Commit Graph

Select branches

Hide Pull Requests

alert-verify

alerting-setup

branding

compose-build

compose-commands

compose-example

config-clarity

denyall-consequences

detect-categories

docker

github-mirror

heartbeat-credential

identities-only

initial

install-key

keep-the-finding

key-readable

main

name-the-guard

nginx-area

no-emdash

refusal-status

reject-unknown-args

review-and-windows

secrets-off-argv

stable-section-name

trust-host

unhardened-host

untrusted-text

url-charset

#1

#10

#11

#12

#13

#14

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#3

#4

#5

#6

#7

#8

#9

Mono Color

• 31638ff75b Merge pull request 'Name /etc/nginx in alerts, and say both reasons known_hosts changes' (#28) from nginx-area into main main branderson 2026-10-15 16:10:13 -07:00
• 761ce56b14 Name /etc/nginx in alerts, and say both reasons known_hosts changes nginx-area branderson 2026-10-15 15:50:24 -07:00
• 9c61a28e86 Merge pull request 'Say what changed, hold alerts during expected changes, and shorten the commands' (#27) from review-and-windows into main branderson 2026-10-15 15:40:54 -07:00
• ed2a843406 Say what changed, hold alerts during expected changes, and shorten the commands review-and-windows branderson 2026-10-15 15:09:56 -07:00
• fe9db52f68 Merge pull request 'Describe how the GitHub mirror shows the wordmark' (#26) from github-mirror into main branderson 2026-10-14 17:32:04 -07:00
• 50f0f6980f Accept the GitHub mirror's form of the attribution link github-mirror branderson 2026-10-14 16:25:03 -07:00
• 674d77d788 Say how the GitHub mirror shows the wordmark branderson 2026-10-14 16:24:58 -07:00
• aa4d7c9207 Merge pull request 'Refuse an argument this copy does not know, rather than ignoring it' (#25) from reject-unknown-args into main branderson 2026-09-03 12:01:41 -07:00
• 4b700a24cc Refuse an argument this copy does not know, rather than ignoring it reject-unknown-args branderson 2026-09-03 12:00:45 -07:00
• 051c096c0d Merge pull request 'Keep the cycle that found something, past the quiet one after it' (#24) from keep-the-finding into main branderson 2026-09-03 11:47:17 -07:00
• f86a6b5c75 Keep the cycle that found something, past the quiet one after it keep-the-finding branderson 2026-09-03 11:27:36 -07:00
• df590bf8c9 Merge pull request 'Let the entrypoint run one command, and say so for every command' (#23) from compose-commands into main branderson 2026-08-29 16:19:16 -07:00
• 21ebd4709e Let the entrypoint run one command, and say so for every command compose-commands branderson 2026-08-29 16:00:38 -07:00
• aec0100ce6 Merge pull request 'Tell the kinds of change apart, instead of counting them together' (#22) from detect-categories into main branderson 2026-08-29 15:29:52 -07:00
• e41cc06ecc Tell the kinds of change apart, instead of counting them together detect-categories branderson 2026-08-29 15:13:57 -07:00
• 551e814f81 Merge pull request 'Keep the push URL out of the compose file, since it is a credential' (#21) from heartbeat-credential into main branderson 2026-08-29 14:06:55 -07:00
• 74761e0376 Keep the push URL out of the compose file, since it is a credential heartbeat-credential branderson 2026-08-29 14:00:04 -07:00
• 124e72afe8 Keep the push URL out of the compose file, since it is a credential unhardened-host branderson 2026-08-29 14:00:04 -07:00
• a837dd7255 Merge pull request 'Harden the host path, and describe the risk this actually carries' (#20) from unhardened-host into main branderson 2026-08-29 13:54:03 -07:00
• 26d29e92f2 Harden the host path, and describe the risk this actually carries branderson 2026-08-29 13:07:47 -07:00
• 1012abe6fa Merge pull request 'Drop the em-dashes, and stop the ntfy section growing' (#19) from no-emdash into main branderson 2026-08-29 01:52:42 -07:00
• cb84f51944 Drop the em-dashes, and stop the ntfy section growing no-emdash branderson 2026-08-29 01:44:24 -07:00
• 44d9a88fd1 Merge pull request 'Keep the secrets off the command line, and state what this holds' (#18) from secrets-off-argv into main branderson 2026-08-29 01:28:20 -07:00
• c5a04ea89b Keep the secrets off the command line, and state what this holds secrets-off-argv branderson 2026-08-29 01:21:10 -07:00
• b9221c4dba Merge pull request 'Warn that deny-all takes unrelated notifications down with it' (#17) from denyall-consequences into main branderson 2026-08-29 01:00:28 -07:00
• b2e578c7e1 Warn that deny-all takes unrelated notifications down with it denyall-consequences branderson 2026-08-29 00:16:30 -07:00
• 40ebbecda4 Merge pull request 'Say how to close the ntfy topic and set the Kuma monitor up' (#16) from alerting-setup into main branderson 2026-08-29 00:01:47 -07:00
• 03e5617d24 Say how to close the ntfy topic and set the Kuma monitor up alerting-setup branderson 2026-08-28 23:17:28 -07:00
• aed2a2b2fa Merge pull request 'Carry the dejima marks, and say who owns them' (#15) from branding into main branderson 2026-08-28 23:07:09 -07:00
• d30a5b8d8e Carry the dejima marks, and say who owns them branding branderson 2026-08-28 22:58:06 -07:00
• 5f0e853eae Merge pull request 'Rebuild the image, since nothing else will' (#14) from compose-build into main branderson 2026-08-28 22:15:34 -07:00
• 9d7d82c6d2 Rebuild the image, since nothing else will compose-build branderson 2026-08-28 22:14:43 -07:00
• d87e8d5e6d Merge pull request 'Treat the report as what it is, and cut the setup prose' (#13) from untrusted-text into main branderson 2026-08-28 22:05:48 -07:00
• a21be2e4b4 Treat the report as what it is, and cut the setup prose untrusted-text branderson 2026-08-28 21:39:47 -07:00
• 5c3f9c7c2e Merge pull request 'Call it dejima-guard, not the watcher' (#12) from name-the-guard into main branderson 2026-08-28 21:09:29 -07:00
• 55fd8d2562 Call it dejima-guard, not the watcher name-the-guard branderson 2026-08-28 21:00:50 -07:00
• 9ea1fbaa85 Merge pull request 'Accept the URLs this project tells you to use' (#11) from url-charset into main branderson 2026-08-28 21:01:50 -07:00
• 179498ff0e Accept the URLs this project tells you to use url-charset branderson 2026-08-28 20:54:08 -07:00
• 95efc90497 Merge pull request 'Check the guard can read its own key, and say so when it cannot' (#10) from key-readable into main branderson 2026-08-28 20:48:13 -07:00
• f92ef81250 Check the guard can read its own key, and say so when it cannot key-readable branderson 2026-08-28 20:36:24 -07:00
• 4ea3827188 Merge pull request 'Record the devbox host key, and name both machines in alerts' (#9) from trust-host into main branderson 2026-08-28 20:21:33 -07:00
• 01be9885ef Record the devbox host key, and name both machines in alerts trust-host branderson 2026-08-28 20:17:30 -07:00
• 969d50e373 Merge pull request 'Read the refusal instead of the status of the thing that refused' (#8) from refusal-status into main branderson 2026-08-28 19:56:36 -07:00
• 00dc315d8e Read the refusal instead of the status of the thing that refused refusal-status branderson 2026-08-28 19:35:59 -07:00
• 19f5c8b957 Read the refusal instead of the status of the thing that refused stable-section-name branderson 2026-08-28 19:35:59 -07:00
• 385ed1e9e3 Merge pull request 'Name the devbox section rather than numbering it' (#7) from stable-section-name into main branderson 2026-08-28 19:16:36 -07:00
• 66c03d6c02 Name the devbox section rather than numbering it identities-only branderson 2026-08-28 18:12:56 -07:00
• 8badca1df1 Merge pull request 'Offer only the guard's key, or the restriction is decorative' (#6) from identities-only into main branderson 2026-08-28 18:01:08 -07:00
• e7daa5c53b Offer only the guard's key, or the restriction is decorative branderson 2026-08-28 17:59:57 -07:00
• 28117389c6 Merge pull request 'Install the guard's key with its restriction attached, in one step' (#5) from install-key into main branderson 2026-08-28 17:54:37 -07:00
• edeae12706 Install the guard's key with its restriction attached, in one step install-key branderson 2026-08-28 17:45:37 -07:00
• 4471bf74ce Merge pull request 'Notice when an alert does not arrive, and stop pasting a fake token' (#4) from alert-verify into main branderson 2026-08-28 17:39:45 -07:00
• 131a29905c Notice when an alert does not arrive, and stop pasting a fake token alert-verify branderson 2026-08-28 17:01:17 -07:00
• a40e3da41a Merge pull request 'Say which machine each setting is about, and stop defaulting to root' (#3) from config-clarity into main branderson 2026-08-28 16:48:22 -07:00
• 9c71beeea2 Say which machine each setting is about, and stop defaulting to root config-clarity branderson 2026-08-28 16:44:12 -07:00
• 3e34eec29f Merge pull request 'Ship the compose file as an example, so a bare up cannot start it' (#2) from compose-example into main branderson 2026-08-28 16:22:29 -07:00
• 0994b24347 Ship the compose file as an example, so a bare up cannot start it compose-example branderson 2026-08-28 16:18:48 -07:00
• 2236681139 Merge pull request 'Run in a container, for a host that has a fleet of them and no timer' (#1) from docker into main branderson 2026-08-28 16:11:03 -07:00
• 58a81b2856 Run in a container, for a host that has a fleet of them and no timer docker branderson 2026-08-28 01:12:05 -07:00
• 89f2896971 The guard, which is the step that makes any of this detection initial Brad Anderson 2026-08-27 23:55:19 -07:00