Commit Graph

15 Commits

Author SHA1 Message Date
mk
94a0bac9f4 hardening(angie): resolve mime.types from whichever path the package ships (angie-bin=/etc/angie, Arch source=/etc/nginx via mailcap dep) — fixes 'angie -t' 'open() mime.types failed' on source path; fallback ships a minimal mime.types; ensure modules/ include dirs exist before glob 2026-07-28 06:04:57 +03:00
mk
26185978ac hardening(angie): source-angie bridge — symlink /etc/nginx/nginx.conf -> /etc/angie/angie.conf so the _on/targets layout actually loads under the source AUR package's '/usr/bin/nginx' service (angie-bin/Debian already read /etc/angie directly); backup original once 2026-07-28 05:59:08 +03:00
mk
cb0e517a7d hardening(angie): fix 'angie_user: unbound variable' under set -u — init extraction locals to empty; also read source AUR package's /etc/nginx/nginx.conf as alt stock config path 2026-07-28 05:57:44 +03:00
mk
b653191de2 angie(arch): prefer angie-bin (repackaged upstream .deb, instant) over source build; verified http_acme/ssl/v2/v3/realip all compiled in; fall back to aur/angie if bin unavailable 2026-07-28 05:53:43 +03:00
mk
ca8f01083c packages(arch): route byobu through yay (AUR-only); split official vs AUR lists so pacman --needed can't abort on a missing target; as_user prefers TARGET_USER for AUR builds 2026-07-28 05:44:45 +03:00
mk
ff9fc4db4e fix(sanity): hostname missing on minimal Arch (not in coreutils) — use uname -n with fallbacks; refresh TLS follow-up to angie-issue 2026-07-28 05:35:40 +03:00
mk
f7e4bb96d7 fix(zsh plugins): correct clone orgs — zsh-users/zsh-history-substring-search, Aloxaf/fzf-tab (were typos causing github auth prompts) 2026-07-28 05:28:20 +03:00
mk
8930e7aa76 non-interactive --yes: ask() assumes prompt default (no read); timezone defaults UTC; --username implies force-create; create-user name defaults to mk under --yes 2026-07-28 05:21:23 +03:00
mk
e7a9349292 modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree) 2026-07-28 05:05:03 +03:00
mk
8a516f039c create-user: passwordless sudo user (NOPASSWD, !tty_tickets, 7d cache) + retarget config; --create-user/--username flags 2026-07-28 05:05:03 +03:00
mk
0116ac60b3 hardening: angie config layout (_on/targets/modules) + sane root config + enable/disable helpers 2026-07-28 04:50:08 +03:00
mk
5e0e96e8e2 modules: hardening (ssh/ufw/updates/tz/hostname/swap/locale/fail2ban) + sanity report 2026-07-28 04:32:38 +03:00
mk
9f54745832 modules: zsh+omz+plugins, nvm+node LTS, nvim-minimal config clone 2026-07-28 04:32:38 +03:00
mk
f89aa8505f modules: docker engine+compose v2, angie web server 2026-07-28 04:32:38 +03:00
mk
a9ba810bbc modules: preflight + core packages (arch pacman + apt, yay, gh-release fallback) 2026-07-28 04:32:38 +03:00