Security

Although I like making it look as nice as possible, these dotfiles also try to be private and secure. This is a journey, not a destination, and I am open to any input.

🛡️ Measures

• Manually keeping system up to date using the OS package manager. I use Arch, btw so I run yay -Syyu every day.

• Malware scanning and database updating (clamav)

• Firewall (ufw)

• Ban IPs (fail2ban)

• Using Signal (when possible)

• Hosting API keys in a private repo

• I could install the hardened Linux kernel, but that might be slightly pedantic...

• Port scanning (nmap, rustscan)