Ryan Yin
72a6e95cab
security: make firewall secure-by-default, disable explicitly on servers
...
Flip the base firewall default to ON so new hosts are protected by default. Servers keep the firewall off (trusted internal LAN, WAN protected at the router) via explicit overrides in modules/nixos/server/{server,server-aarch64}.nix. Behavior-preserving for all 18 current hosts; adds a security-firewall eval test guarding the per-host state.
2026-08-26 18:14:43 +08:00
Ryan Yin
662316c18a
Nixos 26.05 ( #261 )
...
* flake.lock: Update
Flake lock file updates:
• Updated input 'nixpkgs':
'github:NixOS/nixpkgs/7aaa00e7cc9be6c316cb5f6617bd740dd435c59d?narHash=sha256-WacE23EbHTsBKvr8cu%2B1DFNbP6Rh1brHUH5SDUI0NQI%3D' (2026-04-30)
→ 'github:NixOS/nixpkgs/e9a7635a57597d9754eccebdfc7045e6c8600e6b?narHash=sha256-u6WU/yd/o8iYQrHX3RAwO1hYa3LkoSL%2BWNQD0rJfJZQ%3D' (2026-05-29)
* feat: upgrade to nixos 26.05
2026-06-01 10:02:49 +08:00
Ryan Yin
3bf1b986cf
feat: upgrade nixpkgs stable to 25.11, update nixos-apple-silicon, gh… ( #236 )
...
* feat: upgrade nixpkgs stable to 25.11, update nixos-apple-silicon, ghostty, anyrun, etc
* fix: asahi-nixos - revert mesa to 25.2.6
* fix: disable gitui - it's broken on aarch64-darwin currently
---------
Signed-off-by: Ryan Yin <xiaoyin_c@qq.com >
2025-11-26 20:54:44 -06:00
Ryan Yin
13bb77108c
feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'
2025-07-30 12:17:24 +08:00
Ryan Yin
c4a33c55aa
feat: open ports for testing
2025-07-04 17:09:48 +08:00
Ryan Yin
a2007fd88c
feat: bump to nixos 25.05
2025-05-21 12:16:00 +08:00
Ryan Yin
26384a73ed
refactor(ssh): system-level ssh known_hosts & ssh config
2025-05-16 00:28:40 +08:00
Ryan Yin
0683ef0a13
chore: bump nixpkgs to 24.11
2024-11-22 13:58:51 +08:00
Ryan Yin
9adf87aaf5
feat: upgrade to 24.05
...
fix: remove or update some packages
2024-06-02 11:17:32 +08:00
Ryan Yin
b382999a70
refactor: Use haumea for filesystem-based module system for flake outputs
...
refactor: Use hyphen(`-`) for variable names & folder names(except Python), replace all unserscore(`_`) with hyphen(`-`).
2024-03-10 20:12:02 +08:00
Ryan Yin
2c8d0f629c
fix(security): enable sudo password for ryan, use root for remote deployment
2024-03-04 18:36:59 +08:00
Ryan Yin
f933146a42
fix: suzu
2024-03-04 00:48:01 +08:00
Ryan Yin