- --ascii now accepts optional SIZE parameter (1-20, default 6)
- shader generated from template with scale value
- fixed exclusive_caps for raw camera device

- DNS: mail.lassul.us now points to neoprism
- neoprism: use exim-smarthost.nix with internet-aliases
- mutt: send via neoprism.r instead of prism.r
- riot.nix: remove duplicate exim-smarthost import
- remove krebspage (git repo was lost)

- wiregrill.nix: filter out hosts with null wireguard pubkeys
- backup.nix: remove postgresqlBackup (no postgresql running)

- Remove ubik machine (DNS no longer points to us)
- Remove ubik-host.nix container config
- Remove sqlBackup.nix and mysql-backup module (no databases left)
- Remove usershadow module (was only used by removed exim auth)
- Clean up domsen.nix: remove dead domains, mail, users, backups
- Clean up util.nix: remove unused serveWordpress/serveOwncloud
- Clean up internet-gateway.nix: remove ubik domain routing
- Clean up exim-smarthost.nix: remove dead wordpress alias
- Clean up prism: remove mail.ubikmedia.eu proxy, usershadow

Domains removed (DNS pointed elsewhere):
- ubikmedia.de/eu, apanowicz.de, beesmooth.ch, jarugadesign.de
- jla-trading.com, alewis.de, freemonkey.art, aldonasiech.com
- karlaskop.de, youthtube.xyz, joemisch.com, weirdwednesday.de

Only illustra.de remains active on prism.

Uses services.upower for suspend on critical battery and a lightweight
systemd user service for espeak warnings. Removes krebs.power-action
dependency, special user, and sudo hacks.

Import moved from desktop configs to individual machine configs
(xerxes, ignavia) for explicit control.

- wrap firefox with native messaging hosts (tridactyl-native)
- add tridactylrc with superignore for my.sevdesk.de
- update browsers.nix to use the new firefox package

The libretro Dolphin core fails to initialize shader compiler worker
threads because CreateSharedContext() returns nullptr (libretro API
doesn't support creating additional GL contexts).

This patch disables background shader compilation in libretro builds,
forcing synchronous compilation which works correctly.

video-webcam: stream video/gif files to v4l2loopback with proper
aspect ratio handling (letterboxing instead of cropping)

android-webcam: remove lsmod check that failed in nix wrapper,
use device file checks instead

Uses scrcpy to stream phone camera via v4l2loopback.
Optional --ascii flag enables GPU-accelerated ASCII art filter
via ffmpeg libplacebo shader.

- Demo Disc 2020 (Feb 2020)
- Demo Disc 2021 (Mar 2021)
- Spectral Mall (Aug 2022)
- Flipside Frights (Jan 2025)

Refactored to use shared mk-haunted-ps1.nix builder.
All games run via umu-launcher with GE-Proton.

Add games/ folder with legacyPackages.games exposure.
Uses umu-launcher with GE-Proton for Windows game compatibility.

- Remove exec so cleanup trap runs and kills tor on exit
- Fix SSH wrapper heredoc to use env var instead of unexpanded $SOCKS_PORT
- Add missing else branch for non-Darwin torsocks execution

Allows choosing between faster small models (~40MB) and more accurate
medium (~128MB) or large (~1-2GB) models via -s/--size flag.

- Use Router Advertisements + SLAAC instead of pre-computed IPv6 addresses
- Add RDNSS to advertise DNS64 resolver to containers
- Add PREF64 option to advertise NAT64 prefix (RFC 8781)
- Fix MASQUERADE rule breaking localhost DNS (exclude 127.0.0.0/8)
- Add local-zone for NAT64 reverse DNS to prevent PTR lookup timeouts
- Remove nix-hashlib dependency (no longer needed with SLAAC)

- Add dns64-synthall to synthesize NAT64 addresses even for sites with AAAA
- Add jool-pool4-update service to configure pool4 with host's current IPv4
- Enable IPv4 forwarding for NAT64 translated packets
- Add IPv4 FORWARD and MASQUERADE rules for NAT64 traffic
- Fix krebs.iptables rules to use explicit v4/v6 flags
- Update virtulus container to use fd00:c700:: prefix and local DNS64

- Add extra-container and nix-hashlib flake inputs
- Create container-bridge.nix with ctr0 bridge and Jool NAT64
- Enable container bridge on xerxes
- Update virtulus container to use hostBridge with IPv6

Containers get deterministic IPv6 addresses derived from hostname
and access IPv4 internet via NAT64 translation.

- Add vosk package (offline speech recognition based on Kaldi)
- Streaming STT that reads WAV audio from stdin
- Outputs text as sentences are recognized
- -w flag shows live words on stderr with corrections
- Supports multiple languages (en, de, fr, es, ru, cn, ja)