Dotsetup security

[funnicus]

Manage:
firewall
SSH config
GPG
password manager CLI
disk encryption checks
automatic updates
browser hardening
2FA recovery note reminders
secret scanning

Tools:
gitleaks
trufflehog
age
sops
pass/bitwarden CLI
ufw/firewalld
fail2ban

dotsetup security check:
✓ firewall enabled
✓ ssh password login disabled
✓ git secrets scan installed
✓ gpg signing works
✓ no obvious private keys in repos
✓ system updates available