9a9e9dc13e
readme: add Assisted-by
2026-07-14 12:44:17 +04:00
d8ee05c70e
flake: bump nixpkgs (2026-06-16 -> 2026-07-11)
2026-07-14 12:27:56 +04:00
c6258a77e4
ssh: private host aliases via sops-provisioned include
2026-07-14 12:24:34 +04:00
45d23c5875
wireguard: wg0/wg2 configs from sops
2026-07-14 12:24:33 +04:00
8458e0645d
xray: config via sops, private routes spliced into sing-box at runtime
2026-07-14 12:24:33 +04:00
a7ec82579c
sops: introduce sops-nix (age), ssh keys from encrypted tarball, .example secrets
2026-07-14 12:24:21 +04:00
8be13b680f
litecoin: install desktop entry and icon for litecoin-qt
2026-07-11 22:36:01 +04:00
8ee7f83377
gaming: enable gamescope
2026-07-11 22:36:01 +04:00
2eb1008ec0
power: zram swap ahead of disk swapfile for large model loads
2026-07-11 22:36:01 +04:00
22746bcc25
ollama: model store to /mnt/data, gfx1151 rocBLAS workaround, load tuning
2026-07-11 22:36:00 +04:00
8d823f4da2
lemonade: XDNA2 NPU LLM serving via nix-amd-ai
2026-07-11 22:36:00 +04:00
fb5770d1ce
boot: kernel 7.x for FLM NPU firmware, raise amdgpu GTT to 56 GiB
2026-07-11 22:35:57 +04:00
584f67273f
flake: track lanzaboote master, bump inputs
2026-06-29 05:14:13 +03:00
a9948a39f4
packages: nodejs_20 -> nodejs_22
2026-06-29 05:13:59 +03:00
9e6122428c
networking: drop wwan-autoconnect, let NetworkManager manage modem
2026-06-29 05:13:42 +03:00
17066b5842
litecoin: vendored Litecoin Core 0.21.5.5 (MWEB)
2026-06-29 05:12:24 +03:00
8066567957
packages: add rclone
...
Cloud-storage sync CLI (Google Drive, S3, etc.).
2026-06-02 14:07:44 +03:00
554487a136
hostel-wifi: hardened profile for untrusted networks (disabled by default)
...
Add modules/hostel-wifi.nix: per-SSID MAC randomization (iwd), disable
mDNS/LLMNR/NetBIOS, reject hostile IPv6 RAs, firewall LAN-side probing,
an nftables killswitch target allowing only tunnel egress + captive-portal
endpoints, NTS-secured time via chrony, and a captive-portal helper.
Import left commented out; toggle via 'untrusted on|off'.
2026-06-02 14:07:38 +03:00
f31ecbf6e6
ollama: local LLM serving with ROCm on Krackan Point (gfx1151)
...
Enable ollama-rocm bound to 127.0.0.1:11434 with gfx1151 (RDNA 3.5)
overrides, flash attention, q8_0 KV cache, and preload qwen3:14b.
2026-06-02 14:07:29 +03:00
a72fb75811
power: stabilize suspend-then-hibernate on P14s G6 AMD
...
acpi.ec_no_wakeup=1 stops EC interrupts from thrashing s2idle, and a
dconf system-db override disables gsd-power's sleep handlers so logind
owns all sleep/idle policy (gsd was re-waking before HibernateDelaySec).
Split lid/suspend policy by power source (s-t-h on battery, plain suspend
on AC), map power key to hibernate, drop HibernateDelaySec to 15min while
re-validating thermals, and disable USB-device wakeup via udev.
2026-06-02 14:07:07 +03:00
97d2fd6096
id-card: enable Estonian eID smart card stack
...
Add opensc (PKCS#11) and pcsc-tools, enable pcscd, and add a udev rule
granting access to the built-in reader (2ce3:9563), which the shipped
CCID rules miss (pcscd hit LIBUSB_ERROR_ACCESS). Configure Firefox to
load the OpenSC PKCS#11 module for TLS client-cert auth and force-install
the Web eID extension.
2026-06-02 14:07:00 +03:00
cfbb434bd4
gaming: declarative Flatpak via nix-flatpak (Bolt, Sober), Heroic + Proton-GE
...
Add nix-flatpak flake input and modules/gaming.nix managing Flatpak
remotes/packages declaratively: Bolt (Jagex launcher for RS3/OSRS) and
Sober (Roblox). Add Heroic and hyperplay-ext, plus Proton-GE for Steam.
Drops the old imperative runescape-launcher.
2026-06-02 14:06:24 +03:00
7831b97ce5
added WiFi 6 support
2026-05-10 01:58:13 +03:00
5fbe4e306f
ThinkPad T14 G2 AMD -> P14s G6 AMD
2026-05-07 17:55:07 +03:00
41a4fa9eb2
tun2socks -> sing-box TUN + encrypted DNS via DoH
2026-04-06 03:15:56 +03:00
6777a7652f
ssh: bypass tun2socks via direct SOCKS5 to fix post-quantum kex issue
2026-04-06 02:35:19 +03:00
e5f7125731
tun2socks: replace per-app proxy hacks with transparent tunnel for all traffic
2026-04-06 02:11:52 +03:00
313cac929e
Fuck Turkey Government Again :3 Added SSH workaround
2026-04-06 02:02:27 +03:00
f616fe50cc
Xray + system-wide proxy config. Fuck Turkey DPI :3
2026-04-06 01:56:55 +03:00
004528e19b
bluetooth doesnt turn off on sleep cycle
2026-04-05 21:32:41 +03:00
24a05b0f5b
packer + talosctl
2026-03-20 20:25:17 +03:00
45ab7efecf
powersave config
2026-03-20 20:18:05 +03:00
0dfbcc3326
timezones now managed by GNOME
2026-03-19 19:14:48 +03:00
a7a7111c76
delete litecoin
2026-03-19 18:08:48 +02:00
2d32398423
+obs -argocd
2026-03-19 17:58:12 +02:00
faf0174638
arch linux systemd-boot+secure boot signing
2026-03-19 17:57:28 +02:00
cdfcd1804f
volumes automount
2026-03-19 09:22:25 +02:00
5e63b3a88e
litecoin core
2026-03-15 19:07:34 +02:00
ec89f1d0ce
nix ld
2026-01-31 06:11:32 +02:00
ffa1020db2
gh
2026-01-31 06:11:32 +02:00
8c5c54c797
turn off usbguard
2026-01-31 06:11:31 +02:00
306c51900e
podman and opensnitch
2026-01-31 06:11:31 +02:00
23ca86c7d5
docker -> podman
2026-01-13 10:38:35 +02:00
e40b653858
claude-code-nix deletion
2026-01-13 09:28:01 +02:00
82ce7186fd
lanzaboote + secure boot
2026-01-13 09:01:40 +02:00
7f68764d33
hardened kernel + usbguard
2026-01-13 07:58:30 +02:00
5cbce68d88
hardening
2026-01-13 07:07:17 +02:00
25c3e2ece8
tools, games
2026-01-13 06:30:10 +02:00
f567476485
fw
2026-01-13 06:28:37 +02:00
916853d2ba
path for non declarative npm packages
2025-12-27 15:19:50 +02:00
