Go to file

Matej Janežič 620acf68a6 feat: harden ephvm-run.sh

reject running as root, bind ssh hostfwd to 127.0.0.1 only,
reject commas in --mount and claude paths (prevents -virtfs csv
injection), pre-check --mount path exists, enable qemu seccomp
sandbox.

2026-04-23 21:28:51 +00:00

features

feat: set XDPW_PERSIST_MODE="permanent"

2026-04-23 23:14:45 +02:00

flake

feat: self-package claude-code

2026-04-16 22:59:01 +02:00

hosts

feat: add plymouth option to bootloader

2026-04-21 22:43:13 +02:00

lib

chore: run lint & format

2026-04-13 23:04:16 +02:00

packages

chore: update claude-code to v2.1.116

2026-04-22 00:08:31 +02:00

scripts

feat: harden ephvm-run.sh

2026-04-23 21:28:51 +00:00

secrets

feat: filedrop via sftp

2026-04-09 13:44:28 +02:00

.envrc

feat: add direnv and direnv setup

2026-02-20 23:15:34 +01:00

.git-blame-ignore-revs

chore: blame ignore 77236af589

2026-04-21 22:11:33 +02:00

.gitignore

feat: initial commit

2026-02-20 14:58:32 +01:00

.pre-commit-config.yaml

feat: improve scripts setup (lint, format, refactor)

2026-03-21 17:38:19 +01:00

.sops.yaml

feat: wire up sops for cube and reencrypt secrets

2026-03-30 01:25:43 +02:00

flake.lock

chore: bump lockfile

2026-04-22 00:10:04 +02:00

flake.nix

feat: switch to unstable channel

2026-04-05 14:43:26 +02:00

justfile

feat: improve just provison to wait for reboot

2026-03-30 01:29:24 +02:00

nix.nix

feat: add harmonia and nix-community substituters

2026-04-02 00:12:06 +02:00

README.md

feat: initial commit

2026-02-20 14:58:32 +01:00

statix.toml

feat: setup statix linter

2026-02-22 12:10:24 +01:00

README.md

matej.nix