Zuckerberg 869b6af7f7 Block sandbox access to local network ...

Add nftables forward rules to prevent sandboxed workspaces from
reaching RFC1918 private addresses while allowing public internet
and the host gateway (for DNS/NAT).

2026-02-09 20:16:02 -08:00

..

ca.rsa.4096.crt

Initial prototype for Wireguard based PIA VPN - not quite 'ready' yet

2023-03-08 23:49:02 -07:00

default.nix

Add sandboxed-workspace module for isolated dev environments

2026-02-07 22:43:08 -08:00

pia-openvpn.nix

Refactor imports and secrets. Add per system properties and role based secret access.

2023-04-21 12:58:11 -06:00

pia-wireguard.nix

Upgrade NixOS. Use upstream libedgetpu, frigate, and gasket kernel module. Fix services broken by upgrade.

2024-11-19 21:28:56 -08:00

ping.nix

nixpkgs-fmt everything

2023-04-04 23:30:28 -06:00

sandbox.nix

Block sandbox access to local network

2026-02-09 20:16:02 -08:00

tailscale.nix

restic backups

2023-04-08 21:25:55 -06:00

vpn.nix

Update to nixos 23.11

2024-02-01 21:42:33 -07:00

vpnfailsafe.sh

Rewrite VPN container

2022-05-28 18:54:41 -04:00