Commit graph

20 commits

Author SHA1 Message Date
s0me1newithhand7s
434e973355 kyra(hardening): no plain "dns" options
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:06:55 +03:00
s0me1newithhand7s
3577ca0a6e kyra(hardening): persistance in fileSystems
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:06:55 +03:00
s0me1newithhand7s
90a01233ee kyra(hardening): making nix less bloated with substituters
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:06:51 +03:00
s0me1newithhand7s
0ae9f9d2f7 kyra(hardening): getting rid of home-manager
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
84c42d92f8 kyra(hardening): getting rid of packages in systemPackages
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
78a98e891e kyra(hardening): Impermanence in "/persist"
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
df80d3a16a kyra(hardening): hardened malloc init
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
0998e016cd kyra(hardening): using nixos-containers for mihomo core
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
d10e04e07c kyra(hardening): tmpfs rootfs init
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
fbe9a78856 kyra(hardening): disko LVM subvolume prepare for Impermanence
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
72def65f54 kyra(hardening): ESP 1G->128M, LUKS2 volume and options hadrening
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
14eea58fbb kyra(hardening): tmp hardening
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
6bcb4f2778 kyra(hardening): initrd re-init; systemd, ssh, luks, networkd in initrd
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
99f0086358 kyra(hadrdening): kernel hardening (kernel, params, modules, sysctls)
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
ff6458ec57 kyra(hardening): now using liminie as boot loader
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
s0me1newithhand7s
92809fec65 kyra(hardening): initrd/ deleted
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-05-03 16:05:49 +03:00
ArisoN
68c878a29e Add yandex mirror nixpkgs 2026-03-31 17:21:00 +03:00
s0me1newithhand7s
ce59b6ed9c kyra: upstream
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-03-25 18:50:44 +03:00
s0me1newithhand7s
c5f949506a staging(no atomic commits thank to git-hooks)
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-03-25 17:56:18 +03:00
s0me1newithhand7s
91d145fc9b s0mev1rtn0de-nix -> kyra + {hazel, lynn, ivy, mel}: rename + modularity
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
2026-02-08 22:53:20 +03:00