mk efdf056352 hardening(angie): default_server needs a cert on its 443 listener or 'angie -t' fails with 'no ssl_certificate defined' — generate a one-time self-signed dummy (CN=bootstrap-default, 10y) in /etc/angie/ssl so unknown-SNI clients handshake then get 444; mark listen 443 as ssl explicitly		2026-07-28 06:55:31 +03:00
..
00-preflight.sh	modules: preflight + core packages (arch pacman + apt, yay, gh-release fallback)	2026-07-28 04:32:38 +03:00
05-create-user.sh	non-interactive --yes: ask() assumes prompt default (no read); timezone defaults UTC; --username implies force-create; create-user name defaults to mk under --yes	2026-07-28 05:21:23 +03:00
10-packages.sh	packages(arch): route byobu through yay (AUR-only); split official vs AUR lists so pacman --needed can't abort on a missing target; as_user prefers TARGET_USER for AUR builds	2026-07-28 05:44:45 +03:00
20-docker.sh	modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)	2026-07-28 05:05:03 +03:00
25-angie.sh	angie(arch): prefer angie-bin (repackaged upstream .deb, instant) over source build; verified http_acme/ssl/v2/v3/realip all compiled in; fall back to aur/angie if bin unavailable	2026-07-28 05:53:43 +03:00
30-shell-zsh.sh	shell-zsh: derive ZSH/ZDOTDIR from $TARGET_HOME unconditionally — ignore inherited $ZSH env var (omz exports it, which pinned paths to the old home e.g. /root while the chown step retargeted to the new user, causing 'insecure completion dirs' owned by the wrong user)	2026-07-28 06:16:45 +03:00
35-nvm.sh	modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)	2026-07-28 05:05:03 +03:00
40-nvim.sh	modules: target $TARGET_USER (docker group, zsh/nvim/nvm homes, chown tree)	2026-07-28 05:05:03 +03:00
50-hardening.sh	hardening(angie): default_server needs a cert on its 443 listener or 'angie -t' fails with 'no ssl_certificate defined' — generate a one-time self-signed dummy (CN=bootstrap-default, 10y) in /etc/angie/ssl so unknown-SNI clients handshake then get 444; mark listen 443 as ssl explicitly	2026-07-28 06:55:31 +03:00
60-sanity.sh	fix(sanity): hostname missing on minimal Arch (not in coreutils) — use uname -n with fallbacks; refresh TLS follow-up to angie-issue	2026-07-28 05:35:40 +03:00