colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

TODO: validate duplicity backups

Browse Source
This commit is contained in:
Colin
2023-05-14 02:08:09 +00:00
parent 74e3aa02b9
commit 88bce722d5
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
TODO.md
View File

@@ -10,13 +10,19 @@
- will make it easier to test new services? - will make it easier to test new services?
## improvements: ## improvements:
### security ### security/resilience
- validate duplicity backups!
- encrypt more ~ dirs (~/archives, ~/records, ..?)
- best to do this after i know for sure i have good backups
- have `sane.programs` be wrapped such that they run in a cgroup? - have `sane.programs` be wrapped such that they run in a cgroup?
- at least, only give them access to the portion of the fs they *need*. - at least, only give them access to the portion of the fs they *need*.
- Android takes approach of giving each app its own user: could hack that in here. - Android takes approach of giving each app its own user: could hack that in here.
- canaries for important services
- e.g. daily email checks; daily backup checks
### perf ### perf
- why does nixos-rebuild switch take 5 minutes when net is flakey? - why does nixos-rebuild switch take 5 minutes when net is flakey?
- trying to auto-mount servo?
- something to do with systemd services restarting/stalling - something to do with systemd services restarting/stalling
- maybe wireguard & its refresh operation, specifically? - maybe wireguard & its refresh operation, specifically?