mk 9f164f61ef angie(debian): pin VERSION_ID in apt repo URL — needs angie/<ID>/<VERSION_ID>/ (debian/13/dists/trixie/) not angie/<ID>/ (debian/dists/trixie/ -> 404 'no Release file') on trixie; suite stays VERSION_CODENAME ... packages(debian): rm stale /etc/apt/sources.list.d/eza.list + gierens.gpg left by the pre-fix run that used the now-dead apt.fury.io PPA — otherwise 'apt-get update' keeps hitting the 401 forever even though we now install eza from GH releases		2026-07-28 07:11:22 +03:00
..
00-preflight.sh	modules: preflight + core packages (arch pacman + apt, yay, gh-release fallback)	2026-07-28 04:32:38 +03:00
05-create-user.sh	non-interactive --yes: ask() assumes prompt default (no read); timezone defaults UTC; --username implies force-create; create-user name defaults to mk under --yes	2026-07-28 05:21:23 +03:00
10-packages.sh	angie(debian): pin VERSION_ID in apt repo URL — needs angie/<ID>/<VERSION_ID>/ (debian/13/dists/trixie/) not angie/<ID>/ (debian/dists/trixie/ -> 404 'no Release file') on trixie; suite stays VERSION_CODENAME	2026-07-28 07:11:22 +03:00
20-docker.sh	modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)	2026-07-28 05:05:03 +03:00
25-angie.sh	angie(debian): pin VERSION_ID in apt repo URL — needs angie/<ID>/<VERSION_ID>/ (debian/13/dists/trixie/) not angie/<ID>/ (debian/dists/trixie/ -> 404 'no Release file') on trixie; suite stays VERSION_CODENAME	2026-07-28 07:11:22 +03:00
30-shell-zsh.sh	shell-zsh: derive ZSH/ZDOTDIR from $TARGET_HOME unconditionally — ignore inherited $ZSH env var (omz exports it, which pinned paths to the old home e.g. /root while the chown step retargeted to the new user, causing 'insecure completion dirs' owned by the wrong user)	2026-07-28 06:16:45 +03:00
35-nvm.sh	modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)	2026-07-28 05:05:03 +03:00
40-nvim.sh	modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)	2026-07-28 05:05:03 +03:00
50-hardening.sh	hardening(angie): default_server needs a cert on its 443 listener or 'angie -t' fails with 'no ssl_certificate defined' — generate a one-time self-signed dummy (CN=bootstrap-default, 10y) in /etc/angie/ssl so unknown-SNI clients handshake then get 444; mark listen 443 as ssl explicitly	2026-07-28 06:55:31 +03:00
60-sanity.sh	fix(sanity): hostname missing on minimal Arch (not in coreutils) — use uname -n with fallbacks; refresh TLS follow-up to angie-issue	2026-07-28 05:35:40 +03:00