|
|
7cff078698
|
todo.md: remove completed items
|
2024-05-16 04:10:09 +00:00 |
|
|
|
a5f6aae6f5
|
desko: use stock systemd resolver
i need a backup system to use when things are broken, and this helps with debugging as well
|
2024-05-16 03:12:30 +00:00 |
|
|
|
fd94422982
|
distcc: purge
|
2024-05-16 02:51:38 +00:00 |
|
|
|
55a7119e3f
|
ccache: purge
|
2024-05-16 02:51:03 +00:00 |
|
|
|
d258d4ddd5
|
desko: re-enable firewall
|
2024-05-16 02:49:03 +00:00 |
|
|
|
c39aab34e0
|
refactor: nix_serve_privkey -> nix_signing_key
|
2024-05-16 02:48:16 +00:00 |
|
|
|
9d725a0974
|
servo: disable unused nixcache.uninsane.org
|
2024-05-16 02:46:23 +00:00 |
|
|
|
4a15339e0e
|
desko: re-introduce the nix_serve key, which is actually needed for SSH deployements, not just nix-serve
|
2024-05-16 02:43:32 +00:00 |
|
|
|
df4ef0ce5a
|
desko: disable nix-serve
|
2024-05-16 02:35:27 +00:00 |
|
|
|
3bb5546aaf
|
systemd-logind: fix to not sleep when i close the lid (again)
|
2024-05-16 02:13:02 +00:00 |
|
|
|
4de3c6d664
|
sanebox: fix tab typo when parsing the link cache
|
2024-05-16 00:15:57 +00:00 |
|
|
|
b5502ea401
|
sanebox: remove --sanebox-cache-symlink flag
|
2024-05-15 23:59:38 +00:00 |
|
|
|
1211023c55
|
modules/programs: remove dead code from per-user profiles
|
2024-05-15 23:58:10 +00:00 |
|
|
|
b4229ecb1e
|
sanebox: load the link cache from a static /etc path instead of via CLI args
|
2024-05-15 23:55:15 +00:00 |
|
|
|
348837ff4a
|
programs: sandboxing: replace profiles with raw CLI args
|
2024-05-15 09:13:20 +00:00 |
|
|
|
17eaa7446a
|
sanebox: remove all profile-related features except for direct, path-based profile loading
|
2024-05-15 09:13:20 +00:00 |
|
|
|
530664294a
|
programs: sandbox: always specify --sanebox-profile-dir instead of loading from XDG_DATA_DIRS
|
2024-05-15 08:54:16 +00:00 |
|
|
|
b649071d98
|
programs: sandboxing: make the profiles be generic across users
this is a step toward making the profile not even be dynamically loaded, since its content is no longer dynamic :)
|
2024-05-15 08:48:09 +00:00 |
|
|
|
ea2653b7ce
|
programs: sandboxing: pass home- and runtime-relative paths to the sandboxer, instead of making absolute first
|
2024-05-15 08:20:09 +00:00 |
|
|
|
d97f0f7300
|
sanebox: implement --sanebox-home-path and --sanebox-run-path flags
|
2024-05-15 08:05:00 +00:00 |
|
|
|
ee43fcdb89
|
rename LG TV -> Cuddlevision
|
2024-05-15 07:50:38 +00:00 |
|
|
|
4c1b1282d6
|
modules/programs: sandbox: be compatible with systemd resolved again
|
2024-05-15 02:57:40 +00:00 |
|
|
|
bc73a16475
|
networkmanager: fix to be compatible when systemd-resolved is enabled
|
2024-05-15 02:57:40 +00:00 |
|
|
|
adfaa7f9c1
|
sane-sandboxed -> sanebox
|
2024-05-15 01:41:40 +00:00 |
|
|
|
f9a6873ee9
|
signal-desktop: remove NIXOS_OZONE_WL=1 hack (no longer required)
|
2024-05-15 00:10:00 +00:00 |
|
|
|
66f73c92bd
|
trust-dns: asSystemResolver: listen also on ipv6 address
|
2024-05-14 23:38:01 +00:00 |
|
|
|
d5e8974a4a
|
refactor: trust-dns: listenAddrs -> listenAddrsIpv4
|
2024-05-14 23:22:50 +00:00 |
|
|
|
e040a5b0c5
|
servo: trust-dns: remove hn-resolver
my hosts run their own recursive DNS resolvers now, so there's no need for the wireguard VPN to provide them with that
|
2024-05-14 23:20:19 +00:00 |
|
|
|
d2ac88d66d
|
nixpatches: upstream the gnome-keyring cross compilation patch
|
2024-05-14 23:12:59 +00:00 |
|
|
|
b534af5203
|
signal-desktop: use nixpkgs' nodejs instead of the signal pin
it still seems stable
|
2024-05-14 23:12:41 +00:00 |
|
|
|
b06b75441c
|
signal-desktop: 7.0.0 -> 7.8.0
|
2024-05-14 23:05:00 +00:00 |
|
|
|
1f405fb2ba
|
element-desktop: update electron_28 -> electron_29
|
2024-05-14 22:32:56 +00:00 |
|
|
|
ffe9dcedf7
|
koreader: 2024.03 -> 2024.04
|
2024-05-14 22:12:23 +00:00 |
|
|
|
fc649de64c
|
fractal: remove dead code
|
2024-05-14 20:56:50 +00:00 |
|
|
|
1210696e3a
|
fractal: re-enable jpeg decoding
|
2024-05-14 20:56:37 +00:00 |
|
|
|
47ced34c84
|
fractal: 6-unstable-2024-01-31 -> 7
|
2024-05-14 20:15:27 +00:00 |
|
|
|
ae7034d942
|
nixpkgs: 2024-05-13 -> 2024-05-14; nixpkgs-wayland
```
• Updated input 'nixpkgs-next-unpatched':
'github:nixos/nixpkgs/eda36d7cf3391ad06097009b08822fb74acd5e00' (2024-05-13)
→ 'github:nixos/nixpkgs/a47743431bb52c25eecbeda1bb2350902478befe' (2024-05-14)
• Updated input 'nixpkgs-unpatched':
'github:nixos/nixpkgs/0a949cf2618e8eab83aa008f1f8e03db137ed36c' (2024-05-13)
→ 'github:nixos/nixpkgs/18198ef6f41074a6b42318dacb6fa4712b893ba4' (2024-05-14)
• Updated input 'nixpkgs-wayland':
'github:nix-community/nixpkgs-wayland/ed18785b8816fa878bdd9df7f2e8722695401ef8' (2024-05-13)
→ 'github:nix-community/nixpkgs-wayland/ce959368cbc8202181f37a464c825d54720b6b68' (2024-05-14)
```
|
2024-05-14 18:04:22 +00:00 |
|
|
|
f3cf9e0bed
|
trust-dns: set it to NOT be the system resolver for servo
trust-dns recursor is too beta for servo
|
2024-05-14 09:03:10 +00:00 |
|
|
|
3a7c9022af
|
trust-dns: bump StartLimitBurst so systemd doesnt abort the service too early
|
2024-05-14 08:50:37 +00:00 |
|
|
|
2a199bf373
|
trust-dns: recursor: merge DHCP DNS servers from all non-downed connections
otherwise overwriting the toml configs gets messy, when interfaces come up in unpredictable order
|
2024-05-14 08:25:59 +00:00 |
|
|
|
53198128e8
|
trust-dns: hook NetworkManager for state changes
there may be some edgecases to sort out around e.g. first-run,
but so far it seems to be importing the DHCP search zones :)
|
2024-05-14 07:42:41 +00:00 |
|
|
|
bee3eea040
|
modules/programs: sandbox: remove no-longer-needed /run/systemd/resolve from sandbox
|
2024-05-14 04:18:29 +00:00 |
|
|
|
1e202baa8a
|
networkmanager: tune config
mostly just pruning unused features
|
2024-05-14 04:18:29 +00:00 |
|
|
|
39eb1d150a
|
dns: deploy trust-dns as the default recursive resolver
outstanding issues: native.uninsane.org doesn't resolve. appears possibly to be an issue with following CNAMEs
|
2024-05-14 04:18:29 +00:00 |
|
|
|
68e6666819
|
trust-dns: use my patched version
|
2024-05-14 04:18:29 +00:00 |
|
|
|
447e1feb9c
|
sway: fix Super+L shortcut to actually lock
|
2024-05-14 04:17:05 +00:00 |
|
|
|
26e3c3e5b7
|
s6-rc: fix persist.byStore.persist typo
|
2024-05-14 04:16:50 +00:00 |
|
|
|
38c038f4f7
|
sane-sandboxed: fix typo in linkCache queries, which would otherwise break for paths containing spaces
|
2024-05-14 01:22:08 +00:00 |
|
|
|
3557994cbb
|
gnome-clocks: fix sound an sandboxing artifacts
|
2024-05-14 01:21:37 +00:00 |
|
|
|
f3106ee316
|
programs: maxBuildCost: fix to actually build everything by default
|
2024-05-13 22:57:40 +00:00 |
|
