Ryan Yin b24f30c38c fix(shoukei): route DNS through the mihomo TUN ...

Assisted-by: DeepSeek Harness (gpt-6-astra)

2026-10-14 18:34:48 +08:00

..

btrbk

feat(btrbk): make snapshots explicit, guarded, and stored in @snapshots (#271)

2026-09-19 11:43:11 +08:00

home-manager

feat(noctalia): upgrade to the native v5 shell

2026-09-19 15:07:54 +08:00

hostname

feat: replace waybar/mako/anyrun/wlogout/swaylock with noctolia-shell, remove hyprland (#240)

2026-01-03 09:36:54 -06:00

kernel

feat: format via 'ls **/*.nix | each { |it| nixfmt $it.name }'

2025-07-30 12:17:24 +08:00

mihomo-dns

fix(shoukei): route DNS through the mihomo TUN

2026-10-14 18:34:48 +08:00

nix-system-features

fix(nix): preserve default sandbox shell

2026-07-06 23:04:16 +08:00

security-apparmor

security: hardening pass 1 (AppArmor, firewall default, loopback metrics, k3s perms, SSH X11) (#266)

2026-08-27 00:13:01 +08:00

security-container-groups

security: scope privileges and stop a world-readable secret copy (#335)

2026-10-01 21:18:34 +08:00

security-exporters

feat(security): add balanced kernel and exporter baseline (#365)

2026-10-03 16:33:50 +08:00

security-firewall

feat(nixos): default-deny host inbound, trust the LAN/tailnet (#325)

2026-09-26 14:02:03 +08:00

security-k3s-kubeconfig

security: hardening pass 1 (AppArmor, firewall default, loopback metrics, k3s perms, SSH X11) (#266)

2026-08-27 00:13:01 +08:00

security-kernel

feat(security): add balanced kernel and exporter baseline (#365)

2026-10-03 16:33:50 +08:00

security-ssh-x11

fix(security): tighten desktop remote access

2026-09-01 20:20:51 +08:00

shoukei-logind

fix: use valid shoukei logind keys

2026-09-03 23:26:03 +08:00