mk 9f164f61ef angie(debian): pin VERSION_ID in apt repo URL — needs angie/<ID>/<VERSION_ID>/ (debian/13/dists/trixie/) not angie/<ID>/ (debian/dists/trixie/ -> 404 'no Release file') on trixie; suite stays VERSION_CODENAME ...

packages(debian): rm stale /etc/apt/sources.list.d/eza.list + gierens.gpg left by the pre-fix run that used the now-dead apt.fury.io PPA — otherwise 'apt-get update' keeps hitting the 401 forever even though we now install eza from GH releases

2026-07-28 07:11:22 +03:00

..

00-preflight.sh

modules: preflight + core packages (arch pacman + apt, yay, gh-release fallback)

2026-07-28 04:32:38 +03:00

05-create-user.sh

non-interactive --yes: ask() assumes prompt default (no read); timezone defaults UTC; --username implies force-create; create-user name defaults to mk under --yes

2026-07-28 05:21:23 +03:00

10-packages.sh

angie(debian): pin VERSION_ID in apt repo URL — needs angie/<ID>/<VERSION_ID>/ (debian/13/dists/trixie/) not angie/<ID>/ (debian/dists/trixie/ -> 404 'no Release file') on trixie; suite stays VERSION_CODENAME

2026-07-28 07:11:22 +03:00

20-docker.sh

modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)

2026-07-28 05:05:03 +03:00

25-angie.sh

angie(debian): pin VERSION_ID in apt repo URL — needs angie/<ID>/<VERSION_ID>/ (debian/13/dists/trixie/) not angie/<ID>/ (debian/dists/trixie/ -> 404 'no Release file') on trixie; suite stays VERSION_CODENAME

2026-07-28 07:11:22 +03:00

30-shell-zsh.sh

shell-zsh: derive ZSH/ZDOTDIR from $TARGET_HOME unconditionally — ignore inherited $ZSH env var (omz exports it, which pinned paths to the old home e.g. /root while the chown step retargeted to the new user, causing 'insecure completion dirs' owned by the wrong user)

2026-07-28 06:16:45 +03:00

35-nvm.sh

modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)

2026-07-28 05:05:03 +03:00

40-nvim.sh

modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)

2026-07-28 05:05:03 +03:00

50-hardening.sh

hardening(angie): default_server needs a cert on its 443 listener or 'angie -t' fails with 'no ssl_certificate defined' — generate a one-time self-signed dummy (CN=bootstrap-default, 10y) in /etc/angie/ssl so unknown-SNI clients handshake then get 444; mark listen 443 as ssl explicitly

2026-07-28 06:55:31 +03:00

60-sanity.sh

fix(sanity): hostname missing on minimal Arch (not in coreutils) — use uname -n with fallbacks; refresh TLS follow-up to angie-issue

2026-07-28 05:35:40 +03:00