drop actalis ACME config, use Let's Encrypt main

update searchix input

update flake inputs

emacs: add and configure spacious-padding

emacs: log startup time to Messages buffer only

emacs: tweak display of line numbers and cursor

emacs: make doom-modeline calmer

emacs: fix theme customisations not applying

emacs: make mode line more subtle

emacs/magit: remove unclear overrides

emacs: make git gutter look like Zed's

emacs/magit: move section indicators outside fringe correctly

emacs: drop unused modes

emacs: silence "Scanning for dabbrevs" in git commit buffers

emacs: drop kind-icon package

os_update_remote: remove deprecated --remote flag

drop orphaned files

adguard-home: disable TLS

fish: update hydro to show user/host

split flake outputs into own file

fish: inherit hydro prompt colours from terminal config

remove calendar-anonymiser role

update flake inputs

golang: remove golangci-lint-langserver override

shell: add some aliases for common systemctl/journalctl commands

fish: add abbreviation gcm -> git commit -m '%'

fish: avoid home-manager conflicts on first run

fish: switch from tide to hydro (forked)

fish: allow config to be split by linking conf.d

darwin: remove setting to disable nix-daemon socket listener

darwin: tell homebrew to be quieter

auto-upgrade: fix system upgrades with local nixfiles checkout

update searchix input

update personal flake inputs

update flake inputs

auto-upgrade: initialise nixfiles correctly, with submodules

move home-manager update to auto-upgrade module

add home-manager configuration for ulme

darwin: install scanner software

reverse-proxy: update caddy modules

auto-upgrade: use the local nixfiles checkout

auto-upgrade: reduce service PATH

update flake inputs

darwin: stop homebrew from auto-updating itself and taps

remove unused modules {postgresql,gnome}

kitty: remove module

remove modules of unused programming languages

router: remove v6only submodule

readeck: decommission

auto-upgrade: init nixfiles checkout if missing

auto-upgrade: disable impotent upgrade flag

update flake inputs

git: register nixpkgs checkout with scalar

reverse-proxy: remove DNS01 configuration

update flake inputs

add home-manager to dev shell for initialisation

dev/web: fix zed unable to call color-lsp

dev/base: use standard build of xh

darwin: install lunchy-go from homebrew instead

remove dunst module

remove passwords module

remove nim setup

Revert "emacs: find file in project if in project"

emacs: remove evil-{anzu,space}

emacs: drop eshell configuration

emacs: remove config for absent gitlab-ci-mode-flycheck package

emacs: remove expand-region

emacs: remove jinx

darwin: try zbrew

remove nix-run

use homebrew instead of nixpkgs for macOS applications

server: make output of update-home-manager service more log-friendly

r5: switch searchix to -stable, expose via tailnet

r5: use domain from data module

update packages submodule

music-library: remove plugins to reduce package compilation

extract non-container-specific stable searchix configuration

drop unused LLM stuff

update flake inputs

usb-serial-tty: set device after others

router: direct local DNS queries to dnsmasq on non-standard port

searchix: generate stats less frequently

switch unstable input from nixos- to nixpkgs-

update flake inputs

git-server: slow down access via HTTPS

update packages submodule

re-enable shallow clones of personal projects

update elgit input

switch back to upstream nixos-nanopi

update elgit

fix scriptura flake reference

router: include non-TLS DNS fallbacks (fix startup NTP sync)

router: relax ntpd restrictions on local network

update flake inputs

r5: switch to ntpd

r5: switch to battery-backed RTC device

flake: use non-shallow clones from personal git host

update personal package inputs

add iqan package to environment

update searchix input

use channel release tarballs for nixpkgs inputs

install iqan to sync flake inputs across projects

update flake inputs

oci: enable host->container name resolution

remove unused home-automation role

save SSH host aliases for known hosts

dev/web: reformat

local-llm: remove zed configuration (unused)

marvin: remove dead code

marvin: remove specific fish derivation from enabled shells

marvin: disable linux-builder

update flake inputs

enable remote nix builds to/from host 'ulme'

dev/web: enable colour previews in Zed for CSS files

searchix: switch to link-other-instance branch

r5: re-enable automatic upgrades

update flake inputs

bark: move to ulme

base: remove marksman (not used?)

update flake inputs

update nixpkgs input

Revert "add headscale role"

darwin: add alias netq -> networkQuality

ssh: enable password input when using `essh` alias

add headscale role

data: update host SSH key for prefect

update prefect SSH key

fix incorrect boolean logic

os_update_remote: make remote builds the default

uptime-monitor: enable sending notifications via apprise

uptime-monitor: enable tailscale ping monitors

r5: add home-assistant as ntp server

marvin: remove tailscale (use official package instead)

auth-dns: also listen on external v4 address

router: fix type issue after systemd module schema change

update searchix input

update flake inputs

add initial configuration for new machine 'ulme'

set machine hostnames under hosts. subdomain

move dns providers to data

update flake inputs

update private submodule

exercism: remove emacs package

add music library roles

gleam: also ensure erlang is installed

emacs: remove some unused packages and configuration

update flake inputs

searchix: disable caddy caching

llama-swap: replace Qwen3 Coder with Qwen3.6

git-server: serve stats

reverse-proxy: use snippet to handle stats routing

update searchix input

use web-challenge-based certificate provisioning

update packages submodule

searchix: switch to scheduled stats generation

update searchix input

adguard-home: remove unnecessary restart after cert updates

local-ca: increase certificate lifetimes

reverse-proxy: reduce caddy memory usage

update flake inputs

shell: replace shell with fish if likely normal login

searchix-stable: configure longer search timeout

ssh: also enable mosh, for cases of poor/varying connectivity

remove remnants of vpsfree setup

update flake inputs

zed: disable highlighting of current line

slow down impudent crawlers

zed: reduce gutter clutter

follow config schema updates

reverse-proxy: tweak rate limits

remove invalid import

update flake inputs

reverse-proxy: reduce window size for longer-term rate limit

reverse-proxy: add daily limits

reverse-proxy: log target of rate limit

reverse-proxy: consider an IPv6 /64 as a host

goaccess: fix missing unix sockets

searchix: skip caddy logging for stats pages

searchix: enable real-time statistics with goaccess

reverse-proxy: fix go module reference for xcaddy

auto-upgrade: use remote flake URL

reverse-proxy: add network-based rate limit

update searchix input

update private submodule

remove rosetta-builder

r5: remove avahi setup

hasel: assign torrent-client role

hasel: regenerate hardware config

searchix: enable caching via caddy

reverse-proxy: tweak rate limits

searchix: re-enable log-based analytics

router: update upstream bandwidth

update flake inputs

update searchix-stable container to latest nixos release

gaming: remove insecure package exception

auth-dns: switch from HE dns to ns-global and puck

workaround git/ssh key access blocked by overzealous os security

reverse-proxy: relax global rate limit

apply overlays to nixpkgs at flake level

move os update script to repo bin and call via just

remove host 'smrk'

hasel: reduce boot menu delay

mailer: update forward address

mailer: use domain, not hostname in From

auth-dns: reduce NOTIFY logspam when using he.net

move remaining roles from smrk to hasel

hasel: add nix-remote-builder role

move paperless,syncthing to hasel

marvin: rosetta-builder -> linux-builder

oci: enable ipv6 and dns lookups

nix-build-client: remove self from builders

update flake inputs

update packages submodule

smrk: remove irrelevant service tuning configuration

make ci scripts use correct hostname

remove buk

smrk: remove roles that were migrated to hasel

hasel: host stable searchix

git: remove nonsensical alias

add unstable nixpkgs as overlay and special arg

flake: deduplicate nixosSystem specialArgs

git: add alias to generate a diff in patch format

hasel: serve ci and git roles

hasel: add searchix role

hasel: use shared server home-manager configuration

server: use nh to apply home-manager configuration

add user configuration for host 'hasel'

add hasel to data and secrets

hasel: cleanup file

add system 'hasel'

shell: fix emergency shell access

searchix-stable: add darwin and home-manager sources

switch to 26.05 branches

searchix: update darwin options URL

r5: remove home-automation role temporarily

adguard-home: don't return outdated responses

router: de-bloat /etc/resolv.conf

router: improve DNS bootstrapping resilience

nix-linux: increase nix daemon IO priority

adguard-home: shorten upstream timeout

add nixos-rebuild to dev shell

r5: remove torrent-client role

home-automation: reduce disk wear

update flake inputs

reverse-proxy: tweak rate limits

r5: extend base server config

r5: fix home-manager

update calendar URLs

router: add redirects for locally-hosted single-label domains

remove unused theme settings

update packages submodule

searchix: add rate limiting

torrent-client: enable remote access

darwin: install mas (App Store CLI)

switch to standard nix

lix: use working build on darwin

fix ssh settings

update ssh settings schema

create torrent-client role

javascript: use bun as node

video-library: also listen on tailscale interface

add justfile tasks to manage updates

remove prefect from builders

update flake inputs

add huggingface-hub to llm setup

ci queue: add support for tag-based jobs

os update: fix user check

add qwen3-coder-next via mlx

llm-server: use consistent name for sweep v2

remove zeta models from default llama config

use llama-swap peer config instead of load balancing

add Zeta 2.1 to llm-server and local llm

os update: use username to configure default elevation strategy

smrk: remove video-library role

paperless: fix TLS certificate provisioning

update searchix input

redis-website: enable more simultaneous clients

dev/web: remove nginx mode

update private submodule

remove unused secret file

remove opia infrastructure

push-notifications: remove ntfy

centralise tailscale domain

readeck: fix caddy/tailscale certificate provisioning

readeck: remove package override

remove chat role

nix-remote-builder: permit machine 'prefect'

prefect: switch back to KDE

update caddy plugins hash

fonts: remove unused fonts

update flake inputs

r5: enable avahi daemon

llama: add GPT OSS models

router: add packages for wake on LAN and ipv6 neighbour discovery

router: remove duplicate sysctl

router: partially re-enable v6only module (flag is disabled)

router: enable networking in initrd

router: complete partial revert of 2522c8da

r5: move bridge configuration to networking.bridges

v6only: add flag to enable v6-only preference via DHCPv4

v6only: use more explicit naming

push-notifications: configure bark server

adguard-home: simplify module

emacs: disable cape-dabbrev

llama: add model aliases

llama: follow breaking CLI change

video-library: add HTTP health check

r5: add video-library role

video-library: enable running on local network

llm-server: update llama CLI

mcp: avoid build failures in mcp-nixos closure

update flake inputs

r5: enable bandwidth testing on trusted networks via iperf3

git-server: mirror scriptura to Gitlab

print systemd service names instead of descriptions to console

emacs: remove helpful

dynamic-dns: wait for wan to be online

r5: tweak networking startup requirements

router: retry service starts ad infinitum

router: delay dnsmasq startup until network configured

usb-serial-tty: delay startup even further

emacs: remove default/unused option modifier config

dev/base: add bash-language-server

emacs: fix jumpy lines in eglot-supported modes (Emacs bug #52542)

emacs: remove astro and svelte configuration

gleam: init module

exercism: init module

remove Raycast configuration and mentions

router: move `address` network entries to `addresses`

router: remove unnecessary dnsmasq settings

adguard-home: increase cache size

neovim: remove clipboard setting

web: prefer routing LLM requests to desktop, if available

dynamic-dns: permit SSH access

router: instruct dnsmasq to ignore /etc/hosts

router: enable on-device local DNS resolution

router: give adguard-home its own IPs, TLS certificates

local-ca: allow provisioning certs with IP address subjects

extract network functions into library module

local-ca: enable non-caddy ACME clients

parametrise ULA prefix

ssh-inhibit-idle: remove unused binding

ssh: enable agent-based elevation

auto-upgrade: fix flake incompatibility

llm-server: expose next-edit models

llm-server: use dedicated hostname

llm-server: expose to network

init llm-server module

gnome: remove "just-perfection"

gnome: add a dock

dev/web: update firefox config path

update flake inputs

gnome: set flat acceleration profile for trackball

extract ssh idle sleep/shutdown configuration

remove darwin TMPDIR workaround

router: configure adguard-home for trusted local network

reverse-proxy: make system-agnostic

adguard-home: enable persistent configuration via web UI

r5: enable reverse-proxy role

caddy: remove unnecessary virtual hosts

move webserver roles into subdirectory

rebase packages submodule

update srvos,nixpkgs inputs

router: don't return unreachable records

javascript: use biome for formatting

remove danube-cli (use via bun instead)

router: don't return DHCP-PD addresses for self

uptime-monitor: add more domains

dev/javascript: update bun config

zed: restrict extension capabilities

zed: default-disable inlay hints, but show parameter hints on toggle

neovim: remove transparent (unfree)

update private submodule

marvin: start/stop rosetta-builder on demand/idle

darwin: configure ipconfig verbose logging

remove reference to defunct darwin caddy module

remove dateutils (rarely used, if ever)

update srvos/nixpkgs inputs

goatcounter: set up server aliases

goatcounter: add package to path

dev/web: add zed configuration for Caddyfile format

update searchix input

searchix: move load balancing to flynet

r5: add uptime-monitor role

update packages submodule

nvidia: fix sleep/wake issues

prefect: prefer nixos-hardware modules over bespoke configuration

justfile: fix hostname detection

dynamic dns: add caddy hostname to provision TLS

secrets: permit r5 access to caddy secret file

secrets: fix structure of imported data

nix: install cached-nix-shell

router: fix local network hostname resolution

redis-website: add another database

flake: add just to shell

flake: nest configurations

cease use of github actions for packages CI

add home-manager configuration for smrk

use predefined fqdn instead of generating every time

update package submodule

r5: enable access to searchix module

prefect: enable passwordless sudo via ssh-agent

update private submodule

reverse-proxy: remove ssh wrapper

searchix: add passive backend health checks

update packages submodule

Revert "update flake inputs"

update flake inputs

searchix: add a backup host

r5: run an instance of searchix

split searchix configuration from role

move Apple Terminal theme switcher to per-term function

move acme defaults to caddy configuration

local-ca: prefer more obvious domain label "acme"

router: fix local network DNS resolution

router: fix outgoing DNS

local-ca: specific CA for ACME server

user-interface: remove redshift configuration

os update: allow overriding elevation strategy

prefect: switch to gnome

llama-swap: allow adding any packages to service PATH

update searchix input

router: restrict dnsmasq domain to lan interface

darwin: install ks to store secrets in keychain

add danube-cli package

skiphead: use default value correctly

darwin: install flashspace for better macOS workspaces

shell: add alias to pull updates with submodule recursion

fish: remove tide prompt workaround

fish: keep incorrect command lines in history for longer

fix error on home-manager activation via nh

update packages submodule

fish: move context to left side

fish: remove theme.sh-related code

fish/tide: hide "impure" when in nix shell environment

update packages submodule

darwin: install Loop (window management tool)

ci queue: enable specifying custom job name

fish: use updated tide prompt items, configured on activation

marvin: enable dragging windows with cmd+ctrl

add ci abort script

os update: take target host from arg instead of basename

marvin: fix home dns lookup failures

local-ca: don't attempt to install CA locally

update private submodule

smrk: boot builder machine before attempting OS upgrades

provision buildMachines from data file

r5: disable automatic nixos upgrades (still tinkering)

buk: configure as dedicated nix builder

server: fix priority of nix max-jobs/cores

justfile: avoid flake git-assumption-based annoyances

remove host-specific nix max-jobs/cores values; make role-based

router: allow dnsmasq to bind on all interfaces

router: add v6only sub-role

ci,ci-runner: use minimal variant of fish

fish: fix missing documentation

use correct lowPrio attribute

remove angrr flake input

fish: extract custom plugins to submodule

update packages submodule

update flake inputs

add padd function to use instead of nix-shell

fish: add aliases to create/edit functions and save

fish: remove import of prelude builtin

update packages submodule

prefer non-experimental nix commands

marvin: let nix-rosetta-builder stay alive

update lix to stable

dev/web: run caddy as user service with Caddyfile watching

dev/web: extract (linux) browser setup to module

update packages submodule

darwin: install lunchy-go

local-llm: extract URL path for completions

use nh and flake-compatish to skip copying source to store

darwin: fix firewall prompts showing opaque binary names

local-llm: set zed edit prediction URL

marvin: configure llama-swap

local-llm: init module

zed: make cli link activation script idempotent

zed: re-add missing wait arg to zed cli

darwin: remind future me why apps are copied, not linked

update scriptura

darwin: remove config for emacs-macport

remove tridactyl settings (switched to vimium-c)

zed: fix `zed` cli not opening files in darwin app

zed: enable quote operators in nix files

adguard-home: enable serving temporarily-stale responses

darwin: reduce socketfilterfw resource usage

os update: add link for prefect

prefect: add nix-remote-builder role

router: advertise DNS using ULA address, not link-local

re-indent

firefox: add nf -> noogle search alias (nix function)

call prelude builtins without prefix

darwin: remove unnecessary scope

os update: fix argument parsing

emacs: remove mailutils-disabling overrides

home: enable openssh, even if machine is not a server

justfile: pass args through to `*-rebuild`

prefect: enable wake-on-lan via magic packet

prefect: disable overclocked monitor refresh rate

prefect: use updated network interface name

prefect: remove autologin

prefect: enable ssh on tailscale interface

gaming: remove openssl 1.1

nix: tell home-manager that system nix respects XDG

remove compiler tools from dev shells

darwin: don't let nix shells break `stat` command

os update: always pass --show-trace

os update: pass unknown arguments to nixos-rebuild

router: move adguard-home in front of dnsmasq

adguard-home: init module

router: disable IPv4 link-local addressing

git-server: mirror homestead to sourcehut

update flake inputs

smrk: try to limit nix-daemon memory usage

user/nix: remove unnecessary nix option

remove nur (basically unused)

remove stylix

reverse-proxy: remove NUR (nix user repository) include

reverse-proxy: use EU-issued ACME TLS certificate issuer

home-automation: use oci container for home-assistant

emacs: re-enable transparent titlebar on macOS

router: complete DHCP/RA setup

home-automation: disable onboarding-specific components

home-automation: init module

oci: init module

router: add comments to local DNS config

router: try using networkd to handle IPv6 RA

remove syncthing from server role

darwin: use standard emacs for now

theme: use modus-themes in emacs

tridactyl: don't highlight element backgrounds when hinting

theme: extract emacs-specific theme setup

darwin: use emacs ultra-scroll package if using macport

update elgit

browser: init module (tridactyl config)

remove references to nodePackages

update package submodule

opia/archive: re-enable

os update: fix handling of -r flag

searchix-stable: restart instead of cycling stop/start

disable goaccess in searchix-stable

smrk: remove cifs-utils (no longer using samba mounts)

os update: allow manual specification of build host

check flake on all system types

searchix-stable: set graceful shutdown timeout

shell: add some very basic aliases

update flake inputs

don't set builders-use-substitutes: srvos does it anyway

base: default to nftables

make tailscale exit node opt-in

buk: move config to host file

auto-upgrade: allow overriding reboot window

update private submodule

shell: set a default fish prompt if tide is not installed

nix: remove workaround for home-manager<->lix incompatibility

ssh: use alias essh for ephemeral ssh

shell: add alias to do an all-systems flake check

auth-dns: enable automatic https/svcb hints

create shared module to manage lix version/usage

remove x86_64-darwin from supported systems

marvin: allow ssh into rosetta-builder vm

usb-serial-tty: reduce baud to avoid dropped data

r5: add mount for /srv

base: don't generate mandb caches during home-manager builds

base: remove duplicated docker config override

re-add nix-rosetta-builder (for smrk)

extract docker shell aliases from shell module

router: assign a v6 address on wan interface for dynamic dns

router: explictly allow ssh on lan interfaces

fix telescope -> plenary.strings nixvim error

home: allow ssh through firewall if no trusted interfaces set

emacs: switch to macport, disable mailutils for all variants

router: use system domain as first DNS search domain

router: enable access to modem in half-bridge mode

shell: use correct scope to set fish_greeting

theme: avoid gtk config warning on darwin

router: reduce upstream bandwith limit to improve latency

theme: switch emacs dark theme to base16-decaf

r5: bind bridge carrier status to underlying links

emacs: reduce fruit salad (highlighting defined variables)

zed: add alias if using nix package (which creates `zeditor`)

update flake inputs*

emacs: use non-GTK emacs on darwin

emacs: remove evil-mu4e

os update: use normal user and sudo

r5: disable tty1, since HDMI isn't working

usb-serial-tty: restart after normal exit

router: log DHCP v4/v6 traffic (RA is the noisy one)

router: limit dnsmasq to configured interfaces

router: show speed metrics in networkctl status

router: reduce number of v6 addresses

router: install dnsmasq so that I can access --help

router: prune unnecessary options

flake: include nixos-option in dev shell

router: specify v6 addresses first

router: reorganise dnsmasq options

router: allow resolution of modem hostname remotely

router: force dnsmasq, resolved and tailscale to coexist

router: use standard variant of quad9 resolver

darwin: use zed-editor package from nixpkgs

auth-dns: only allow signed dynamic dns updates

r5: enable dynamic dns updates

tailscale-subnet-router: fix flag generation

reverse-proxy: use nixpkgs' caddy plugin bundler

r5: use r8125 network driver

mcp: add server for dash documentation

extract local certificate authority setup to module

router: move link local address declaration

r5: allow any devices on lan to access chrony

r5: use nixos-managed chrony configuration for RTC

r5: correct system clock at startup

router: fix dnsmasq not recognising interface names

usb-serial-tty: wait for startup complete before spawning getty

usb-serial-tty: enable earlier in boot

extract and generalise tailscale subnet route advertisement

r5: don't use builtin serial device

usb-serial-tty: use max supported baud

r5: enable serial console via USB adapter

extract router role from r5/r6 hosts

update private submodule

ssh: add tssh for connecting to short-lived hosts

ssh: require manual management of known_hosts

update packages submodule

marvin: use known-working version of caddy

r5: advertise route for home subnet

ssh: don't hash hostnames for known_hosts

server: re-enable manpages

r5: reinstall

update flake inputs

push-notifications: don't provision users

searchix: disable goaccess instance (memory usage)

ci: add ping and awk

update packages repo

forgejo-runner: automate version updates

caddy: ensure log directory is group-readable

import opia-specific CI role

zed: enable MCP integration

add searchix-stable-container to smrk

import opia roles

workstation: update mergiraf settings

remove linde

update flake inputs

mailer: parametrise selector and domain

file-server: allow insecure access

flake: replace nixos-generators

git-server: mirror nix-packages to codeberg

remove unused secret file

move jellyfin to smrk

move subdomain-redirector role to smrk

paperless: move role to smrk and simplify

sso: move to smrk

move redis-website role to smrk

move readeck to smrk

move ntfy to smrk

mailer: include as dependency of goatcounter

nix: enable distributed builds by default

vpsfree: generate token with correct scopes

goatcounter: move to smrk

move file-server role to smrk

ci: include laminar module

move calendar-anonymiser to smrk

calendar-anonymiser: add dependencies to `imports`

nix-remote-builder: permit smrk access

nix: enable substituters (including via remote builders)

move binarycache to smrk

move open-webui to smrk

ci-runner: shutdown on idle

vpsfree-manager: init role

xserver: replace deprecated xorg package aliases

buk: add nix-remote-builder role

prefect: fix outdated module reference

remove unused binding

mcp: add mcp-nixos

auto-upgrade: remove flake update

roles/ci-runner: enable remote shell access

buk: tell system its own hostname

extract network domain to remote role

set network domain of systems at home

update private submodule

zed: install via home-manager on servers

darwin: remove dark-light-mode service

smrk: restrict laminar memory

smrk: use percentage-based memory limits

replace theme.sh with custom Terminal profile switcher

accept args to `just build` and pass to home-manager

user/server: import standard shell configuration and aliases

buk: use shared server settings for home-manager

set server home-manager stateVersion in flake.nix

user/server: update username

marvin: init mcp setup

remove old llama presets file

update flake inputs

git: add unstage/unadd aliases -> rm --cached

update elgit input

auth-dns: fix ALIAS record expanding to local IP address during AXFR

add vpsfree-client to devShell

smrk: avoid OOM killing goaccess

update packages

buk: use hostname as flake key to enable autoUpgrade

searchix: shorten graceful search timeout

searchix: remove non-host-specific performance config

move searchix memory limit to host configuration

smrk: reduce searchix import batch size/memory usage

git-server: use non-root ssh key for gitolite-admin backup access

ensure laminar restarts if killed by OOM

add staging nixos configuration to serve as CI runner

don't run caddy on all servers

smrk: reduce nix job count

git-server: note why git daemon is enabled

update ci scripts' hostnames

re-assign git-server role to smrk

import elgit module from git-server role

migrate go vanity module aliases to smrk

reverse-proxy: enable DNS01 challenge solution in caddy

smrk: add searchix role

searchix: import goaccess module

move authoritative DNS to smrk, improve config

zed: make ctrl-tab/ctrl-shift-tab use simple tab order

linde: don't preserve EDITOR through sudo

extract go vanity package serving to role

automatically install litecli for sqlite-based roles

smrk: remove pdns (provided by auth-dns role)

extract file server role

linde: re-add missing roles

extract nixremote user creation to nix-remote-builder role

extract user setup to role, split groups membership to roles

install lsof on all servers

install nix-output-monitor by default

r6: set tailscale options correctly

nix: workaround home-manager lix compatibility issue

dev/javascript: remove node2nix

extract root ssh key to remote-admin role

extract webserver-based optimisations to reverse-proxy role

git-server: move firewall exception to role

move podman firewall exception to relevant role

prune server system configurations

move relevant firewall configuration to auth-dns role

extract wildcard subdomain redirection to role

extract redis-website configuration to role

extract mycal configuration into calendar-anonymiser role

linde: remove unused variable

move git-server configuration to role

extract ntfy configuration to push-notifications role

extract jellyfin to video-library role

extract open webui to role (without importing—build failure)

extract mailer role

extract powerdns configuration to role

extract paperless configuration to role

extract readeck configuration to role

roles/base: fix eval error on prefect

extract goatcounter to role

extract pocket-id setup to sso role

reverse-proxy: update caddy-with-plugins hash

centralise syncthing config, split by system role

update flake inputs

remove unused argument

re-key relevant secrets for smrk

server: use same flake URL for home-manager as system config

make all servers auto-upgrade

extract git client configuration

use srvos's default gitMinimal package where git is used

fix infinite recursion

extract and reduce firewall config

update home manager automatically on all servers

fix base role on darwin

ci: move to smrk

ci: extract to own role

smrk: fix syntax

extract forgejo-runner configuration to role

extract searchix configuration to role

move journald retention settings to server role

extract binary cache role

centralise fish system configuration

centralise htop configuration

extract acme configuration to reverse-proxy role

caddy: move caddy secrets to reverse proxy config

finalise rename of host 'nano' -> 'r5'/'r6'

r5s: remove now-centralised caddy/tailscale configuration

extract custom caddy build to reverse-proxy module

fix `test` target

centralise SSH server configuration and differentiate by role

centralise default editor

set default locale in one place

set timezone in one place

fish: add qsd for quick project-wide search/replace operations

add server roles to nano/r5s

extract server tailscale configuration

create a generic server role

extract base caddy setup

fish: switch theme in all (local) terminal windows at once

add host smrk (spruce)

update private submodule

secrets: rename user

linde: fix mails from goatcounter

linde: replace opendkim with rspamd

linde: re-add forgejo-actions-runner

javascript: remove deprecated npm always-auth setting

marvin: rename user

update flake inputs

theme: ensure melange theme is installed

add projectdo-compatible justfile

theme: prefer alternatives to flexoki in dark mode

theme: reformat

fish: simplify last_theme

linde: rename user

linde: set fish as default shell in one place

linde: add host 'granatum' as extra builder

remove everything related to discord

linde: move readeck to tailscale, using forwarded auth

linde: don't log requests to /health

linde: fix caddy-with-plugins build hash(?!)

os/update: make building on remote optional

os/update: fix argument check

replace nix-rosetta-builder with simple nix.linux-builder

theme: use base-16 version of flexoki theme

update flake inputs

linde: update caddy plugins

allow overriding action passed to nixos-rebuild

linde: remove searchix-stable configuration

remove vivid

reformat existing fish completions

add fish completions for theme.sh

update flake inputs

make editors match fish_indent for scripts

add script to publish a repo via gitolite

add fly restart-all script

add ci list script

move laminarc queue command to scriptura

shell: add alias gkt to push with tags

update scriptura

update scriptura

base: update email envvar

marvin: make git ssh signing key use git email address as comment

update private submodule

update packages submodule

re-use linde update script for r5

make os update script domain-agnostic

r5s: use minimal variant of fish shell

git: update user defaults

marvin: remove unused binding

fish: add `lf` to list content of all files in a directory

zed: add relative line numbers setting

emacs: finish editing commit messages with cmd+return

update scriptura input

zed: add command alias for force-pushing via git

zed: make command aliases exactly manage editor commands

scripts: add tree

marvin: add split DNS for home.arpa

shell(skiphead): support skipping multiple header lines

update flake inputs

zed: enable line wrapping in markdown mode

remove unused variable import

base: re-add sd (friendly search and replace/sed-replacement)

add script to update linde with nixos-rebuild

base: add scriptura

theme: let neovim use terminal colour scheme

use smaller fish install on servers

dev/base: add jinja2 template support

git-server: mirror scriptura

update flake inputs

theme: fix dark/light toggle keybind

linde: bind sshd to all addresses

linde: remove postfix container listener

fix pocket-id secret

update private submodule

update private submodule

remove dead code

linde: disable tailscale ssh

marvin: use default lm-studio port so as not to confuse zed-editor

the great (git forge) username reset

ghq: use ghq instead of git-get to fetch

dev/go: remove GOPATH-based PATH modification

move script to sd's folder

use script-directory package to run scripts from nixfiles

marvin: configure vesktop/discord via nixcord

neovim: don't install interpreters for other langs

server: use minimal version of git package

neovim: move some plugins to dev/base

base: trim package set

linde: fix home-manager updates using root's home

flake: remove substituters config

marvin: remove llama.cpp

linde: remove reference to forgejo runner secret

zed: add aliases for git push/pull

zed: remove unnecessary titlebar elements

linde: remove forgejo-actions-runner

nix: split dev tools to dev/nix

fish: split dev tools to dev/fish

marvin: remove unused code

linde: remove podman

update systemd-resolved config schema

fish: check for fifc before binding key

improve vim/zed selecting around/inside

fish: workaround incorrect tide prompt with fish > 4.3

update flake inputs

fish: notify on long command completion

darwin/fish: install macos helper plugin

update searchix input

fish: configure tide via home-manager activation

theme: set up stylix (where reasonable)

zed: enable 'which key' mode

fish: remove incidental printing of ssh command on exit

shell: fix incorrect logic for adding switch to `ls`

theme: make fzf colours dark-/light- agnostic

shell: enable nice colours with macOS's default `ls`

theme: switch vivid theme alongside theme.sh

theme: extract last_theme function to own file

darwin: use coreutils' ls for LS_COLORS support

theme: use adaptive version of flexoki in neovim

use script to generate raycast ai providers yaml

marvin: remove ollama (replaced with lm-studio)

fish: fix spurious escape codes in script output

dev/base: add remarshal (json/yaml/etc. conversion)

base: add xz

theme: set fish theme

rekey secrets

set up nanopi r5s with nixos again

direnv: store layout underneath project

marvin: point magicdns to lm studio

linde: configure open-webui

re-update packages submodule

Partially revert "update flake inputs" (nixpkgs)

dev/base: reformat

marvin: update llama.cpp config

update flake inputs

marvin: enable access to llama via tailscale

marvin: use llama-server's routing instead of llama-swap

marvin: add raycast custom ai provider configuration

marvin/dev: set up llama.cpp (via llama-swap)

emacs: assign yaml-ts-mode to yaml files (?)

emacs: re-use help windows when following links

reformat

emacs: re-enable frame decorations (title bars) on darwin

ssh: send/accept TERM_PROGRAM variable

fish: include term-specific config file, if available

marvin: add ssh key for testing

update elgit input

update flake inputs

emacs: fix theme switching not working (no lexical-binding)

emacs: move darwin-specific config to darwin.nix

emacs: avoid auto-terminating some magit buffers

dev: use caddy snippet to enable local tls

fonts: add lato fonts

theme: ensure all emacs themes are disabled on startup

update flake inputs

linde: fix gitea-actions-runner broken by implicit podman use

linde: remove rauthy

linde: update caddy plugins

clean lint

linde: install pocket-id

update private submodule

update flake inputs

remove old local hostname

update flake inputs and angrr config

remove knowledge

emacs: remove a couple of unused mode packages

emacs: bind % to create-empty-file in dired

emacs: remove defunct keybinding

emacs: remove doom-themes

emacs: accept the wisdom of minimal-emacs.d

knowledge: init module

darwin: revert to using Zed app

zed: fix EDITOR setting when using nixpkgs package

emacs: move fish-mode installation to fish.nix

update private submodule

emacs: remove lsp-mode (use eglot-mode only)

emacs: remove ssh-deploy/quickrun/eglot-booster

shell: remove some aliases for nix commands

shell: add aliases skiphead and f(ield)

emacs: remove embark

fish: don't set terminal title

marvin: install Zed via nixpkgs

base: remove some outdated environment variables

update flake inputs

fish: supercharge complete-and-search (shift-tab) with fifc

fish: move zed integration to zed.nix

fish: move fzf configuration to nix

shell: add aliases for git add --intent-to-add/-N

emacs: remove window decorations

marvin: compile using more cores

nix: fix Zed complaints

theme: init module

emacs: remove lsp-booster

update flake inputs

linde: remove transmission

fonts: add merriweather

remove input-fonts license agreement

linde: fix auto-upgrade failures with new submodules files

Revert "nix: hook angrr into nix-collect-garbage"

linde: remove searchix goatcounter integration

linde: update stable-searchix to use 25.11 index

nix: hook angrr into nix-collect-garbage

linde: generate and serve stats pages for searchix

update packages submodule

linde: fix DNSSEC with ALIAS records by expanding during AXFR

update searchix input

dev: fix xh http3 override

update flake inputs

linde: de-containerise paperless

linde: de-containerise transmission

ssh: update canonical domains setting

linde: sign outgoing mail with DKIM

linde: remove git-pr settings

linde: enable app hosting with dynamic tailscale hostnames

linde: add email settings for readeck

update private submodule

shell: fix tab completion for e (edit)

linde: configure readeck

Re-add docker credential helpers (needed for fly)

update private submodule

update local website domain

remove barkeep virtual host

update elgit input

update rauthy version

update flake inputs

remove golink

remove old secret files

remove glitchtip

remove sentry/glitchtip integration from searchix

dev/base: enable http3 for xh

remove xhs aliases (xh includes a link)

darwin: enable lorri notifications

linde: use caddy with layer4 plugin instead of haproxy

dev: remove abandoned csslint

linde: use correct git command to revert file changes

git: fix elgit/reverse proxy configuration

update elgit input

update flake inputs (libcef removed from tree)

git-server: allow pulling commits outside of refs

shell: enable e alias to work when EDITOR has arguments

linde: auto-update nixfiles & inputs before upgrade

fix flake check issues

update searchix input

update private submodule

use lowPrio from lib, not pkgs

update flake inputs

update searchix input

linde: enable IPv4 HTTP connections

golang: use unreleased golangci-lint-langserver

fish: don't shadow help builtin

linde: update rauthy image

linde: update transmission to v4

linde: update package names

update flake inputs

linde: set up ntfy.sh

override golink nixpkgs input

remove virtualisation module

gaming: libcef doesn't exist on 32-bit

bare-metal: update config schema

emacs: enable nix option completion in this repo

improve gaming compatibility

update git config schema

use targets.darwin.copyApps instead of mac-app-util

fish: update nix-your-shell settings

update flake inputs

use srvos' nixpkgs as agenix nixpkgs input

dev: use fx instead of jq

linde: set up jellyfin

update mycal input

git-server: add mirroring to gitlab

marvin: remove duplicate setting

update inputs

dev/go: use programs.go to configure

darwin: fix setting of SSH_AUTH_SOCK

marvin: disable linux/rosetta builders for now

remove some unused packages

marvin: enable signing git commits

update searchix and elgit

emacs: fix boosted lsp-mode failing to launch servers

flake.lock: Update

emacs: fix slow find-file operations

linde: add pr.alin.ovh for anonymous git patch requests

linde: use haproxy for ipv4 only

update flake inputs

git: mirror htmlformat

dev/base: install tokei for code statistics

dev/base: remove docker-credential-helpers

update packages submodule

neovim: update LSP configuration

linde: enable archiving in laminar jobs

zed: remove theme settings

remove (co)lima

update own inputs

use git-get in combination with ghq

remove overlays

update inputs

remove htmlformat

make substituters flake-specific

use nixpkgs' angrr except on darwin

dev: update dockerfile-ls package name

update inputs

linde: shorten healthcheck interval for searchix backend

update searchix input

emacs: skip deferred auto-loading of eshell

update inputs

marvin: enable launching home-manager apps via Spotlight

update private submodule

fish: change ls colour scheme

fish: enable 24-bit colour themes in vivid after Terminal update

dev: avoid direnv breaking inside emacs

use separate direnv/shell for secrets subdirectory

linde: update caddy cache handler plugin

update private submodule

remove emacs directory-locals file

remove unused files

emacs: disable JSON to Elisp bytecode conversion in lsp-booster

emacs: speed up committing with magit (remove difftastic)

linde: configure forgejo/gitea actions runner

update flake inputs

emacs: remove magit-todos

emacs: remove ultra-scroll override (now in epkgs)

emacs: replace ace-link with link-hint

emacs: optimise startup

emacs: optimise LSP setup with emacs-lsp-booster

marvin: set hostname values

emacs: monitor macOS system plist to switch dark/light mode

emacs: remove unnecessary native-comp cache settings

neovim: fix startup error (missing cmp)

emacs: load dark theme on startup if OS dark mode enabled

emacs: remove call to mac-mouse-whell-mode

fish: disable shell level in prompt

fish: remove hydro prompt configuration

emacs: remove stimmung-themes

remove tabnine

emacs: get PATH from shell on darwin

remove aider configuration

update elgit input

linde: update postfix configuration structure

update packages submodule

fix oops

nix: add nixf-diagnose

update packages submodule

remove unused expressions/arguments

marvin: remove Emacs from dock

refactor to avoid triggering unused code analysis

nix: add nixf-tidy to path

fish: switch to tide prompt

emacs: remove eshell aliases for npx commands

emacs: fix incorrectly-updated import

emacs: remove script for raycast

fish: enable themed colours from ls with vivid

fish: remove dus function (use dirstat-rs)

emacs: use direct symlinks for configuration

shell: enable colours in ls

xresources: remove

i3: remove

zed: remove unused argments

marvin: enable zed-editor configuration

fish: enable language server

fish: use plugin for more extensive !-history commands

fish: store config in out-of-store symlink

fish: refactor plugin loading

emacs: fix error when starting language servers with eglot

update package submodule

fish: use Zed as editor if inside a Zed terminal

flake.lock: Update

git-server: enable redirect from old domain

flake.lock: Update

update private submodule

update packages submodule

remove enchant override

remove xcp (broken build on darwin)

update ssh configuration schema

move font configuration to system level

flake.lock: Update

flake.lock: Update

linde: remove ineffective auto-upgrade update-input workaround

linde: update caddy plugins hash

linde: log golink in to tailscale manually

update flake inputs

linde: add IPv4 address for paperless container

direnv: fix TMPDIR mangling

update searchix input

linde: increase searchix timeouts

update searchix input

prefect: update autologin user

prefect: update hardware configuration

bare-metal: install xfs utilties

bare-metal: switch to exfatprogs (there's an in-kernel module now)

add settings for zed

prefect: remove /mnt/games

linux: enable nixos-rebuild-ng by default (only broken for linde)

avoid nix warnings about restricted configuration

update private submodule

use xcp in place of cp

gnupg: update agent options structure

web: update firefox-dev profile schema

fix .envrc TMPDIR complaint

update prefect home-manager configuration name

update private submodule

nvidia-gpu: use modern settings for RTX GPUs

prefect: update hm settings after re-install

ui: update reference to firefox KDE plasma integration

ui: remove non-darwin package setup

ui: remove falkon

flake: ensure home-manager has access to NUR packages

nix: ensure nix-command and flakes are enabled

update private submodule

prefect: remove non-flake import

linde: add ssh key for prefect

change my user name

prefect: reinstall

add basic install ISO generation

emacs: remove shadowed magit-status keybinding

workaround nix fetchGit issue

linde: fix paths to other files

linde: add fish to laminar PATH

re-arrange per-host files

shell: add alias to remove first line

shell: remove incorrect alias

shell: remove unused ls aliases

shell: remove walk

fix flake dev shell

emacs: find file in project if in project

emacs: remove irrelevant comment

emacs: workaround issue with prescient on close

darwin: avoid recompiling emacs

set branch for submodules

update inputs

pin searchix input whilst investigating issues

update personal flake inputs

linde: fix autoUpgrade with --update-input

linde: fix typo in stable searchix configuration

dev/base: remove unused tools

linde: update nix-package flake lockfile on Saturday

update packages submodule

linde: inline unnecessary variable declaration

linde: stop papers container failing to renew TLS certificates

linde: add stable searchix instance

reformat nix files

fix build failures of inputs with overridden nixpkgs input

git-server: remove obsolete alias for legit

emacs: add more typical keybinds for common actions

emacs: remove treemacs

emacs: remove dired-git-info

emacs: use easier keybinds for common project actions

update flake inputs

update flake inputs

neovim: revert to default theme for dark/light support

emacs: remove minuet

dev/base: make justfiles also have a tab width of 2

emacs: remove eyebrowse

remove pre-commit

emacs: open magit when switching projects by default

remove nix-index-database

update flake inputs and submodule

remove yazi

aider: remove package (update imperatively when deps fixed)

emacs: don't scan js map files for TODOs

dev: add virtual host for hugo

dev: add virtualhost for x-hain website

darwin: fix dns server port clash

neovim: disable nixvim manpage generation

combine local overlays

remove treefmt-nix

flake: remove specialArgs

flake: remove flake-utils

nix: remove registry pinning

nix: remove unused variable

nix: remove nil

remove now-irrelevant editorconfig

re-organise flake inputs (and de-duplicate nixpkgs)

marvin: show emacs in dock

emacs: set formatter for SQL files

update personal submodule

linde: add nix-build-uncached to laminar service path

linde: add system service to update home-manager automatically

server: add zed-editor remote server

marvin: remove unnecessary definition of SSH_AUTH_SOCK

import nixvim module on all systems

update nix-index-database flake module import

update flake inputs

darwin: remove emacs' withNativeCompilation override

marvin: show downloads folder in dock

marvin: use non-qualified hostname to connect to linde

marvin: remove linux-builder

switch flake to use nixos-rebuild-ng

update searchix input

linde: re-enable flake input updates

linde: remove old direnv roots

linde: fix containers dying

linde: use searchix overlay

emacs: enable language server for justfiles

linde: remove questioning comments

emacs: remove format-all

darwin: remove maid

update flake inputs

emacs: avoid commit hooks printing colours

emacs: enable formatting of sql files with sqlfluff

golang: add gofumpt (stricter gofmt)

unset executable flag on fish function file

golang: remove some unused tools

add pre-commit hooks

only run dnsmasq for dev on darwin

darwin: use nix generator for maxfiles launch daemon

format toml, fish and md files via treefmt

use treefmt-nix

flake: simplify inputs handling

Use upstream angrr

remove deploy-rs

switch to nixfmt

reformat all nix code

update glitchtip settings

remove ntfy virtual host

dev: remove static asset handling for searchix

enable angrr on darwin

dev: add auth.localhost virtual host

linde: remove autoUpgrade flags (incompatible with nixos-rebuild-ng)

enable .env overrides

remove emacs-overlay

linde: remove ntfy setup

linde: fix paperless startup error

dev/base: expand allowlist for direnv files

git: ignore Zed editor-specific files

shell: update c, alias to point to current repository

update inputs

update binary cache secret

linde: fix tailscale exit node

linde: add workaround for SSH port blocking

git: don't show diffs in commit buffer

update inputs

update submodule URLs

emacs: optimise TRAMP configuration

linde: enable virtual host for new go subdomain

remove dex setup (replaced with rauthy)

linde: disable secondary mode

linde: enable tailscale SSH

use tailscale domain for SSH to avoid port blocking

setup forgejo-actions-runner for codeberg.org/opia

linde: update ts-domain

add pwgen-secure to base system configuration