|
5f8699fcef
|
rearrange /mnt structure for host-based subdirs
e.g. /mnt/servo/media, /mnt/desko/home, etc
|
2024-02-06 05:48:11 +00:00 |
|
|
30288cd67f
|
user: add CAP_NET_ADMIN,CAP_NET_RAW even outside of systemd session
in fact, *only* outside of systemd session because they broke ambient caps in 255
|
2024-01-31 15:42:43 +00:00 |
|
|
381da74e6c
|
users: enable pam_cap for "login" program
|
2024-01-28 17:55:19 +00:00 |
|
|
563a75e9b2
|
users: launch entire systemd --user namespace with cap_net_admin, cap_net_raw
this should make sandboxing wireshark *much* easier, and same with things which require net namespaces, in the future
|
2024-01-25 15:05:35 +00:00 |
|
|
9ecd0adcbe
|
firefox: sandbox with firejail
TODO: get it so open-in-mpv launches an mpv that has access to ~/.config/mpv
i guess this is the 'firejail url problem'
|
2024-01-21 23:59:15 +00:00 |
|
|
e2a43ddfa0
|
servo: clightning: allow group members to run lightning-cli
|
2024-01-11 15:59:32 +00:00 |
|
|
3ff9c0ad0c
|
add a "nixremote" user for remote bulding (experimental; builds arent actually enabled yet)
|
2023-11-23 01:27:28 +00:00 |
|
|
28d4a4b065
|
persistence: move stores behind a byStore attr to support disabling persistence altogether (for e.g. rescue image)
|
2023-11-08 15:33:15 +00:00 |
|
|
4c708baf63
|
remove Videos/servo-incomplete symlink
|
2023-10-02 03:23:44 +00:00 |
|
|
cb3cf57465
|
cargo: when enabled, persist ~/.cargo
|
2023-09-30 02:57:30 +00:00 |
|
|
321cc62ca0
|
passwordFile -> hashedPasswordFile to fix deprecation warning
|
2023-09-16 08:17:48 +00:00 |
|
|
d87015836e
|
swaync: integrate with feedbackd for notification sounds
|
2023-09-15 10:20:18 +00:00 |
|
|
56ad2370dc
|
colin: add to systemd-journal group
|
2023-09-12 00:06:00 +00:00 |
|
|
edf936820a
|
transmission: fix permission-related errors
|
2023-09-07 06:14:11 +00:00 |
|
|
4fdf74fdbe
|
export: enforce a quota
|
2023-09-01 03:37:33 +00:00 |
|
|
c824751682
|
~: don't symlink ~/Music/servo
it gets in the way for devices that have a full copy of their music
|
2023-08-14 08:10:06 +00:00 |
|
|
44b15ba8ed
|
users: apply default permissions to any user who goes through the sane.users module
|
2023-07-14 23:56:01 +00:00 |
|
|
8feafbb615
|
pinephone: fix flashlight permissions, the proper way (udev)
|
2023-07-14 05:55:44 +00:00 |
|
|
f2eba95dfc
|
users/colin: persist some notable cache directories
|
2023-07-13 07:17:27 +00:00 |
|
|
ebf6f46948
|
persist ~/Books
|
2023-07-03 22:38:30 +00:00 |
|
|
5db9c4f558
|
nix-index/nix-locate: re-enable
|
2023-06-29 21:24:32 +00:00 |
|
|
68cda2006b
|
cleanup/refactor users
|
2023-06-28 03:46:29 +00:00 |
|
|
ddf79e54e9
|
users: split colin and guest apart
|
2023-06-28 03:34:15 +00:00 |
|