From 88bce722d5d22e46e3985aebdcdfdb48a8d6224d Mon Sep 17 00:00:00 2001 From: Colin Date: Sun, 14 May 2023 02:08:09 +0000 Subject: [PATCH] TODO: validate duplicity backups --- TODO.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/TODO.md b/TODO.md index d9359dfef..322edd6b0 100644 --- a/TODO.md +++ b/TODO.md @@ -10,13 +10,19 @@ - will make it easier to test new services? ## improvements: -### security +### security/resilience +- validate duplicity backups! +- encrypt more ~ dirs (~/archives, ~/records, ..?) + - best to do this after i know for sure i have good backups - have `sane.programs` be wrapped such that they run in a cgroup? - at least, only give them access to the portion of the fs they *need*. - Android takes approach of giving each app its own user: could hack that in here. +- canaries for important services + - e.g. daily email checks; daily backup checks ### perf - why does nixos-rebuild switch take 5 minutes when net is flakey? + - trying to auto-mount servo? - something to do with systemd services restarting/stalling - maybe wireguard & its refresh operation, specifically?