christoph/flake-nixinator
1
Fork 0
Code Activity

Compare commits

base: christoph/flake-nixinator:5d1791914edf72f1a3a0603c78ea4ee2b36ecaa0
Branches Tags
christoph/flake-nixinator:master
...
compare: christoph/flake-nixinator:master
Branches Tags
christoph/flake-nixinator:master
3 Commits
5d1791914e ... master
Author SHA1 Message Date
christoph 6519ae6625 Home/Nixinator: Update opencode permissions 2026-09-16 11:05:18 +02:00
christoph 2229f79617 Services/Jellyfin: Update to v12.1 2026-09-15 21:38:16 +02:00
christoph 44d832fdda Home/Nixinator: Disable opencode-dcp 2026-09-15 16:31:34 +02:00
2 changed files with 42 additions and 16 deletions
Expand all files Collapse all files
home/christoph/nixinator/default.nix
+41 -15
View File
@@ -281,19 +281,37 @@
"*" = "ask";
"bash" = {
"*" = "ask";
"ls *" = "allow";
"find *" = "ask"; # Don't want find -exec
"file *" = "allow";
"wc *" = "allow";
"grep *" = "allow";
"rg *" = "allow";
"test *" = "allow";
"echo *" = "allow";
"which *" = "allow";
"pwd *" = "allow";
"dirname *" = "allow";
"awk *" = "ask"; # Can modify files
"basename *" = "allow";
"cmp *" = "allow";
"cut *" = "allow";
"df *" = "allow";
"dirname *" = "allow";
"du *" = "allow";
"echo *" = "allow";
"fd *" = "ask"; # Can execute commands
"file *" = "allow";
"find *" = "ask"; # Can execute commands
"grep *" = "allow";
"head *" = "allow";
"ls *" = "allow";
"nl *" = "allow";
"od *" = "allow";
"pwd *" = "allow";
"readlink *" = "allow";
"rg *" = "ask"; # Can execute commands
"sed *" = "ask"; # Can modify files
"sha256sum *" = "allow";
"sha512sum *" = "allow";
"sort *" = "ask"; # Can modify files
"stat *" = "allow";
"tail *" = "allow";
"test *" = "allow";
"tr *" = "allow";
"uniq *" = "ask"; # Can modify files
"wc *" = "allow";
"which *" = "allow";
"xargs *" = "ask"; # Can modify files
"cat *.env" = "deny";
"cat *.env.*" = "deny";
@@ -308,11 +326,19 @@
"nix why-depends *" = "allow";
"nix derivation show *" = "allow";
"nix store ping *" = "allow";
"nix stire diff-closures *" = "allow";
"nix store diff-closures *" = "allow";
"git status *" = "allow";
"git log *" = "allow";
"git branch *" = "ask";
"git check-ignore *" = "allow";
"git diff *" = "allow";
"git log *" = "allow";
"git ls-files *" = "allow";
"git ls-tree *" = "allow";
"git remote *" = "ask";
"git rev-list *" = "allow";
"git rev-parse *" = "allow";
"git stash *" = "ask";
"git status *" = "allow";
};
"external_directory" = {
"/nix/store/**" = "allow";
@@ -337,7 +363,7 @@
};
plugin = [
# "opencode-claude-auth@latest" # https://github.com/griffinmartin/opencode-claude-auth
"@tarquinen/opencode-dcp@latest" # better compacting
# "@tarquinen/opencode-dcp@latest" # better compacting
# "opencode-lmstudio@0.3.1"
# "@slkiser/opencode-quota"
];
system/services/jellyfin.nix
+1 -1
View File
@@ -5,7 +5,7 @@
pkgs,
...
}: let
jellyfinVersion = "10.11.2";
jellyfinVersion = "version-12.1ubu2604";
in {
virtualisation.oci-containers.containers = {
jellyfin = {