|
|
e5ad0862fb
|
refactor: move ~/ fs definitions into hosts/common/home, not users/
|
2024-02-23 07:06:29 +00:00 |
|
|
|
057b9e3fed
|
replace links/references to ~/private/FOO with just ~/FOO
|
2024-02-23 07:06:29 +00:00 |
|
|
|
1bcfccf7e3
|
refactor: persist ~/knowledge formally instead of relying on the symlink
|
2024-02-23 07:06:29 +00:00 |
|
|
|
a402822084
|
move "private" store to /mnt/persist/private instead of ~/private
this will allow me to add all of ~ to a sandbox without giving all of ~/private
|
2024-02-23 07:06:29 +00:00 |
|
|
|
771dc2e1ce
|
fs: allow common /mnt points to be mounted by me without sudo
|
2024-02-23 07:06:29 +00:00 |
|
|
|
4a316d4b91
|
bonsai: lift out of sxmo
|
2024-02-23 07:06:29 +00:00 |
|
|
|
af03b3f6e8
|
xwayland: sandbox
|
2024-02-23 01:05:24 +00:00 |
|
|
|
5819f07181
|
programs: xwayland: sandbox
|
2024-02-22 22:12:03 +00:00 |
|
|
|
122f3fa5cc
|
sway: remove xwayland-specific placement of Signal
it breaks non-xwayland sway config parsing, and Signal is native Wayland now anyway even with Xwayland running'
|
2024-02-22 22:01:48 +00:00 |
|
|
|
f27f994090
|
systemd: fix the timeout for the user service manager
|
2024-02-22 00:24:05 +00:00 |
|
|
|
473999c001
|
sway: re-enable networkmanager
|
2024-02-21 23:46:25 +00:00 |
|
|
|
d1de9efde1
|
sway: port xwayland use to sane.programs API
|
2024-02-21 23:32:10 +00:00 |
|
|
|
50c3f04714
|
pipewire: remove dead alsa comments
|
2024-02-21 23:26:40 +00:00 |
|
|
|
49bad8f186
|
sway: split pipewire persisted file into pipewire.nix
|
2024-02-21 23:26:25 +00:00 |
|
|
|
fd9f500e97
|
sway: split pipewire config into separate sane.programs.pipewire
|
2024-02-21 23:23:52 +00:00 |
|
|
|
386651044e
|
sway: port to sane.programs API
|
2024-02-21 23:18:57 +00:00 |
|
|
|
55a6c828f2
|
sway: lift portal/menu reset into polyunfill.nix
|
2024-02-21 22:09:53 +00:00 |
|
|
|
d77a12ce7b
|
unl0kr: remove the "afterLogin" option and choose automatically which desktop to launch
|
2024-02-21 20:47:48 +00:00 |
|
|
|
153d2a1047
|
GSK_RENDERER: don't set globally, but just for the apps which _actually_ require it
this way i can avoid conflicts around apps which don't expect this to be set (e.g. delfin)
|
2024-02-21 16:56:56 +00:00 |
|
|
|
b8f090be93
|
programs: delfin: add required mpris permissions
|
2024-02-21 13:27:19 +00:00 |
|
|
|
5a0760a571
|
programs: sandbox oathtools
|
2024-02-21 00:03:48 +00:00 |
|
|
|
757ab79724
|
programs: dconf: sandbox
|
2024-02-20 23:43:25 +00:00 |
|
|
|
81148b7b42
|
programs: explicitly depend on dconf instead of manually persisting dconf's dirs
|
2024-02-20 23:39:27 +00:00 |
|
|
|
429d0c53e7
|
programs: ripgrep: sandbox with bwrap instead of landlock
this provides network isolation
|
2024-02-20 23:32:54 +00:00 |
|
|
|
6cf1bc5a28
|
programs: grep: sandbox
|
2024-02-20 23:32:28 +00:00 |
|
|
|
768b340c93
|
findutils: sandbox
use bwrap instead of landlock for the dumb preference that i can disable
net
|
2024-02-20 23:31:58 +00:00 |
|
|
|
d9901aa161
|
programs: sane-secrets-*: sandbox
|
2024-02-20 23:31:39 +00:00 |
|
|
|
be2098c18a
|
programs: sane-vpn: sandbox
|
2024-02-20 23:05:24 +00:00 |
|
|
|
bb569b1668
|
sane-vpn: port away from systemd so that i can use it as an ordinary user (no sudo)
|
2024-02-20 22:21:02 +00:00 |
|
|
|
71025329e7
|
programs: sane-dev-cargo-loop: sandbox
|
2024-02-20 19:26:38 +00:00 |
|
|
|
ca4d1e3b9d
|
programs: sane-tag-music: sandbox
|
2024-02-20 19:26:18 +00:00 |
|
|
|
284b698015
|
sane-reclaim-boot-space: fix, and sandbox
well i didn't get to test this thoroughly: might still have problems
|
2024-02-20 19:16:36 +00:00 |
|
|
|
bc50daf685
|
nix.settings: port to structured attrs
|
2024-02-20 18:35:03 +00:00 |
|
|
|
47dcfb9cba
|
fix nix.settings.nix-path to actually take effect
now i can `nix-shell` again! nix-path takes precedence over `NIX_PATH`
env var.
|
2024-02-20 17:54:25 +00:00 |
|
|
|
2bd99f6e51
|
remove no-longer-needed nix trusted-users setting
well, it *seems* to work, at least!
|
2024-02-20 13:43:41 +00:00 |
|
|
|
8beac8df2f
|
programs: sandbox sane-shutdown, sane-reboot
|
2024-02-20 13:43:05 +00:00 |
|
|
|
58db553c84
|
programs: unl0kr: sandbox
|
2024-02-20 13:29:56 +00:00 |
|
|
|
2ea3776d84
|
programs: sane-sync-from-servo: remove
this was obsoleted by the top-level flake `sync` scripts
|
2024-02-20 13:16:21 +00:00 |
|
|
|
d596d005ca
|
systemd: configure a 25s stop timeout for the user manager too (hopefully)
|
2024-02-20 13:11:47 +00:00 |
|
|
|
e92db138ef
|
systemd: allow ordinary users to invoke shutdown/reboot
|
2024-02-20 12:25:04 +00:00 |
|
|
|
5fed127c23
|
refactor: split systemd config into own file
|
2024-02-20 12:18:28 +00:00 |
|
|
|
db49f0461c
|
refactor: move nix stuff out of common/default.nix -> common/nix/default.nix
|
2024-02-20 12:16:00 +00:00 |
|
|
|
73bb7827c0
|
refactor: nix-path/ -> nix/
|
2024-02-20 12:13:52 +00:00 |
|
|
|
a624571b22
|
move glib program recommendation into programs/assorted.nix
|
2024-02-20 12:11:26 +00:00 |
|
|
|
53cbe5c8da
|
dconf: split into own sane.programs definition
|
2024-02-20 12:09:52 +00:00 |
|
|
|
46de7b7e0d
|
move environment.defaultPackages clearing into polyunfill.nix
|
2024-02-20 11:54:39 +00:00 |
|
|
|
d7be5da483
|
warnings.nix: port to a proper module
|
2024-02-20 11:19:12 +00:00 |
|
|
|
902e351085
|
hack: silence the warning about using hashedPasswordFile *and* initialPassword
see: <https://github.com/NixOS/nixpkgs/pull/287506>
i'll factor this into something more general, later
|
2024-02-20 11:11:07 +00:00 |
|
|
|
a05184f956
|
programs: neovim: fix nvim-treesitter typo
|
2024-02-20 10:23:52 +00:00 |
|
|
|
36ad2d5421
|
programs: unl0kr: auto-derive the user option
|
2024-02-20 07:21:22 +00:00 |
|
