Skip to content

refactor: harden install, extract shared lib, add seclog-diagnose - install.sh: remove || true from systemctl enable — fails fast on daemon error - install.sh: validate NTFY_URL reachability after config is set - install.sh: cleaner next-steps output - bin/seclog-lib.sh: new shared library with geo_lookup and show_active_connections - bin/seclog: source seclog-lib.sh, remove duplicated geo/connection logic - bin/ssh-login-notify.sh: source seclog-lib.sh, remove duplicated code - bin/seclog-diagnose: new diagnostic script — checks prereqs, config, ntfy, permissions, systemd - config/config.example: remove unused VERIFY_UPDATE_SIGNATURES option#2

Open
arn-c0de wants to merge 1 commit into1.0.1from
fix/install-hardening

Conversation

@arn-c0de
Copy link
Copy Markdown
Owner

@arn-c0de arn-c0de commented May 5, 2026

No description provided.

- install.sh: remove || true from systemctl enable — fails fast on daemon error
- install.sh: validate NTFY_URL reachability after config is set
- install.sh: cleaner next-steps output
- bin/seclog-lib.sh: new shared library with geo_lookup and show_active_connections
- bin/seclog: source seclog-lib.sh, remove duplicated geo/connection logic
- bin/ssh-login-notify.sh: source seclog-lib.sh, remove duplicated code
- bin/seclog-diagnose: new diagnostic script — checks prereqs, config, ntfy, permissions, systemd
- config/config.example: remove unused VERIFY_UPDATE_SIGNATURES option
@arn-c0de arn-c0de self-assigned this May 5, 2026
@arn-c0de arn-c0de added the enhancement New feature or request label May 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant