diff options
| author | Craig Jennings <c@cjennings.net> | 2026-05-31 14:21:05 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-05-31 14:21:05 -0500 |
| commit | 5e607b2a8b0adf25089e44921ed114380a2bae47 (patch) | |
| tree | ad29a951290c68f981456090efdc9178562af906 | |
| parent | 0d42c3d0a8ea3a58fb55aab768327ade90391e22 (diff) | |
| download | archsetup-5e607b2a8b0adf25089e44921ed114380a2bae47.tar.gz archsetup-5e607b2a8b0adf25089e44921ed114380a2bae47.zip | |
docs: note that Tailscale traffic traverses ufw on ratio
| -rw-r--r-- | CLAUDE.md | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -119,6 +119,7 @@ Full palette reference: `assets/color-themes/dupre/dupre-palette.org` ## Notes - Desktop file overrides go in `dotfiles/hyprland/.local/share/applications/` - MPD is configured but mpv handles audio file associations +- Firewall is ufw (configured in `archsetup`, default-deny incoming, explicit allow list). Tailscale traffic **does** traverse ufw on ratio — a probe from a tailnet IP is still blocked unless a rule covers the port. Don't assume tailnet-only services bypass the firewall; they need an explicit ufw rule like any other. - This machine is **ratio**; **velox** is a laptop. Both run Hyprland (Wayland). archsetup still supports dwm/X11, but no current machine uses it. - Remote repository on cjennings.net - .ai/ is gitignored; living project context is in .ai/notes.org |