diff options
| author | Craig Jennings <c@cjennings.net> | 2026-06-23 23:39:29 -0400 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-06-23 23:39:29 -0400 |
| commit | 0c4f1036d7e5dcf98534b27785ce2e4b4ab0031d (patch) | |
| tree | 134ad30eeba6ce94054060b5c851c83085f86f34 | |
| parent | 3debb3cb8ca854b225ae66b40dcabdc2e94ebd6b (diff) | |
| download | archsetup-0c4f1036d7e5dcf98534b27785ce2e4b4ab0031d.tar.gz archsetup-0c4f1036d7e5dcf98534b27785ce2e4b4ab0031d.zip | |
docs(todo): close security dashboard command (shipped)
| -rw-r--r-- | todo.org | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -686,11 +686,12 @@ Priority C because snapshot-based testing meets current needs :END: Practical guidelines for working in public spaces -** TODO [#C] Build security dashboard command :solo: +** DONE [#C] Build security dashboard command :solo: +CLOSED: [2026-06-23 Tue] :PROPERTIES: :LAST_REVIEWED: 2026-05-21 :END: -Single command shows: encryption status, firewall status, open ports, running services +Shipped 2026-06-23 as dotfiles commit =1b9b205=: =security-status= (=common/.local/bin=, on PATH). Read-only dashboard showing disk encryption (LUKS *and* ZFS native — the fleet runs ZFS, so a LUKS-only check would have falsely reported "no encryption"), ufw state, externally-reachable ports (counts all listening, lists only the non-loopback exposures), and running/failed service counts. Command lookups are env-overridable; parsing covered by unit tests against canned output. New file, so ratio needs =git pull && make stow hyprland= to link it. ** VERIFY [#C] Evaluate modern CLI tool replacements :PROPERTIES: |