Naomi Rose roselint

GNU/Linux System Hardening Techniques

Introduction

System hardening is an essential security practice for GNU/Linux environments.

This short guide outlines key hardening techniques that reduce attack surface and enhance overall security posture in Debian-based systems.

File Permission Controls

Git-crypt Setup Guide for Secure Repositories

For developers using git with sensitive data who need better security than just a private repository. Here's a guide to transparent git encryption with git-crypt that ensures data-at-rest and data-in-transit encryption. Perfect for use with note taking apps like Obsidian and Logseq.

Key Benefits

Transparent encryption: Files are automatically encrypted when pushed, decrypted when pulled
Selective encryption: Choose which files or directories to encrypt
Cloud-provider agnostic: Works with any git host (GitHub, GitLab, Bitbucket, etc.)
Perfect for note-taking apps: Seamlessly encrypt Obsidian vaults, Logseq graphs, or any markdown-based notes

Windows 11 Pro (Redux)

-Install from bootable USB drive

Set up new user
- Unable to proceed without signing in to Microsoft
- New user has autogenerated username
- Create admin user (local account)
- Delete original user account
- Create a new local user account and specify the username nomi
Delete admin account

Docusaurus-style admonitions with GitHub Flavored Markdown and GitHub Emoji shortcodes

Source

> :memo: **NOTE**
>
> Some **content** with _Markdown_ `syntax`. Check [this `api`](#).

> :bulb: **TIP**

VS Code keybindings

Emacs cross-compatibility

Extension:

lfs.vscode-emacs-friendly

Copied docs

‎‎

	[*]
	charset = utf-8
	end_of_line = lf
	indent_size = 2
	indent_style = space
	insert_final_newline = true
	max_line_length = 79
	trim_trailing_whitespace = true

	[*.py]

	# My defaults for markdownlint
	# https://gist.github.com/nomicode/fecf294dd1e1abdefc8ea31bb9b57eb9/

	default: true

	# Disables rules that may conflict with Prettier
	# https://github.com/DavidAnson/markdownlint/blob/main/style/prettier.json
	extends: markdownlint/style/prettier

	# Line length

	# My defaults for EditorConfig
	# https://gist.github.com/nomicode/8ac796041f358dd42c638dfe4c93ed2

	# See also:
	# - https://github.com/editorconfig/editorconfig/wiki/EditorConfig-Properties

	root = true

	[*]
	charset = utf-8

	# install bluetooth tools
	sudo apt-get install --no-install-recommends bluetooth

	# find MAC address (needs to be discoverable)
	hcitool scan

	# ping it
	sudo l2ping -c 1 12:34:56:78:90

	# Connect by MAC