Releases: deadhedd/openbsd-toolkit
v0.3 – Configuration & Test Coverage Completion
This release finalizes the test and configuration coverage across all scripts and services.
Highlights:
Full system audit complete — All configuration scripts were manually reviewed and updated to ensure every test passes from a clean install.
Expanded test coverage:
test_system.sh now verifies IP assignment, SSH hardening, and root shell history behavior.
test_github.sh checks for proper GitHub repo cloning and config.
test_obsidian_git.sh now contains dozens of additional checks, including SSH directory and key validation, vault structure, post-receive hooks, and safe.directory settings.
Reliable test flow — test_all.sh now runs all suites even if one fails.
Setup alignment — Every new test is backed by working setup code, ensuring out-of-the-box success.
No breaking changes — simply re-run the setup and test suites to apply and verify the updated config.
v0.2.1 – Usability Improvements
This release focuses on user experience and maintainability:
Logging Improvements: All test scripts now support --log flags with sensible defaults. Logs are saved only on failure unless forced.
User Setup Fixes: Both git and obsidian users are now created with blank passwords. A related bug in setup_obsidian_git.sh has been resolved.
Refactor Cleanup: Missing logic was moved from setup_all.sh into setup_obsidian_git.sh, and the test scripts were updated to match.
These changes make it easier to debug and maintain the system, especially when running automated setups or reapplying configurations.
v0.2 - modular setup and test suite
This release introduces a fully modular architecture for setting up and validating an OpenBSD server configured to host a Git-backed Obsidian vault.
Highlights:
Split monolithic scripts into modular components:
setup_system.sh, setup_obsidian_git.sh, setup_github.sh
test_system.sh, test_obsidian_git.sh, test_github.sh
New wrapper scripts:
setup_all.sh and test_all.sh for full automation
Environment variable support preserved across all layers
Safer deployment: deploy key no longer required to be committed
Simplified maintenance and clearer separation of concerns
v0.1.1 – Strict Hostname Format & Test Suite Enhancements
This release obsoletes v0.1 and tightens up our network-configuration testing to prevent silent reboot failures.
What’s new in v0.1.1 (2025-06-23):
Obsoletes v0.1: All functionality now consolidated into v0.1.1 scripts.
Strict hostname format validation
First line of /etc/hostname.${INTERFACE} must be exactly inet <IP> <NETMASK>
Second line must be exactly !route add default <GATEWAY>
Anchored regex checks to catch any stray netmask keyword or extra whitespace
Retained all existing tests for user setup, shells, doas policy, DNS, SSH hardening, Git installation, bare-repo structure, and safe-directory flags
v0.1 – Initial public release (setup + test suite)
This is the initial public release of the OpenBSD server setup and test suite for hosting Git-backed Obsidian vaults.
Included Scripts
-
openbsd_server_rebuild_public_v0.1.sh
A setup script that configures a fresh OpenBSD system with:- Static networking and DNS
- Hardened SSH
- User creation and shell setup
- Git install and push-ready bare repo
- Safe directory flags and doas configuration
-
test_openbsd_setup_public_v0.1.sh
A TAP-compatible test script validating the configuration, covering:- User and shell setup
- File permissions and doas policy
- Static network config and DNS
- SSH hardening
- Git install and push access
- Repo structure and safe Git flags
Highlights
- Self-contained, repeatable tests
- Non-destructive, read-only validation
- Fully functional vault hosting setup
Looking to contribute or suggest changes? Open an issue or submit a PR.