Colin e7d5a61014 libcap: split into separate capsh and captree programs, and sandbox the latter

2024-08-12 10:13:50 +00:00

..

data

feeds: subscribe to Weird Little Guys

2024-08-12 00:35:34 +00:00

fs

/mnt/$host/home: run as user instead of as root

2024-08-03 15:13:04 +00:00

lib

programs: simplify sandbox symlink closure code

2024-05-13 07:49:00 +00:00

persist

/mnt/persist/private: split waiting on the keyfile out of the mount process

2024-08-06 02:03:55 +00:00

programs

libcap: split into separate capsh and captree programs, and sandbox the latter

2024-08-12 10:13:50 +00:00

services

rename: trust-dns -> hickory-dns

2024-08-12 01:23:39 +00:00

users

modules/users: use = instead of -eq for comparison to fix warning which XDG_VTNR is unset

2024-07-26 20:57:23 +00:00

default.nix

servo: split the doof/ovpns netns config into its own module

2024-06-17 09:25:10 +00:00

dns.nix

rename: trust-dns -> hickory-dns

2024-08-12 01:23:39 +00:00

feeds.nix

feeds: add support for video; subscribe to videos in gpodder

2023-12-06 15:36:05 +00:00

ids.nix

ids: improve docs

2023-01-08 06:54:29 +00:00

image.nix

mobile-nixos: import by fetchFromGitHub instead of via flake

2024-06-07 21:15:54 +00:00

netns.nix

servo: fix warning for getExe and iptables

2024-07-04 12:43:02 +00:00

ports.nix

ports: fix systemd RandomizedDelaySec typo

2023-12-12 02:14:27 +00:00

root-on-tmpfs.nix

sane.persist.root-on-tmpfs -> sane.root-on-tmpfs

2023-11-09 00:15:04 +00:00

sops.nix

impermanence: split out sops setup

2022-12-30 04:31:24 +00:00

ssh.nix

fix "rescue" host to eval again

2024-02-28 14:19:45 +00:00

vpn.nix

wg-home-refresh: use the sandboxed wireguard-tools

2024-08-09 23:52:31 +00:00

warnings.nix

modules/warnings: add a way to bypass module-level assertions as well

2024-06-27 06:17:53 +00:00

wowlan.nix

s/types.string/types.str/

2023-10-17 22:46:02 +00:00