Commit graph

78 commits

Author SHA1 Message Date
randogoth
1565c4cb5c networking: loose reverse-path filtering for tailscale exit nodes
Strict RPF (NixOS default) drops the encrypted return traffic of an active
exit node: table 52's 'default dev tailscale0' makes the reverse-path lookup
for packets arriving on the physical interface resolve to tailscale0, so they
are dropped before Tailscale decrypts them (rx stays 0). Loose RPF still blocks
spoofed/unroutable sources but removes the interface-match requirement, as
recommended by Tailscale/NixOS for exit nodes and subnet routers.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-21 19:30:08 +02:00
randogoth
4c6a0d4b28 fixed config 2026-02-17 07:53:25 +02:00
randogoth
0014de7d62 config fix 2026-02-17 07:38:29 +02:00
randogoth
22b3678464 appimage support 2026-02-17 07:37:02 +02:00
randogoth
cd9198ee46 flatpak: wait for network-online before managed install 2026-02-14 17:45:42 +02:00
randogoth
72e00c28e1 impermanence: persist NetworkManager system connections 2026-02-14 17:37:25 +02:00
randogoth
a6ad0f3ad9 impermanence: drop /etc/cups persistence 2026-02-14 17:31:43 +02:00
randogoth
dc04bcf008 fix impermanence rollback and add persistent paths 2026-02-14 17:28:34 +02:00
randogoth
60b0b4e88e NUR integration 2026-02-12 07:39:10 +02:00
randogoth
a69ade9f8b nix-ld 2026-02-11 11:43:28 +02:00
randogoth
c1e0c65cf0 better manage recipe 2026-02-11 11:02:43 +02:00
randogoth
018a036601 renamed files, boot splash 2026-02-11 09:30:19 +02:00
randogoth
bd9bbd152b status tray 2026-02-10 22:23:41 +02:00
randogoth
ac83f87c02 impernanence optional 2026-02-10 09:34:51 +02:00
randogoth
99d9f457d3 rootless podman 2026-02-10 09:25:23 +02:00
randogoth
1795a4a275 impermanence 2026-02-10 09:25:12 +02:00
randogoth
9205ec2d23 fix 2026-02-10 08:34:43 +02:00
randogoth
816dd2b076 fix 2026-02-10 08:32:23 +02:00
randogoth
de1431d175 tailscale 2026-02-10 08:27:59 +02:00
randogoth
9b787bc3bd latest kernel 2026-02-10 08:13:46 +02:00
randogoth
f1dd8542eb syntax error fix 2026-02-10 07:51:35 +02:00
randogoth
ab0257fd6e pipewire 2026-02-10 07:42:16 +02:00
randogoth
7486210605 bazaar search 2026-02-09 22:52:39 +02:00
randogoth
b0d8925248 software center removed, bazaar nixpkg 2026-02-09 22:49:26 +02:00
randogoth
fd5649b672 gnome: show minimize/maximize buttons 2026-02-09 22:41:17 +02:00
randogoth
51a3efc940 ptyxis as thunar terminal 2026-02-09 21:51:26 +02:00
randogoth
8df97b9dee gtk file chooser 2026-02-09 21:40:30 +02:00
randogoth
9de49aef25 set default portal to gnome 2026-02-09 21:34:16 +02:00
randogoth
fe46738484 portal fix 2026-02-09 21:12:05 +02:00
randogoth
715a087d67 removed fingerprint sensor 2026-02-09 20:45:08 +02:00
randogoth
f173501bab fix 2026-02-09 20:40:33 +02:00
randogoth
6e834ed5a3 fingerprint sensors 2026-02-09 20:38:05 +02:00
randogoth
f03ae10ccb removed forced timezone 2026-02-09 18:39:21 +01:00
randogoth
6978685fd0 fix 2026-02-05 10:17:02 +02:00
randogoth
2a5cdbf8e9 fixed global justfile 2026-02-05 10:13:27 +02:00
randogoth
9bf7ae2497 fixes 2026-02-05 09:54:09 +02:00
randogoth
1cabb64b8a fix(just): set JUSTFILE to global justfile 2026-02-05 09:44:26 +02:00
randogoth
ddf31b7f94 feat(xdg): enable user dirs system-wide 2026-02-05 09:26:20 +02:00
randogoth
bab9f550be fix(just): escape bash parameter expansion in global justfile 2026-02-05 09:22:05 +02:00
randogoth
4ec6a6b6a8 feat(just): add init-home recipe 2026-02-05 09:19:35 +02:00
randogoth
cbb4ee8993 chore(fonts): keep only adwaita and nerdfonts 2026-02-05 09:19:29 +02:00
randogoth
28185d8871 feat: make flox opt-in 2026-02-05 09:05:10 +02:00
randogoth
94ae481a76 feat(flox): add flox cache substituter 2026-02-05 08:02:42 +02:00
randogoth
3ef51393fb fix 2026-02-05 07:48:25 +02:00
randogoth
6dd1207628 global justfile 2026-02-05 07:47:09 +02:00
randogoth
3018fb4e3b default logo menu logo 2026-02-05 07:41:05 +02:00
randogoth
2f8f5e340b chore(terminal): switch default terminal to ptyxis 2026-02-04 22:12:07 +02:00
randogoth
a59facdb0a Revert "fix(ghostty): add cairo wrapper and make it the default terminal"
This reverts commit 2e58a2d4ad.
2026-02-04 21:55:34 +02:00
randogoth
2e58a2d4ad fix(ghostty): add cairo wrapper and make it the default terminal 2026-02-04 21:51:25 +02:00
randogoth
8f342c6c27 fix(profile): remove need for specialArgs inputs 2026-02-04 21:06:58 +02:00