Colin efc16a9e80 persist: harden the "ephemeral" store mount environment ...

there's only so much this can actually achieve. it's still quite possible for someone who knows what they're doing to do large amounts of damage

2024-08-01 22:40:55 +00:00

..

data

feeds: fix complex systems URL

2024-08-01 19:52:22 +00:00

fs

static-nix-shell: fix mkBash scripts to actually be invokable from the CLI

2024-06-15 07:42:04 +00:00

lib

programs: simplify sandbox symlink closure code

2024-05-13 07:49:00 +00:00

persist

persist: harden the "ephemeral" store mount environment

2024-08-01 22:40:55 +00:00

programs

unl0kr: port to an s6 service

2024-07-25 18:45:01 +00:00

services

lightning-cli: fix sandboxing

2024-08-01 19:59:23 +00:00

users

modules/users: use = instead of -eq for comparison to fix warning which XDG_VTNR is unset

2024-07-26 20:57:23 +00:00

default.nix

servo: split the doof/ovpns netns config into its own module

2024-06-17 09:25:10 +00:00

dns.nix

modules/dns: support AAAA records

2024-05-20 05:46:25 +00:00

feeds.nix

feeds: add support for video; subscribe to videos in gpodder

2023-12-06 15:36:05 +00:00

ids.nix

ids: improve docs

2023-01-08 06:54:29 +00:00

image.nix

mobile-nixos: import by fetchFromGitHub instead of via flake

2024-06-07 21:15:54 +00:00

netns.nix

servo: fix warning for getExe and iptables

2024-07-04 12:43:02 +00:00

ports.nix

ports: fix systemd RandomizedDelaySec typo

2023-12-12 02:14:27 +00:00

root-on-tmpfs.nix

sane.persist.root-on-tmpfs -> sane.root-on-tmpfs

2023-11-09 00:15:04 +00:00

sops.nix

impermanence: split out sops setup

2022-12-30 04:31:24 +00:00

ssh.nix

fix "rescue" host to eval again

2024-02-28 14:19:45 +00:00

vpn.nix

vpn: log a message whenever the endpoint is updated

2024-07-06 03:03:38 +00:00

warnings.nix

modules/warnings: add a way to bypass module-level assertions as well

2024-06-27 06:17:53 +00:00

wowlan.nix

s/types.string/types.str/

2023-10-17 22:46:02 +00:00