aaron/nixconfig
1
1
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity
387 Commits 76 Branches 0 Tags
main
Commit Graph
387 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
aaron f54798a8be Merge pull request 'fix(certificates): temporarily distrust emSign ECC Root CA - G3' (#111) from fix/distrust-emudhra-ecc-root into main 
Reviewed-on: #111
 2026-10-21 14:02:23 +02:00
aaronandClaude Opus 5.5 5b38fc4155 fix(certificates): temporarily distrust emSign ECC Root CA - G3 
Eight eMudhra intermediates chaining to this root were generated with
trivially recoverable private keys (Mozilla bug 2083449), so anyone can
mint certificates that non-browser clients using the system bundle will
accept. Browsers already block them; the system bundle does not until
cacert 3.131.1 (nixpkgs f903b88), which has not reached nixos-unstable
yet. Drop this once the flake lock includes that commit.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-21 13:39:53 +02:00
aaron 6c1c4403c2 Merge pull request 'fix(tailscale): open Tailscale's WireGuard port in the firewall' (#109) from fix/tailscale-open-firewall into main 
Reviewed-on: #109
 2026-10-20 12:50:24 +02:00
aaronandClaude Opus 5.5 fb3e2864d6 fix(tailscale): open Tailscale's WireGuard port in the firewall 
services.tailscale.openFirewall defaults to false while the NixOS
firewall is enabled, so argon, krypton and neon dropped unsolicited
inbound 41641/udp. Direct connections then only succeed if the other
peer accepts inbound; between two of these hosts (or a host and a
phone) traffic can fall back to a DERP relay.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
 2026-10-20 12:48:41 +02:00
aaron 8701507742 Merge pull request 'feature(git): enable git lfs for my user' (#108) from feature/add_tea into main 
Reviewed-on: #108
 2026-10-18 14:43:17 +02:00
aaron c748f22033 feature(git): enable git lfs for my user 2026-10-18 14:42:07 +02:00
aaron a9e17a8c35 Merge pull request 'feature(programs): add the tea binary to my user to communicate with my gitea server' (#107) from feature/add_tea into main 
Reviewed-on: #107
 2026-10-18 14:16:55 +02:00
aaron 69adfc9890 feature(programs): add the tea binary to my user to communicate with my gitea server 2026-10-18 14:15:52 +02:00
aaron c9c15addcc Merge pull request 'feature(argon): add rootless docker to argon' (#106) from feature/docker_on_argon into main 
Reviewed-on: #106
 2026-10-16 20:14:45 +02:00
aaron abe6fd5c18 feature(argon): add rootless docker to argon 2026-10-16 20:06:09 +02:00
aaron 49a8b574bf Merge pull request 'feature: add de_nodeadkeys to niri-greet as well' (#105) from feature/nodeadkeys into main 
Reviewed-on: #105
 2026-10-15 21:00:16 +02:00
aaron b07d8aefa4 feature: add de_nodeadkeys to niri-greet as well 2026-10-15 20:59:52 +02:00
aaron ff7b34fedd Merge pull request 'feature(niri): change keyboard layout to the nondeadkeys variant' (#104) from feature/nodeadkeys into main 
Reviewed-on: #104
 2026-10-15 18:47:29 +02:00
aaron 1030fdfd8f fix(niri): add correct nodeadkeys designator 2026-10-15 16:31:29 +02:00
aaron 186c3e971d feature(niri): change keyboard layout to the nondeadkeys variant 2026-10-14 09:40:30 +02:00
aaron 1e6d041c45 Merge pull request 'feature(greetd): add noctalia-greeter to greetd' (#103) from feature/noctialia-greeter into main 
Reviewed-on: #103
 2026-10-14 09:20:22 +02:00
aaron 75f7acbf2e feature(greetd): add noctalia-greeter to greetd 2026-10-14 09:19:40 +02:00
aaron 414f579ccf Merge pull request 'feature: use the local log driver insteald of journald for rootless docker' (#102) from feature/rootless_docker into main 
Reviewed-on: #102
 2026-10-12 19:22:42 +02:00
aaron 104e0a7cb3 feature: use the local log driver insteald of journald for rootless docker 2026-10-12 19:15:51 +02:00
aaron 3418b08772 Merge pull request 'chore: update nix flakes' (#101) from chore/update into main 
Reviewed-on: #101
 2026-10-12 18:24:46 +02:00
aaron a8aefcbfdd chore: update nix flakes 2026-10-12 18:10:15 +02:00
aaron 653e56f40c Merge pull request 'fix: remove contact_shadow between bar and attached panels' (#100) from fix/contact_shadow into main 
Reviewed-on: #100
 2026-10-10 20:52:23 +02:00
aaron 74b64368aa fix: remove contact_shadow between bar and attached panels 2026-10-10 20:50:40 +02:00
aaron 1883b6cb05 Merge pull request 'feature(docker): make changes to the rootless docker setup to support the netgame webapp which relies on k3d and traefik' (#99) from feature/rootless_docker_improvements into main 
Reviewed-on: #99
 2026-10-07 16:08:46 +02:00
aaron e9b3e5961c feature(docker): make changes to the rootless docker setup to support the netgame webapp which relies on k3d and traefik 2026-10-07 16:05:46 +02:00
aaron 3b961d447b Merge pull request 'chore: update nix flakes' (#98) from chore/update into main 
Reviewed-on: #98
 2026-10-06 17:39:53 +02:00
aaron edcc71b435 chore: update nix flakes 2026-10-06 17:39:33 +02:00
aaron 88aeea31f8 Merge pull request 'feature(theme): replace all color theme configs with stylix' (#97) from feature/add_stylix into main 
Reviewed-on: #97
 2026-10-06 17:32:26 +02:00
aaron 8f86bcb365 refactor(nixvim): change back mini.base16 to dedicated nord theme plugin 2026-10-05 21:23:51 +02:00
aaron 2b55ec9873 feature(theme): replace all color theme configs with stylix 2026-10-05 12:39:24 +02:00
aaron 6a5eaca649 Merge pull request 'feature(git): add kryptons ssh key as signing key' (#96) from feature/add_krypton_sk into main 
Reviewed-on: #96
 2026-10-04 14:43:27 +02:00
aaron 4409e2a9e6 feature(git): add kryptons ssh key as signing key 2026-10-04 14:43:11 +02:00
aaron 441d954b85 Merge pull request 'feature(software): add signal-desktop electron app' (#95) from feature/add_signal into main 
Reviewed-on: #95
 2026-10-04 10:56:43 +02:00
aaron e602ba9df1 feature(software): add signal-desktop electron app 2026-10-04 10:29:30 +02:00
aaron 863c496400 chore: update installation guide 2026-10-03 22:49:18 +02:00
aaron 20bf806666 Merge pull request 'feature(boot): add secure-boot and tpm-unlock to neon' (#94) from feature/neon_secureboot into main 
Reviewed-on: #94
 2026-10-03 16:22:29 +02:00
aaron e35311dfd5 chore: update installation guide with secure-boot setup pitfalls 2026-10-03 16:21:54 +02:00
aaron beb520a615 feature(boot): add secure-boot support and tpm-unlock to neon 2026-10-03 15:55:36 +02:00
aaron 4eb3e27f8b Merge pull request 'feature(boot): add secure-boot support and tpm-unlock to argon' (#93) from feature/argon_secureboot into main 
Reviewed-on: #93
 2026-10-03 15:48:06 +02:00
aaron 8c56b00247 feature(boot): add secure-boot support and tpm-unlock to argon 2026-10-03 15:07:13 +02:00
aaron ff2e4d2f69 Merge pull request 'fix: do not allow edits to the bootloader' (#92) from feature/bootloader_security into main 
Reviewed-on: #92
 2026-10-03 14:11:56 +02:00
aaron 318e17ac27 fix: do not allow edits to the bootloader 2026-10-03 14:11:29 +02:00
aaron c66549f3bf Merge pull request 'feature(hidpi): adapt sddm and systemd-boot to hidpi display' (#91) from feature/krypton_hidpi into main 
Reviewed-on: #91
 2026-10-03 13:44:31 +02:00
aaron 620c415be9 fix: adapt systemd-boot for kryptons hidpi screen by using the right console mode 2026-10-03 13:39:35 +02:00
aaron 472f359f80 fix: adapt kryptons sddm for hidpi using the qt scale factor 2026-10-03 13:35:50 +02:00
aaron ad494d1209 Merge pull request 'feature(boot): add luks unlock method using TPM+PIN' (#90) from feature/tpm_unlock into main 
Reviewed-on: #90
 2026-10-03 13:28:35 +02:00
aaron d26bd424cc feature(boot): add luks unlock method using TPM+PIN 2026-10-03 13:25:18 +02:00
aaron a7bba82b5b Merge pull request 'feature(lanzaboote): add support for secure-boot through lanazaboote' (#88) from feature/secure_boot into main 
Reviewed-on: #88
 2026-10-03 12:48:11 +02:00
aaron a5e69c043d chore: update installation guide with secure-boot setup 2026-10-03 12:47:27 +02:00
aaron b2a2e7d161 Merge remote-tracking branch 'origin/main' into feature/secure_boot 2026-10-03 11:41:27 +02:00