csd4ni3l
released this
2026-09-30 20:31:06 +02:00
| 93 commits to main since this release
- add soulseek MCP container to homelabvm, kept on the openwebui network so it never faces the internet
- build slsk_mcp from source with a small dest-dir patch
- add navidrome MCP container to homelabvm, reading its secrets from rendered sops templates
- lock down sshd further: 30s login grace, MaxStartups throttling, keepalives, no forwarding or tunnelling
- bind degoog to localhost only (127.0.0.1:65001) instead of every interface
- remove the unused checkmate container and its secrets
- framework 16 now loads only redistributable firmware and stops force-loading thunderbolt
- more firefox hardening: RFP pbmode and letterboxing, memory-only cache, no NOCERT database, DRM off
- drop canvasblocker, RFP already covers it
- swap qalculate for gnome-calculator
- move noctalia greeter under services.displayManager, which clears the deprecation warning
- disable the touchpad whenever an external mouse is plugged in
- new dev tools: bun, gitleaks, sqlc and gosec
- dnsutils added to the common CLI set
- pangolin bumped to 1.23.0
- flake substituters trimmed to the caches actually in use
- README overhauled
- flake.lock updated
Downloads