Ryan Yin f9cf99dadb security: add conservative systemd hardening to aquamarine services

2026-08-26 18:14:43 +08:00

..

home-manager

feat: replace waybar/mako/anyrun/wlogout/swaylock with noctolia-shell, remove hyprland (#240)

2026-01-03 09:36:54 -06:00

hostname

feat: replace waybar/mako/anyrun/wlogout/swaylock with noctolia-shell, remove hyprland (#240)

2026-01-03 09:36:54 -06:00

kernel

feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'

2025-07-30 12:17:24 +08:00

nix-system-features

fix(nix): preserve default sandbox shell

2026-07-06 23:04:16 +08:00

security-apparmor

security: enable AppArmor (complain) on all Linux hosts

2026-08-26 18:14:43 +08:00

security-aquamarine-metrics

security: bind aquamarine metrics exporters to loopback

2026-08-26 18:14:43 +08:00

security-firewall

test: fix security-firewall eval test to scalar per-host values

2026-08-26 18:14:43 +08:00

security-k3s-kubeconfig

security: restrict k3s kubeconfig file mode to 600

2026-08-26 18:14:43 +08:00

security-service-hardening

security: add conservative systemd hardening to aquamarine services

2026-08-26 18:14:43 +08:00

security-ssh-x11

security: disable SSH X11 forwarding on servers, keep on desktops

2026-08-26 18:14:43 +08:00

ups-metrics

feat(monitoring): collect homelab UPS metrics

2026-07-24 12:44:17 +08:00