Age | Commit message (Collapse) | Author | |
---|---|---|---|
2025-06-17 | uid1000-home-environment: consolidate packages in the dedicated field | Marek Paśnikowski | |
2025-06-17 | id1000: change layout of module imports | Marek Paśnikowski | |
2025-06-17 | systems: update sudoers-file to use the definition in sovereign repository | Marek Paśnikowski | |
2025-06-17 | systems: eliminate dead code related to izumi | Marek Paśnikowski | |
2025-06-16 | systems: fix the EFI partition mount point | Marek Paśnikowski | |
2025-06-14 | ayase: remove unused import of module (suweren services) | Marek Paśnikowski | |
2025-06-07 | ayase: use the name/home-environment variable for home services | Marek Paśnikowski | |
2025-06-07 | ayase: trim services list | Marek Paśnikowski | |
2025-06-02 | aisaka: point the schron subdomain to the test directory | Marek Paśnikowski | |
2025-06-02 | aisaka: certify the schron subdomain | Marek Paśnikowski | |
2025-06-01 | aisaka: update dns serial number | Marek Paśnikowski | |
2025-06-01 | aisaka: set up the schron subdomain | Marek Paśnikowski | |
2025-05-29 | aisaka: use a Let’s Encrypt certificate for the test subdomain | Marek Paśnikowski | |
The prototype of the client certificate authentication is suboptimal. The use of a private certificate authority for server authentication causes unnecessary security warnings when loading the subdomain with an unauthenticated browser. Any browser in its default configuration has no right to understand the private certificate authority used for the client and server certificates. It is possible to mix Let’s Encrypt certificates with a private certificate authority to implement the authentication. None of the previously found client authentication guides mentioned that server authentication can use an authority chain different to client authentication. This change takes advantage of this separation of concerns by using a Let’s Encrypt certificate for the test subdomain server, while keeping the private certificate for client authentication. | |||
2025-05-17 | aisaka: expose nonguix repository | Marek Paśnikowski | |
2025-05-13 | aisaka: limit the publicly visible repositories to only Guix channels | Marek Paśnikowski | |
2025-05-12 | Revert "aisaka: uninstall cgit and simplify gitolite" | Marek Paśnikowski | |
This reverts commit ba64ebfe587f05c734f24ace507d22629d350cd8. | |||
2025-05-12 | aisaka: redefine operating-system* | Marek Paśnikowski | |
2025-05-12 | aisaka: fix gitolite-service-type import | Marek Paśnikowski | |
2025-05-12 | aisaka: uninstall cgit and simplify gitolite | Marek Paśnikowski | |
2025-05-11 | aisaka: iterate client authentication | Marek Paśnikowski | |
2025-05-11 | aisaka: add proxy_set_headers for test.marekpasnikowski.pl | Marek Paśnikowski | |
2025-05-11 | aisaka: configure NGINX client authentication according to DataCadamia | Marek Paśnikowski | |
2025-05-03 | aisaka: configure client certificate check on test subdomain | Marek Paśnikowski | |
2025-05-03 | mcdowell: install openssh service | Marek Paśnikowski | |
2025-04-03 | systems: delete ayase-old.scm file | Marek Paśnikowski | |
This file is completely useless. It was created as a backup during migration of system declaration files, and never used. | |||
2025-03-15 | systems: use the nonguix definition of initrd | Marek Paśnikowski | |
The indirect bindings force the Sovereign channel to unnecessarily depend on Nonguix. | |||
2025-03-15 | systems: use the nonguix definition of kernel directly | Marek Paśnikowski | |
The indirect bindings force the Sovereign channel to unnecessarily depend on Nonguix. | |||
2025-03-14 | import systems to deployment channel | Marek Paśnikowski | |
2025-03-13 | id1000: rename user/home-environment to name/home-environment | Marek Paśnikowski | |
2025-03-13 | id1000: define user/home-environment | Marek Paśnikowski | |
2025-03-13 | degrade the uid1000-home-environment function to a procedure | Marek Paśnikowski | |
2025-03-13 | id1000: degrade the %suweren-home-services function to a procedure | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (guix records) module | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (suweren home) module | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (gnu services) module | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (gnu packages version-control) module | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (gnu packages disk) module | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (gnu home services shells) module | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (gnu home services) module | Marek Paśnikowski | |
2025-03-09 | uid1000-home-environment: rename services* to l-services | Marek Paśnikowski | |
2025-03-09 | id1000: prefix the (gnu home) module | Marek Paśnikowski | |
2025-03-09 | id1000: uninstall Emacs | Marek Paśnikowski | |
2025-03-09 | uid1000-home-environment: rearrange whitespace | Marek Paśnikowski | |
2025-03-03 | ayase: disable virtualization services | Marek Paśnikowski | |
2025-01-10 | id1000: disable tab-completion | Marek Paśnikowski | |
Tab-completion was too unpredictable for reliable use. Tab-completion in Bash is a feature that enables users to complete commands, file paths, and other arguments by pressing the Tab key. When a user types part of a command or file name and presses Tab, Bash attempts to auto-complete the input based on available options in the current directory or the system's command list. If the input is unique, Bash completes it automatically. If there are multiple possibilities, pressing Tab twice lists all matching options. In practice, the lack of explicit indication of a unique completion led to spamming of the tab key, countering supposed efficiency gains and breaking focus. | |||
2024-11-20 | feat(systems): retire mcdowell system | Marek Paśnikowski | |
2024-11-20 | feat(systems): retire akashi system | Marek Paśnikowski | |
2024-11-20 | refactor(akashi): stop using %suweren-services | Marek Paśnikowski | |
2024-11-20 | feat(akashi): include %sovereign-services | Marek Paśnikowski | |
2024-11-20 | fix(akashi): restore the ability to build the system | Marek Paśnikowski | |