asxpi/nixOS
asxpi/nixOS
1
0
Fork 0
Code Issues Pull requests Activity
My nixOS config
45 commits 1 branch 0 tags 261 KiB
  • Nix 100%
Find a file
Sergei Poljanski 554487a136
 hostel-wifi: hardened profile for untrusted networks (disabled by default) 
Add modules/hostel-wifi.nix: per-SSID MAC randomization (iwd), disable
mDNS/LLMNR/NetBIOS, reject hostile IPv6 RAs, firewall LAN-side probing,
an nftables killswitch target allowing only tunnel egress + captive-portal
endpoints, NTS-secured time via chrony, and a captive-portal helper.
Import left commented out; toggle via 'untrusted on|off'.
2026-06-02 14:07:38 +03:00
modules hostel-wifi: hardened profile for untrusted networks (disabled by default) 2026-06-02 14:07:38 +03:00
.gitignore ThinkPad T14 G2 AMD -> P14s G6 AMD 2026-05-07 17:55:07 +03:00
configuration.nix hostel-wifi: hardened profile for untrusted networks (disabled by default) 2026-06-02 14:07:38 +03:00
flake.lock gaming: declarative Flatpak via nix-flatpak (Bolt, Sober), Heroic + Proton-GE 2026-06-02 14:06:24 +03:00
flake.nix gaming: declarative Flatpak via nix-flatpak (Bolt, Sober), Heroic + Proton-GE 2026-06-02 14:06:24 +03:00
hardware-configuration.nix ThinkPad T14 G2 AMD -> P14s G6 AMD 2026-05-07 17:55:07 +03:00
README.md steam, dev tools 2025-12-25 13:10:44 +02:00

README.md

NixOS

TODO

  • Add secret manager (sops-nix)
  • Check nix Home manager