ryan4yin | 二花 ef00eb31e0 docs: warn that user-readable decrypted secrets must not be read (#303) ...

Only three secrets are readable as the login user (nix-access-tokens,
ssh-key-romantic and the nushell one); everything else is root-only and
the filesystem already keeps agents out.

2026-09-21 21:18:06 +08:00

..

networking

fix(networking): disable systemd-resolved mDNS when avahi is enabled

2026-09-19 13:54:19 +08:00

btrbk.nix

feat(youko): restic backup of the service state to the HDD (part 1) (#299)

2026-09-21 19:00:35 +08:00

core.nix

chore: power management

2025-08-19 23:56:19 +08:00

default.nix

security: hardening pass 1 (AppArmor, firewall default, loopback metrics, k3s perms, SSH X11) (#266)

2026-08-27 00:13:01 +08:00

i18n.nix

chore(i18n): keep only China-specific locale overrides

2026-09-19 16:15:35 +08:00

kernel-hardening.nix

fix: mitigate Dirty Frag LPE vulnerabilities

2026-05-14 11:54:36 +08:00

monitoring.nix

Nixos 26.05 (#261)

2026-06-01 10:02:49 +08:00

nix.nix

fix(nix): preserve default sandbox shell

2026-07-06 23:04:16 +08:00

packages.nix

feat: add nvme-cli

2026-03-16 09:25:28 +08:00

remote-building.nix

docs: warn that user-readable decrypted secrets must not be read (#303)

2026-09-21 21:18:06 +08:00

restic-backup.nix

feat(backup): notify on failure, and 404 unconfigured hostnames

2026-09-21 20:42:39 +08:00

ssh.nix

fix(security): tighten desktop remote access

2026-09-01 20:20:51 +08:00

trash.nix

fix(trash): persist the cleanup timer

2026-09-19 12:11:18 +08:00

user-group.nix

chore(desktop): drop duplicate applets and tune the noctalia bar

2026-09-20 01:35:20 +08:00

zram.nix

fix(nixos): gate zram kernel sysctl tunings behind modules.zram.enable

2026-08-29 11:16:12 +08:00