dots
Kieran's opinionated (and probably slightly dumb) nix config
Star
Fork
Watch

Commits on main
knot: move to knot 2 and mirror to GitHub without clobbering it
committed
chore: bump flake
committed
indiko: loosen the Caddy auth rate limit and trust Cloudflare's client IP
committed
chore: bump flake
committed
drift: update to 0.0.12
committed
fix: update caddy plugin hash after the nixpkgs bump
committed
fix: patch the October 2026 Nix and Lix security advisory
committed
herald: bump version
committed
chore: add hostname
committed
drift: bump version
committed
feat: refactor
committed
feat: host the Cedarville course planner as cedarplan
committed
feat: color deleted refs red
committed
feat: add declarative share config
committed
feat: add kierank dir in the storage share
committed
atalanta: add feroxbuster, seclists, sqlmap
committed
drift: bump version to 0.10.0
committed
feat: add editor setting in atelier
committed
docs: update time stats
committed
feat: redo rate limits
committed
feat: update cap
committed
feat: fix yabai not restarting properly
committed
feat: add public deployment of cedarengine
committed
feat: fix yabai on 27
committed
feat: add cedarengine
committed
drift: fix theme
committed
drift: disable tests
committed
gitprunes: refactor
committed
drift: add package
committed
chore: drop a caddy group membership that never existed
committed
chore: drop comments that only restate the line below them
committed
fix: build the git mirror hook in the store, not through shared /tmp
committed
fix: stop the emoji bots deploying unreviewed code at boot
committed
refactor: share one package overlay between NixOS and the Macs
committed
fix: make the port conflict check see every port a service binds
committed
fix: run the public tunnel server unprivileged and confined
committed
refactor: collapse three boilerplate vhosts onto one helper
committed
feat: give every proxied service security headers and a settable upstream
committed
fix: stop pretending the tailnet interface has a port allowlist
committed
docs: correct how builds run, which nix is installed, and the layout
committed
ci: roll back only the machine that failed, and bound every job
committed
chore: delete dead modules, helpers, and config
committed
refactor: generate per-system flake outputs from one list of systems
committed
fix: repair two option declarations that would throw when documented
committed
fix: stop the public proxy from reading every service's data
committed
nest: remove machine
committed
feat: cut down on nixpkgs imports
committed
feat: add objective c grammar for helix
committed
chore: limit logging on caddy
committed
feat: add dmg folders to yabai deny list
committed
chore: disable power failure restart on beef
committed
feat: add beef zmx
committed
beef: keep it awake with the lid shut
committed
beef: stop it installing updates on its own, and let it run at full speed
committed
beef: declare the power policy a headless machine needs
committed
chore: remove bts solver
committed
chore: update pear
committed
chore: format
committed
chore: add watchdog reboot
committed
feat: fix cedarprint
committed