10 Commits

Include renames

Author	SHA1	Message	Date
Ryan Yin	36c29a8371	security: enable AppArmor (complain) on all Linux hosts	2026-08-26 18:14:43 +08:00
Ryan Yin	72a6e95cab	security: make firewall secure-by-default, disable explicitly on servers ... Flip the base firewall default to ON so new hosts are protected by default. Servers keep the firewall off (trusted internal LAN, WAN protected at the router) via explicit overrides in modules/nixos/server/{server,server-aarch64}.nix. Behavior-preserving for all 18 current hosts; adds a security-firewall eval test guarding the per-host state.	2026-08-26 18:14:43 +08:00
Ryan Yin	13bb77108c	feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'	2025-07-30 12:17:24 +08:00
Ryan Yin	4ec26c5e5f	refactor: fonts (#194)	2025-06-22 20:13:50 +08:00
Ryan Yin	a02097f7d7	chore(modules/nixos): adjsut boot.loader.timeout	2024-08-26 20:56:45 +08:00
Ryan Yin	f1a5d419fb	fix: hdd storage - do not unlock on boot, increase boot.loader.timeout	2024-08-17 03:06:37 +08:00
Ryan Yin	34e7e9b2cd	feat(modules/nixos/server): add btrbk for aarch64 hosts	2024-04-01 18:37:24 +08:00
Ryan Yin	4d0741c841	feat: install nixos on orange pi 5 plus with edk2-rk3588(uefi)	2024-03-07 21:59:23 +08:00
Ryan Yin	c7c771804a	refactor: packages & fhs	2024-03-04 01:05:55 +08:00
Ryan Yin	f933146a42	fix: suzu	2024-03-04 00:48:01 +08:00