ryan4yin | 二花 3acb5d4ee5 fix(nfs,libvirt): restrict the golden export and bind VNC to loopback (#400) ...

* fix(nfs): restrict the golden export to its real clients

* fix(libvirt): bind VNC consoles to loopback

* fix(firewall): drop VNC ports on every host

* docs(security): record the NFS and VNC boundaries

2026-10-07 15:10:52 +08:00

..

networking

fix(nfs,libvirt): restrict the golden export and bind VNC to loopback (#400)

2026-10-07 15:10:52 +08:00

btop.nix

feat(monitoring): GPU-aware btop variants and GPU metrics (#330)

2026-09-30 00:16:50 +08:00

btrbk.nix

docs: refresh stale docs after the VM and backup refactors

2026-09-21 22:03:21 +08:00

core.nix

chore: power management

2025-08-19 23:56:19 +08:00

default.nix

chore(hardening): consolidate system hardening and fix stale docs (#368)

2026-10-03 17:11:51 +08:00

i18n.nix

chore(i18n): keep only China-specific locale overrides

2026-09-19 16:15:35 +08:00

locate.nix

refactor: scope host tools, locate and mDNS by purpose (#356)

2026-10-03 10:23:21 +08:00

monitoring.nix

security(monitoring): bind exporters to static LAN addresses (#373)

2026-10-03 19:07:21 +08:00

nix.nix

chore: small audit cleanups (#357)

2026-10-03 10:32:08 +08:00

packages.nix

refactor: scope host tools, locate and mDNS by purpose (#356)

2026-10-03 10:23:21 +08:00

restic-backup.nix

fix(restic): use the correct systemd timer option names (#319)

2026-09-25 20:39:59 +08:00

ssh.nix

fix(ssh): make sandboxed ssh work on Linux (#390)

2026-10-06 15:20:53 +08:00

trash.nix

fix(trash): persist the cleanup timer

2026-09-19 12:11:18 +08:00

user-group.nix

security: scope privileges and stop a world-readable secret copy (#335)

2026-10-01 21:18:34 +08:00

zram.nix

fix(nixos): gate zram kernel sysctl tunings behind modules.zram.enable

2026-08-29 11:16:12 +08:00