summaryrefslogtreecommitdiff
path: root/sys (follow)
AgeCommit message (Collapse)Author
2025-12-24sys/baseline: add /var/trust to impermanence persist dirsAlejandro Soto
2025-12-23sys/virt: 25.11 updatesAlejandro Soto
2025-12-23sys/seat: 25.11 updatesAlejandro Soto
2025-12-23tree-wide: 25.11 updatesAlejandro Soto
2025-12-22sys/baseline: add alsa-utilsAlejandro Soto
2025-11-26sys/seat: enable 32-bit graphics driversAlejandro Soto
2025-10-21sys/seat: enable Intel vpl-gpu-rtAlejandro Soto
2025-10-11sys/preset/user: enable trivionomiconMotdAlejandro Soto
2025-10-11Merge branch '[lustrated]' into masterAlejandro Soto
2025-10-11tree-wide: replace local athena-bccr with version from trivionomiconAlejandro Soto
2025-10-04sys/baseline: add opensslAlejandro Soto
2025-09-28sys/baseline: switch frequency of nix.gc to quarterlyAlejandro Soto
2025-09-20sys/net/interfaces: add wireguard-tools to systemPackagesAlejandro Soto
2025-09-15sys/[lustrated]: temporarily disable vsock SSHAlejandro Soto
2025-09-06sys/web/sites/portal: enable static site at sysret.orgAlejandro Soto
2025-08-29sys/web/sites/portal: enable Web Key DirectoryAlejandro Soto
2025-08-25sys/nspawn: fix nspawn definition after switch to trivionomiconAlejandro Soto
2025-08-25sys: migrate exdev.io to sysret.orgAlejandro Soto
2025-08-25sys/ns/rr: formatAlejandro Soto
2025-08-24tree-wide: reformat using alejandra after enabling trivionomiconAlejandro Soto
2025-08-05flake.lock: add trivionomiconAlejandro Soto
2025-08-03sys/baseline: disable journald forwarding to wallAlejandro Soto
2025-08-03sys/[lustrated]: enable sshd-ula for remote loginAlejandro Soto
2025-08-02sys/hardware/athena: trust the national eSignature root CA system-wideAlejandro Soto
2025-08-02pkgs/athena-bccr: split ase-idprotect bin and lib outputsAlejandro Soto
2025-07-31sys/boot/tpm: fix unbound variable in shell scriptAlejandro Soto
2025-07-30sys/hardware/apc: adjust shutdown limitsAlejandro Soto
2025-07-30sys/preset/user: enable nullmailerAlejandro Soto
2025-07-30sys/boot/tpm: enforce passwordless TPM chain-of-trust for LUKS unlockAlejandro Soto
2025-07-26sys/boot/secure-boot: support new path for secure boot keys at /var/lib/sbctlAlejandro Soto
2025-07-26sys/boot/tpm: support different TPM drivers (tpm_tis vs tpm_crb)Alejandro Soto
2025-07-25sys/seat: rename hardware.pulseaudio -> services.pulseaudio (25.05)Alejandro Soto
2025-07-25sys/net/interfaces: change reverse path policy from strict to looseAlejandro Soto
2025-07-25sys/boot: implement TPM2 crypt device unlockAlejandro Soto
2025-07-24sys/boot/tpm: initial commitAlejandro Soto
2025-07-23sys/boot: rename sb.nix -> secure-boot.nixAlejandro Soto
2025-07-06sys/hardware: add support for Athena ASEDrive readerAlejandro Soto
2025-06-02sys/mail: move services.dovecot.modules -> environment.systemPackages after ↵Alejandro Soto
update to 25.05
2025-05-31sys/auth: enable rssh PAM moduleAlejandro Soto
2025-05-31home/desktop/sway: switch from swaylock to gtklockAlejandro Soto
2025-05-19sys/auth/openssh: fix syntax error in sshd_config when ↵Alejandro Soto
PerSourcePenaltyExemptList is empty
2025-05-11sys/baseline: run Nix gc every Saturday at midnightAlejandro Soto
2025-04-30sys/auth/openssh: add PerSourcePenaltyExemptListAlejandro Soto
2025-04-26sys/ns: enable acme-dns for DNS-01 challengesAlejandro Soto
2025-04-24sys/ns: implement automatic PTR zonesAlejandro Soto
2025-04-19sys/ns: sunset junkemailfilter.com as backup MXAlejandro Soto
Had been in place since approximately late 2018.
2025-04-19sys/env: make each user have an 'install' attributeAlejandro Soto
2025-04-19sys/web/sites/host: enable DAV reverse proxyAlejandro Soto
2025-04-19sys/web/sites: add host siteAlejandro Soto
2025-04-19sys/mta: improve postfix hardeningAlejandro Soto