Labels Milestones

Search syntax

assignee:<username>	Filter by assigned user
author:<username>	Filter by the author
is:all	All
is:closed	Closed
is:open	Open
mentions:<username>	Filter by mentioned user
modified:[>|<]<date>	Filter by last modified date
review:<username>	Filter by user who reviewed
sort:<by>:[asc|desc]	Sort by: created|comments|updated|deadline

Cancel

New pull request

0 Open 27 Closed 27 All

Label

Show archived labels

All labels No label

chore

desktop

dropped

fix

fleet

networking

security

service

Milestone

All milestones No milestones

Project

All projects No project

Author

All authors

Assignee

All assignees No assignee

lament

Sort

Relevance Newest Oldest Recently updated Least recently updated Most commented Least commented Nearest due date Farthest due date

0 Open 27 Closed 27 All

Label

Clear labels

chore

desktop

dropped

fix

fleet

networking

security

service

Milestone

No milestone

Projects

Clear projects

Assignee

Clear assignees

No assignee

lament

check the phone's termux dotfiles into the repo [ci-skip]

chore

security

#132 by lament was merged 2026-08-29 22:34:38 -05:00

main

rotate phone WG key

chore

security

#125 by lament was merged 2026-08-23 23:31:39 -05:00

main

ssh: restore key-based login via LDAP sshPublicKey, fleet-wide

fix

security

#122 by lament was merged 2026-08-02 00:26:31 -05:00

main

nextcloud, taken for an honest spin: drive.lament.gay lands on minerva

security

service

#121 by lament was merged 2026-08-01 22:57:45 -05:00

main

ldap goes state-only, HM leaves the system config, and four hosts drop the local account

fleet

security

service

#120 by lament was merged 2026-08-01 01:32:07 -05:00

main

sssd rides core: LDAP-sourced identity fleet-wide, additive alongside local lament

fix

security

#119 by lament was merged 2026-07-31 00:19:30 -05:00

main

land pending princ-svc-add fix, svcLdapAdminPassword secret for ldap-tui, niri media keys

fix

security

service

#118 by lament was merged 2026-07-29 21:19:44 -05:00

main

fix svcLdapAdmin seed: simpleSecurityObject is what actually grants userPassword

fix

security

#117 by lament was merged 2026-07-27 17:50:58 -05:00

main

a kadmin/krb-tui toolkit, and ldap-tui gets its own scoped admin bind

security

#116 by lament was merged 2026-07-27 17:14:19 -05:00

main

fail2ban has been deaf for 8 days

fix

security

#114 by lament was merged 2026-07-26 01:01:57 -05:00

main

cal's sieve leg never had a chance: dovecot wants STARTTLS first

fix

security

#113 by lament was merged 2026-07-25 23:39:56 -05:00

main

add SOGo (calendar/contacts) and a two-instance postgres model

security

service

#112 by lament was merged 2026-07-25 18:11:56 -05:00

main

just pki-enroll automates Secure Boot key enrollment; SPNEGO's LDAP lookup gets fixed

fix

security

#110 by lament was merged 2026-07-24 20:34:34 -05:00

main

oidc tower on verdandi: keycloak, the lament realm, web-tier SSO + desktop SPNEGO

security

service

#109 by lament was merged 2026-07-24 16:51:00 -05:00

main

the fleet gets a realm: kerberos + ldap on verdandi, and web + mail SSO onto it

fleet

security

service

#108 by lament was merged 2026-07-24 03:22:08 -05:00

main

sops rework

security

#96 by lament was merged 2026-07-18 00:47:59 -05:00

main

per-host age keys, scoped sops files

security

#95 by lament was merged 2026-07-17 22:45:27 -05:00

main

audit-pt1

fleet

security

#94 by lament was merged 2026-07-17 17:06:53 -05:00

main

trust internal for internal mail

fix

networking

security

#81 by lament was merged 2026-07-10 20:05:29 -05:00

main

lanzaboote has been silently failing to /boot

fix

security

#78 by lament was merged 2026-07-10 16:52:45 -05:00

main