2 commits

Author	SHA1	Message	Date
Dan	bcfdf962f3	Disable security modules pending fixes, patch ssh-hardening ... ssh-hardening.nix had fatal bugs: - UsePAM=false breaks NixOS SSH auth - Protocol=2 deprecated, crashes modern sshd - AllowUsers defaulted to ["admin"], locks out all users Partial fixes applied but module still unsafe to enable. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-05 17:09:07 -08:00
Dan	ab5aebb161	Phase 3: Extract and sanitize Matrix platform modules from ops-base ... Extracted modules: - Matrix homeserver (matrix-continuwuity.nix) - mautrix bridges (slack, whatsapp, gmessages) - Security modules (fail2ban, ssh-hardening) - Development services module - Matrix secrets module All modules sanitized to remove personal information: - Domains: example.com, matrix.example.org - IPs: 10.0.0.x, 203.0.113.10 - Paths: /home/user, /path/to/ops-base - Emails: admin@example.com Configuration: - Updated flake.nix with sops-nix and nixpkgs-unstable - Updated hosts/ops-jrz1.nix to import all extracted modules - Added example files (secrets, minimal config) - Generated flake.lock Generated with Claude Code - https://claude.com/claude-code	2025-10-13 14:51:14 -07:00