Commit graph

120 commits

Author SHA1 Message Date
randogoth
1565c4cb5c networking: loose reverse-path filtering for tailscale exit nodes
Strict RPF (NixOS default) drops the encrypted return traffic of an active
exit node: table 52's 'default dev tailscale0' makes the reverse-path lookup
for packets arriving on the physical interface resolve to tailscale0, so they
are dropped before Tailscale decrypts them (rx stays 0). Loose RPF still blocks
spoofed/unroutable sources but removes the interface-match requirement, as
recommended by Tailscale/NixOS for exit nodes and subnet routers.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-21 19:30:08 +02:00
randogoth
b7bb444f3d fix(shell): let bash-preexec install last so atuin preexec fires
Eagerly calling __bp_install at source time made bash-preexec install
before starship/atuin/zoxide/ghostty modified PROMPT_COMMAND, so their
hooks landed after __bp_interactive_mode. bash-preexec then never marked
typed commands as interactive and skipped preexec_functions, so atuin's
__atuin_preexec never fired and history stopped recording
(ATUIN_PREEXEC_BACKEND stuck at "<shlvl>:none").

Remove the eager __bp_install and the manual PROMPT_COMMAND/array wiring
for starship, atuin and zoxide; each tool registers with bash-preexec
itself, and deferred install on the first prompt keeps
__bp_interactive_mode last (verified against bash-preexec 0.6.0).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-11 16:13:30 +03:00
randogoth
4c6a0d4b28 fixed config 2026-02-17 07:53:25 +02:00
randogoth
0014de7d62 config fix 2026-02-17 07:38:29 +02:00
randogoth
22b3678464 appimage support 2026-02-17 07:37:02 +02:00
randogoth
cd9198ee46 flatpak: wait for network-online before managed install 2026-02-14 17:45:42 +02:00
randogoth
72e00c28e1 impermanence: persist NetworkManager system connections 2026-02-14 17:37:25 +02:00
randogoth
a6ad0f3ad9 impermanence: drop /etc/cups persistence 2026-02-14 17:31:43 +02:00
randogoth
dc04bcf008 fix impermanence rollback and add persistent paths 2026-02-14 17:28:34 +02:00
randogoth
60b0b4e88e NUR integration 2026-02-12 07:39:10 +02:00
randogoth
a69ade9f8b nix-ld 2026-02-11 11:43:28 +02:00
randogoth
c1e0c65cf0 better manage recipe 2026-02-11 11:02:43 +02:00
randogoth
018a036601 renamed files, boot splash 2026-02-11 09:30:19 +02:00
randogoth
bd9bbd152b status tray 2026-02-10 22:23:41 +02:00
randogoth
ac83f87c02 impernanence optional 2026-02-10 09:34:51 +02:00
randogoth
99d9f457d3 rootless podman 2026-02-10 09:25:23 +02:00
randogoth
1795a4a275 impermanence 2026-02-10 09:25:12 +02:00
randogoth
9205ec2d23 fix 2026-02-10 08:34:43 +02:00
randogoth
816dd2b076 fix 2026-02-10 08:32:23 +02:00
randogoth
569ee67806 uppercase 2026-02-10 08:28:11 +02:00
randogoth
de1431d175 tailscale 2026-02-10 08:27:59 +02:00
randogoth
9b787bc3bd latest kernel 2026-02-10 08:13:46 +02:00
randogoth
f1dd8542eb syntax error fix 2026-02-10 07:51:35 +02:00
randogoth
ab0257fd6e pipewire 2026-02-10 07:42:16 +02:00
randogoth
7486210605 bazaar search 2026-02-09 22:52:39 +02:00
randogoth
b0d8925248 software center removed, bazaar nixpkg 2026-02-09 22:49:26 +02:00
randogoth
fd5649b672 gnome: show minimize/maximize buttons 2026-02-09 22:41:17 +02:00
randogoth
51a3efc940 ptyxis as thunar terminal 2026-02-09 21:51:26 +02:00
randogoth
8df97b9dee gtk file chooser 2026-02-09 21:40:30 +02:00
randogoth
9de49aef25 set default portal to gnome 2026-02-09 21:34:16 +02:00
randogoth
fe46738484 portal fix 2026-02-09 21:12:05 +02:00
randogoth
715a087d67 removed fingerprint sensor 2026-02-09 20:45:08 +02:00
randogoth
f173501bab fix 2026-02-09 20:40:33 +02:00
randogoth
6e834ed5a3 fingerprint sensors 2026-02-09 20:38:05 +02:00
randogoth
7a1a5d36e6 Merge branch 'main' of ssh://codeberg.org/randogoth/nanuqsaurus 2026-02-09 20:16:44 +02:00
randogoth
078c90c462 hm fixes 2026-02-09 20:15:44 +02:00
randogoth
2273c9f09a saner homefile 2026-02-09 18:39:59 +01:00
randogoth
f03ae10ccb removed forced timezone 2026-02-09 18:39:21 +01:00
randogoth
c754230d3f no clobber 2026-02-05 10:20:49 +02:00
randogoth
6978685fd0 fix 2026-02-05 10:17:02 +02:00
randogoth
2a5cdbf8e9 fixed global justfile 2026-02-05 10:13:27 +02:00
randogoth
9bf7ae2497 fixes 2026-02-05 09:54:09 +02:00
randogoth
b2fde7c5c2 feat(home-manager): enable xdg user dirs in template 2026-02-05 09:52:00 +02:00
randogoth
1cabb64b8a fix(just): set JUSTFILE to global justfile 2026-02-05 09:44:26 +02:00
randogoth
ddf31b7f94 feat(xdg): enable user dirs system-wide 2026-02-05 09:26:20 +02:00
randogoth
bab9f550be fix(just): escape bash parameter expansion in global justfile 2026-02-05 09:22:05 +02:00
randogoth
4ec6a6b6a8 feat(just): add init-home recipe 2026-02-05 09:19:35 +02:00
randogoth
cbb4ee8993 chore(fonts): keep only adwaita and nerdfonts 2026-02-05 09:19:29 +02:00
randogoth
28185d8871 feat: make flox opt-in 2026-02-05 09:05:10 +02:00
randogoth
ef0ac415cd docs(adopt): use nanuqsaurus as config name 2026-02-05 08:18:06 +02:00