𝓙𝓾𝓵𝓲𝓸

theraw pushed to master at theraw/The-World-Is-Yours

2026-06-09 01:11:21 -04:00

f77d853118 package update

theraw pushed to master at theraw/The-World-Is-Yours

2026-06-08 23:10:20 -04:00

6dfd126a85 package update

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-25 18:05:19 -04:00

a999551d22 Version update

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-25 17:48:28 -04:00

1dd615cf97 update version

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-25 17:21:06 -04:00

bc8ec6aabe version update

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-25 16:34:26 -04:00

cfde3b7033 version update

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-23 13:57:25 -04:00

bba6a61727 package changes

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-20 00:47:39 -04:00

61d2ca2df8 Service adjustments

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-15 14:22:17 -04:00

a8966ac108 systemd: switch to deny-everything-by-default (TemporaryFileSystem=/) with explicit BindReadOnlyPaths + BindPaths allowlist

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-15 14:19:20 -04:00

9e8d14bd5d systemd: hardening — ProtectSystem=strict, ReadOnlyPaths for /raweb + /srv + letsencrypt, ReadWritePaths for /run + logs; explicitly skip MemoryDenyWriteExecute + ~@resources (known to break LuaJIT/setrlimit)

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-15 13:22:05 -04:00

4e04e27682 README: bump nginx version 1.30.0 -> 1.31.0

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-15 12:51:07 -04:00

b7b4447afc compile temp paths into binary, all tmpfs-backed (/run/nginx/temp/)

theraw pushed to master at theraw/The-World-Is-Yours

2026-05-15 09:49:55 -04:00

0b9651ca05 Systemd Patches + CVE Patch

theraw pushed to master at theraw/The-World-Is-Yours

2026-04-26 20:16:39 -04:00

e82f9f8009 Ubuntu 26.04 Release

theraw pushed to master at theraw/The-World-Is-Yours

2026-04-26 01:26:14 -04:00

8a14911502 Ubuntu 26.04 Release

theraw pushed to master at theraw/The-World-Is-Yours

2026-04-26 01:19:31 -04:00

be3fb4a68f systemd: drop @resources from SystemCallFilter blocklist (nginx workers need prlimit64); set SystemCallErrorNumber=EPERM

theraw pushed to master at theraw/The-World-Is-Yours

2026-04-26 01:10:46 -04:00

a9a9981ae5 ci: ship aws-lc/LuaJIT/modsec at original paths so rpath resolves on target

theraw pushed to master at theraw/The-World-Is-Yours

2026-04-26 00:55:08 -04:00

17685466c5 ci: add nx-component-upload + edit privs, strip workflow comments, shorter step names

theraw pushed to master at theraw/The-World-Is-Yours

2026-04-26 00:41:51 -04:00

78fe5d2d39 Ubuntu 26.04 Release

theraw pushed to master at theraw/The-World-Is-Yours

2026-04-26 00:28:33 -04:00

8b25532d05 Ubuntu 26.04