diff options
| author | Craig Jennings <c@cjennings.net> | 2026-06-23 23:39:29 -0400 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-06-23 23:39:29 -0400 |
| commit | 6152acd2853410baa88218f5eb945fed78ff94ff (patch) | |
| tree | ccbf12c2f2038d4f778652bfc8df6cdc3763beb9 /todo.org | |
| parent | d4d70c823fca20b54026499efeda51b51bf77f83 (diff) | |
| download | archsetup-6152acd2853410baa88218f5eb945fed78ff94ff.tar.gz archsetup-6152acd2853410baa88218f5eb945fed78ff94ff.zip | |
docs(todo): close security dashboard command (shipped)
Diffstat (limited to 'todo.org')
| -rw-r--r-- | todo.org | 5 |
1 files changed, 3 insertions, 2 deletions
@@ -686,11 +686,12 @@ Priority C because snapshot-based testing meets current needs :END: Practical guidelines for working in public spaces -** TODO [#C] Build security dashboard command :solo: +** DONE [#C] Build security dashboard command :solo: +CLOSED: [2026-06-23 Tue] :PROPERTIES: :LAST_REVIEWED: 2026-05-21 :END: -Single command shows: encryption status, firewall status, open ports, running services +Shipped 2026-06-23 as dotfiles commit =1b9b205=: =security-status= (=common/.local/bin=, on PATH). Read-only dashboard showing disk encryption (LUKS *and* ZFS native — the fleet runs ZFS, so a LUKS-only check would have falsely reported "no encryption"), ufw state, externally-reachable ports (counts all listening, lists only the non-loopback exposures), and running/failed service counts. Command lookups are env-overridable; parsing covered by unit tests against canned output. New file, so ratio needs =git pull && make stow hyprland= to link it. ** VERIFY [#C] Evaluate modern CLI tool replacements :PROPERTIES: |