Dotfiles/setup/modules
Amir Alexander Abdelbaki 6ad8d0d488 feat(ansipa): add no_local_users device policy to lock all local account passwords
Adds a new host group policy `no_local_users` that locks the passwords of root
and all local users (UID >= 1000) via `passwd -l`, ensuring only FreeIPA domain
accounts with centrally-managed sudo rules can authenticate and gain elevated
privileges. Leaving the group reverts by unlocking every account tracked in the
state file. Updates docs with group reference entry and Local User Lockdown section.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-20 16:18:48 +02:00
..
Desktop-Environments fixed theming issues 2026-05-19 14:39:29 +02:00
FreeipaAnsible feat(ansipa): add no_local_users device policy to lock all local account passwords 2026-05-20 16:18:48 +02:00
optional-Modules feat(modules): add graphic design, video editing, and audio app modules 2026-05-20 15:47:12 +02:00
core-packages.sh setup: add browser/IDE modules and lynx to core packages 2026-05-18 14:23:43 +02:00
core.sh added udiskie 2025-11-27 18:04:00 +01:00
package-managers.sh setup: fix module scripts and add TUI installer 2026-05-08 10:27:43 +02:00
shell-setup.sh fix(nvim): place airline cyberqueer theme inside rtp so it is auto-discovered 2026-05-19 08:59:50 +02:00