nixOS/modules
Sergei Poljanski 554487a136
hostel-wifi: hardened profile for untrusted networks (disabled by default)
Add modules/hostel-wifi.nix: per-SSID MAC randomization (iwd), disable
mDNS/LLMNR/NetBIOS, reject hostile IPv6 RAs, firewall LAN-side probing,
an nftables killswitch target allowing only tunnel egress + captive-portal
endpoints, NTS-secured time via chrony, and a captive-portal helper.
Import left commented out; toggle via 'untrusted on|off'.
2026-06-02 14:07:38 +03:00
..
private ThinkPad T14 G2 AMD -> P14s G6 AMD 2026-05-07 17:55:07 +03:00
boot.nix arch linux systemd-boot+secure boot signing 2026-03-19 17:57:28 +02:00
desktop.nix power: stabilize suspend-then-hibernate on P14s G6 AMD 2026-06-02 14:07:07 +03:00
gaming.nix gaming: declarative Flatpak via nix-flatpak (Bolt, Sober), Heroic + Proton-GE 2026-06-02 14:06:24 +03:00
hostel-wifi.nix hostel-wifi: hardened profile for untrusted networks (disabled by default) 2026-06-02 14:07:38 +03:00
locale.nix timezones now managed by GNOME 2026-03-19 19:14:48 +03:00
networking.nix added WiFi 6 support 2026-05-10 01:58:13 +03:00
ollama.nix ollama: local LLM serving with ROCm on Krackan Point (gfx1151) 2026-06-02 14:07:29 +03:00
packages.nix id-card: enable Estonian eID smart card stack 2026-06-02 14:07:00 +03:00
power.nix power: stabilize suspend-then-hibernate on P14s G6 AMD 2026-06-02 14:07:07 +03:00
programs.nix ThinkPad T14 G2 AMD -> P14s G6 AMD 2026-05-07 17:55:07 +03:00
security.nix ThinkPad T14 G2 AMD -> P14s G6 AMD 2026-05-07 17:55:07 +03:00
shell.nix claude-code-nix deletion 2026-01-13 09:28:01 +02:00
users.nix Xray + system-wide proxy config. Fuck Turkey DPI :3 2026-04-06 01:56:55 +03:00
wireguard.nix ThinkPad T14 G2 AMD -> P14s G6 AMD 2026-05-07 17:55:07 +03:00
xray.nix id-card: enable Estonian eID smart card stack 2026-06-02 14:07:00 +03:00