9 Commits

Include renames

Author	SHA1	Message	Date
Ryan Yin	72a6e95cab	security: make firewall secure-by-default, disable explicitly on servers ... Flip the base firewall default to ON so new hosts are protected by default. Servers keep the firewall off (trusted internal LAN, WAN protected at the router) via explicit overrides in modules/nixos/server/{server,server-aarch64}.nix. Behavior-preserving for all 18 current hosts; adds a security-firewall eval test guarding the per-host state.	2026-08-26 18:14:43 +08:00
Ryan Yin	13bb77108c	feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'	2025-07-30 12:17:24 +08:00
Ryan Yin	4ec26c5e5f	refactor: fonts (#194)	2025-06-22 20:13:50 +08:00
Ryan Yin	a02097f7d7	chore(modules/nixos): adjsut boot.loader.timeout	2024-08-26 20:56:45 +08:00
Ryan Yin	f1a5d419fb	fix: hdd storage - do not unlock on boot, increase boot.loader.timeout	2024-08-17 03:06:37 +08:00
Ryan Yin	7486e75016	fix:(modules/nixos/server): The option `boot.loader.timeout' has conflicting definition values	2024-03-31 23:38:42 +08:00
Ryan Yin	69fafe0c7c	feat: add configs for kubevirt-lab-1	2024-03-29 01:22:47 +08:00
Ryan Yin	f933146a42	fix: suzu	2024-03-04 00:48:01 +08:00
Ryan Yin	ecc335b07e	feat: security - gnupg & openssh's KDF	2024-01-26 13:47:01 +08:00