Fix install script

Add libvirt hook that will prepare the host for GPU passthrough if ne…

Dont use Signal through firejail as it is broken on Wayland (Signal r…

install.sh: forgot to setup /etc/resolv.conf symlink to point to syst…

Add rust-analyzer to the list of regular packages to install

Add nvtop to the list of regular packages to install

install.sh: set mkinitcpio hooks depending on the GPU being used

install.sh: now support multiple GPU vendors

Add syncthing regular package (the systemd user service must be manua…

Remove archlinux-keyring-wkd-sync service from the allow-internet gro…

Add dirmngr service to the allow-internet group, archlinux-keyring-wk…

The auditor service will now wait for the internet to be reachable

Fix indication of which key to use

firejail: allow keepassxc to use the libsecret integration

firejail: nonewprivs is back, and can be disabled on a per-profile ba…

Add lock script which locks the KeepassXC database as well (used to b…

Fix broken link in docs/FIREJAIL.md

Update threat model doc

The chromium sandbox is back for Signal

pacman-sync.service will now wait for the internet to be reachable

journalctl-notify : remove source port from firewall denial notificat…

Fixed wired connection

Add override for systemd-networkd-wait-online to use the --any flag

auditd-notify : report network interfaces put in promiscuous mode

nftables.conf: SSH is not whitelisted anymore from the output chain (…

Update README and mode installation instructions to docs/INSTALL.md

Update README + notifications picture

Improve systemd service failure notify (some errors were not catched …

Fix firefox wrapper to allow additional parameters

Send notifications on firewall denials