aaronandClaude Opus 5.5
5b38fc4155
Eight eMudhra intermediates chaining to this root were generated with trivially recoverable private keys (Mozilla bug 2083449), so anyone can mint certificates that non-browser clients using the system bundle will accept. Browsers already block them; the system bundle does not until cacert 3.131.1 (nixpkgs f903b88), which has not reached nixos-unstable yet. Drop this once the flake lock includes that commit. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
NixOS config
My personal NixOS configurations.
config structure
.
├── flake.nix # hosts and home-manager wiring
├── hosts
│ ├── argon # desktop
│ ├── neon # laptop
│ └── krypton # second laptop
│ ├── configuration.nix # host-specific settings and module imports
│ ├── hardware-configuration.nix # generated by nixos-generate-config
│ └── niri.nix # host-specific niri settings (outputs, input)
├── modules
│ ├── home-manager # user modules, imported by users/aaron/home.nix
│ └── nixos # system modules, imported by the hosts
└── users
└── aaron
└── home.nix # imports home-manager modules
installation
For more details about the installation procedure see: INSTALLATION.md
author
aaron aaron@0x29a.ch