Michael Mandl
5f042f8e1d
feat(xps): allow rootless port 80/443 and trust local proxy CA ...
Companion to the home-manager Caddy reverse proxy: lowers
net.ipv4.ip_unprivileged_port_start to 80 so the rootless user Caddy
service can bind bare *.localhost hostnames, and trusts Caddy's
generated local root CA system-wide for TLS-served hosts (e.g.
litellm.localhost).
The CA cert is a static copy of Caddy's generated root (Nix's sandbox
can't read live paths under $HOME at eval time); re-copy if Caddy's
local PKI is ever regenerated.
2026-07-19 12:16:48 +02:00
feat(xps): allow rootless port 80/443 and trust local proxy CA
2026-07-19 12:16:48 +02:00
fix(ivan): fix ZFS hostId handling, add forceImportAll
2026-03-29 18:07:36 +02:00
feat(xps): allow rootless port 80/443 and trust local proxy CA
2026-07-19 12:16:48 +02:00
chore: update
2026-05-26 07:47:45 +02:00
chore: untrack result build symlink and gitignore it
2026-06-14 17:43:39 +02:00
docs: update AGENTS.md accuracy and add CLAUDE.md
2026-03-11 21:22:05 +01:00
docs: update AGENTS.md accuracy and add CLAUDE.md
2026-03-11 21:22:05 +01:00
feat: add keyd for system-wide caps lock to escape/ctrl remap
2026-03-23 07:46:31 +01:00
feat(xps): unlock LUKS via TPM2 and enable Secure Boot with lanzaboote
2026-06-14 17:39:04 +02:00
feat(xps): unlock LUKS via TPM2 and enable Secure Boot with lanzaboote
2026-06-14 17:39:04 +02:00
feat(xps): replace greetd autologin with nwg-hello password greeter
2026-06-14 17:39:04 +02:00
fix: add root SSH authorized key, fix gamescope log on first boot
2026-03-29 18:51:55 +02:00
chore(xps): remove unused docker support
2026-06-15 20:55:14 +02:00
Michael Mandl
5f042f8e1d