sys/net: add conntrack-tools to environment | Alejandro Soto |
| 2025-01-03 | sys/[lustrated]: implement NAT64 | Alejandro Soto |
| 2025-01-03 | sys: unify gate and vpn into a globally-addressable IPv6-only network | Alejandro Soto |
| 2025-01-02 | sys/net: switch gate0 to public subnet 2a03:3b40:fe:888::/64 | Alejandro Soto |
| 2025-01-01 | sys: refactor address and network number management | Alejandro Soto |
| 2025-01-01 | sys/web: do not return 403 for ACME challenge requests | Alejandro Soto |
| 2025-01-01 | sys/mta: fix OpenDKIM signing | Alejandro Soto |
| 2024-12-17 | sys/platform/[lustrated]: enable address-restricted ssh password auth, fail2ban | Alejandro Soto |
| 2024-12-17 | sys/auth: support openssh password authentication (off by default) | Alejandro Soto |
| 2024-12-14 | sys/baseline: completely disable Nix channels | Alejandro Soto |
| 2024-12-03 | sys/platform/[lustrated]: initial commit, adapted from old [lustrated] repo | Alejandro Soto |
| 2024-12-03 | flake: update to 24.11 | Alejandro Soto |
| 2024-10-03 | sys/seat: add xdg-desktop-portal-gtk to xdg.portals | Alejandro Soto |
| 2024-09-30 | sys/nspawn/dmz: add imap domain for ACME | Alejandro Soto |
| 2024-09-30 | sys/virt/libvirt: do not restart user doms after config changes | Alejandro Soto |
| 2024-09-09 | sys/seat: enable xdg.portal.wlre | Alejandro Soto |
| 2024-08-19 | sys/mail: restore access to sieve extensions | Alejandro Soto |
| 2024-08-18 | sys/platform/[lustrated], home/ssh: setup for hv SSH over vsock | Alejandro Soto |
| 2024-08-18 | sys/[lustrated]: implement FIDO2 auth over vsock | Alejandro Soto |
| 2024-08-17 | sys/mta: enable recipient extensions | Alejandro Soto |
| 2024-08-17 | home/desktop: enable swayidle, swaylock | Alejandro Soto |
| 2024-08-17 | home/desktop, sys/seat: switch from xorg/i3 to wayland/sway | Alejandro Soto |
