bootstrap/main
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • ce5041bc50 todo md master mk 2026-07-28 07:23:10 +0300
  • 9f164f61ef angie(debian): pin VERSION_ID in apt repo URL — needs angie/<ID>/<VERSION_ID>/ (debian/13/dists/trixie/) not angie/<ID>/ (debian/dists/trixie/ -> 404 'no Release file') on trixie; suite stays VERSION_CODENAME mk 2026-07-28 07:11:22 +0300
  • 0cfe10e387 packages(debian): fix eza+starship+zoxide installs - eza: apt.fury.io PPA is dead (401 Unauthorized); install the single binary from the upstream GitHub release tarball (eza_x86_64-unknown-linux-gnu.tar.gz) into /usr/local/bin — no apt repo, system-wide - starship: scrub $ARCH/$PLATFORM from the installer env — our lib/detect.sh exports ARCH=amd64, which the starship installer reuses (it checks ${ARCH-}) and skips its own amd64->x86_64 mapping, producing an unsupported 'amd64-unknown-linux-musl' target. Default bin dir is /usr/local/bin anyway - zoxide: install system-wide (--bin-dir /usr/local/bin) instead of ~/.local/bin — when run as root the default landed in /root (wrong user for the create-user path) and wasn't on $PATH mk 2026-07-28 07:08:04 +0300
  • efdf056352 hardening(angie): default_server needs a cert on its 443 listener or 'angie -t' fails with 'no ssl_certificate defined' — generate a one-time self-signed dummy (CN=bootstrap-default, 10y) in /etc/angie/ssl so unknown-SNI clients handshake then get 444; mark listen 443 as ssl explicitly mk 2026-07-28 06:55:31 +0300
  • 435d66aad2 shell-zsh: derive ZSH/ZDOTDIR from $TARGET_HOME unconditionally — ignore inherited $ZSH env var (omz exports it, which pinned paths to the old home e.g. /root while the chown step retargeted to the new user, causing 'insecure completion dirs' owned by the wrong user) mk 2026-07-28 06:16:45 +0300
  • 94a0bac9f4 hardening(angie): resolve mime.types from whichever path the package ships (angie-bin=/etc/angie, Arch source=/etc/nginx via mailcap dep) — fixes 'angie -t' 'open() mime.types failed' on source path; fallback ships a minimal mime.types; ensure modules/ include dirs exist before glob mk 2026-07-28 06:04:57 +0300
  • 26185978ac hardening(angie): source-angie bridge — symlink /etc/nginx/nginx.conf -> /etc/angie/angie.conf so the _on/targets layout actually loads under the source AUR package's '/usr/bin/nginx' service (angie-bin/Debian already read /etc/angie directly); backup original once mk 2026-07-28 05:59:08 +0300
  • cb0e517a7d hardening(angie): fix 'angie_user: unbound variable' under set -u — init extraction locals to empty; also read source AUR package's /etc/nginx/nginx.conf as alt stock config path mk 2026-07-28 05:57:44 +0300
  • b653191de2 angie(arch): prefer angie-bin (repackaged upstream .deb, instant) over source build; verified http_acme/ssl/v2/v3/realip all compiled in; fall back to aur/angie if bin unavailable mk 2026-07-28 05:53:43 +0300
  • ca8f01083c packages(arch): route byobu through yay (AUR-only); split official vs AUR lists so pacman --needed can't abort on a missing target; as_user prefers TARGET_USER for AUR builds mk 2026-07-28 05:44:45 +0300
  • ff9fc4db4e fix(sanity): hostname missing on minimal Arch (not in coreutils) — use uname -n with fallbacks; refresh TLS follow-up to angie-issue mk 2026-07-28 05:35:40 +0300
  • f7e4bb96d7 fix(zsh plugins): correct clone orgs — zsh-users/zsh-history-substring-search, Aloxaf/fzf-tab (were typos causing github auth prompts) mk 2026-07-28 05:28:20 +0300
  • 146c79a57e docs: Angie built-in ACME (no certbot) section + --yes/--username notes mk 2026-07-28 05:21:23 +0300
  • 8930e7aa76 non-interactive --yes: ask() assumes prompt default (no read); timezone defaults UTC; --username implies force-create; create-user name defaults to mk under --yes mk 2026-07-28 05:21:23 +0300
  • 34137d185e docs: document sudo-user creation + retarget + new flags mk 2026-07-28 05:05:03 +0300
  • e7a9349292 modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree) mk 2026-07-28 05:05:03 +0300
  • 8a516f039c create-user: passwordless sudo user (NOPASSWD, !tty_tickets, 7d cache) + retarget config; --create-user/--username flags mk 2026-07-28 05:05:03 +0300
  • a9fff32255 docs: document apt/pac aliases + Angie config layout mk 2026-07-28 04:50:08 +0300
  • 0116ac60b3 hardening: angie config layout (_on/targets/modules) + sane root config + enable/disable helpers mk 2026-07-28 04:50:08 +0300
  • 247d33ae8a zsh: add distro-guarded apt alias set (apt/apti/aptu/apts/aptsh) mirroring pacman mk 2026-07-28 04:50:08 +0300
  • 3b25d8d4a4 docs: README + gitignore mk 2026-07-28 04:32:38 +0300
  • 8bb8a44dbd zsh config: zshrc, path, aliases (ported from fish), extras, functions, plugins mk 2026-07-28 04:32:38 +0300
  • 5e0e96e8e2 modules: hardening (ssh/ufw/updates/tz/hostname/swap/locale/fail2ban) + sanity report mk 2026-07-28 04:32:38 +0300
  • 9f54745832 modules: zsh+omz+plugins, nvm+node LTS, nvim-minimal config clone mk 2026-07-28 04:32:38 +0300
  • f89aa8505f modules: docker engine+compose v2, angie web server mk 2026-07-28 04:32:38 +0300
  • a9ba810bbc modules: preflight + core packages (arch pacman + apt, yay, gh-release fallback) mk 2026-07-28 04:32:38 +0300
  • 8057fbac4d skeleton: launcher, entrypoint, distro/log/prompt libs mk 2026-07-28 04:32:38 +0300