Ryan Yin f766dcc24f fix(security): tighten desktop remote access

2026-09-01 20:20:51 +08:00

..

networking

…

btrbk.nix

…

core.nix

…

default.nix

security: hardening pass 1 (AppArmor, firewall default, loopback metrics, k3s perms, SSH X11) (#266)

2026-08-27 00:13:01 +08:00

i18n.nix

…

kernel-hardening.nix

fix: mitigate Dirty Frag LPE vulnerabilities

2026-05-14 11:54:36 +08:00

monitoring.nix

Nixos 26.05 (#261)

2026-06-01 10:02:49 +08:00

nix.nix

fix(nix): preserve default sandbox shell

2026-07-06 23:04:16 +08:00

packages.nix

feat: add nvme-cli

2026-03-16 09:25:28 +08:00

remote-building.nix

…

ssh.nix

fix(security): tighten desktop remote access

2026-09-01 20:20:51 +08:00

trash.nix

feat(nixos): manage scattered trash dirs with trash-cli retention timer (#265)

2026-08-23 23:40:53 +08:00

user-group.nix

fix(security): remove container daemon group access

2026-09-01 19:17:39 +08:00

zram.nix

fix(nixos): gate zram kernel sysctl tunings behind modules.zram.enable

2026-08-29 11:16:12 +08:00