From 808006579a54261425553e4f3642cda318dbe7a8 Mon Sep 17 00:00:00 2001
From: Kris Yotam <75515498+krisyotam@users.noreply.github.com>
Date: Thu, 11 Jun 2026 20:05:44 -0500
Subject: [PATCH] wip: emergency backup (power outage risk)

---
 standard/sd-artix/progs.csv    |   1 +
 standard/sd-gentoo/progs.csv   |   1 +
 standard/sd-openbsd/deploy.sh  |  23 ++++++++
 standard/sd-openbsd/manual.tex |   2 +
 standard/sd-openbsd/progs.csv  | 101 +++++++++++++++++++++++++++++++++
 5 files changed, 128 insertions(+)
 create mode 100644 standard/sd-openbsd/deploy.sh
 create mode 100644 standard/sd-openbsd/manual.tex
 create mode 100644 standard/sd-openbsd/progs.csv

diff --git a/standard/sd-artix/progs.csv b/standard/sd-artix/progs.csv
index 6e3eb2c82a9e1b741ade6bc42f3bc28459f29e24..165eb8190872839882cc40f98125158b007f0263 100644
--- a/standard/sd-artix/progs.csv
+++ b/standard/sd-artix/progs.csv
@@ -271,6 +271,7 @@ A,catgirl,"terminal IRC client"
 # =====================================================================
 A,mullvad-vpn-bin,"Mullvad VPN client"
 ,openvpn,"OpenVPN client"
+A,portmaster-bin,"application firewall and DNS filter"
 #
 # =====================================================================
 # Security
diff --git a/standard/sd-gentoo/progs.csv b/standard/sd-gentoo/progs.csv
index 9e9b444d18f4e23a7fc843ccd7bcc2eabcb9ea9c..aeeecf0ad2405613080adfa9e66e7f61f6d89cb2 100644
--- a/standard/sd-gentoo/progs.csv
+++ b/standard/sd-gentoo/progs.csv
@@ -245,6 +245,7 @@ O,app-misc/gum,"fluid terminal UI toolkit"
 # =====================================================================
 O,net-vpn/mullvad-vpn,"Mullvad VPN client"
 ,net-vpn/openvpn,"OpenVPN client"
+O,net-firewall/portmaster,"application firewall and DNS filter"
 #
 # =====================================================================
 # Security
diff --git a/standard/sd-openbsd/deploy.sh b/standard/sd-openbsd/deploy.sh
new file mode 100644
index 0000000000000000000000000000000000000000..d7eac387ce5e77ba366673f4a41ae0bc92d2a27c
--- /dev/null
+++ b/standard/sd-openbsd/deploy.sh
@@ -0,0 +1,23 @@
+#!/bin/sh
+
+# ============================================================================
+#
+#       ██╗      █████╗ ███████╗██╗   ██╗██╗  ██╗██████╗ ██╗███████╗        Z
+#       ██║     ██╔══██╗╚══███╔╝╚██╗ ██╔╝██║ ██╔╝██╔══██╗██║██╔════╝      Z
+#       ██║     ███████║  ███╔╝  ╚████╔╝ █████╔╝ ██████╔╝██║███████╗    z
+#       ██║     ██╔══██║ ███╔╝    ╚██╔╝  ██╔═██╗ ██╔══██╗██║╚════██║  z
+#       ███████╗██║  ██║███████╗   ██║   ██║  ██╗██║  ██║██║███████║
+#       ╚══════╝╚═╝  ╚═╝╚══════╝   ╚═╝   ╚═╝  ╚═╝╚═╝  ╚═╝╚═╝╚══════╝
+#
+# KSD - Kris's Simple Deploy for OpenBSD
+# Server-focused deployment: security-first, minimal, auditable.
+#
+# Author: Kris Yotam (aka. khr1st)
+# Contact: krisyotam@protonmail.com
+# Date: 2026.05.27
+# License: GNU GPLv3
+# Repository: https://github.com/krisyotam/sdeploy
+# ============================================================================
+
+echo "Not yet implemented"
+exit 1
diff --git a/standard/sd-openbsd/manual.tex b/standard/sd-openbsd/manual.tex
new file mode 100644
index 0000000000000000000000000000000000000000..5e8f07179d58fcfece88fac3e3c733187e42ef8d
--- /dev/null
+++ b/standard/sd-openbsd/manual.tex
@@ -0,0 +1,2 @@
+% KSD OpenBSD Manual
+% TODO: Write installation and deployment guide
diff --git a/standard/sd-openbsd/progs.csv b/standard/sd-openbsd/progs.csv
new file mode 100644
index 0000000000000000000000000000000000000000..83905a1f7d1ddb11250b7b3ade99b108052b45e1
--- /dev/null
+++ b/standard/sd-openbsd/progs.csv
@@ -0,0 +1,101 @@
+#TAG,PACKAGE,DESCRIPTION
+#
+# Legend:
+# (empty) = pkg_add (OpenBSD packages)
+# P = ports tree (when no binary package exists)
+# G = Git clone + make install -- suckless builds only
+#
+# =====================================================================
+# Core Server Tools
+# =====================================================================
+,htop,"process viewer"
+,tmux,"terminal multiplexer (ships with base, upgrade for latest)"
+,fish,"friendly interactive shell"
+,neovim,"modern vim"
+,git,"version control"
+,curl,"data transfer tool"
+,wget,"file downloader"
+,rsync,"file sync"
+,jq,"JSON processor"
+,fzf,"fuzzy finder"
+,ripgrep,"fast grep replacement"
+,fd,"fast find replacement"
+,bat,"cat with syntax highlighting"
+,eza,"modern ls replacement"
+,tree,"directory listing"
+#
+# =====================================================================
+# Networking / Security
+# =====================================================================
+# pf is in base -- no package needed
+# httpd is in base -- no package needed
+# relayd is in base -- no package needed
+# acme-client is in base -- no package needed
+# ssh is in base -- no package needed
+,mosh,"mobile shell with auto-reconnect"
+,wireguard-tools,"WireGuard VPN tools"
+,nmap,"network scanner"
+,socat,"data transfer utility"
+,proxychains-ng,"proxy chaining"
+,gnupg,"GPG encryption"
+,password-store,"password manager using GPG"
+#
+# =====================================================================
+# Web / Proxy
+# =====================================================================
+# httpd + relayd in base handle most use cases
+# only add these if base httpd/relayd are insufficient
+,nginx,"web server (if relayd insufficient)"
+#
+# =====================================================================
+# Languages / Runtimes
+# =====================================================================
+,node,"JavaScript runtime"
+,go,"Go language"
+,python3,"Python interpreter"
+,py3-pip,"Python package manager"
+,rust,"Rust toolchain"
+#
+# =====================================================================
+# Databases
+# =====================================================================
+,sqlite3,"embedded database"
+,postgresql-server,"PostgreSQL server"
+,redis,"in-memory data store"
+#
+# =====================================================================
+# Monitoring / System
+# =====================================================================
+,systat,"system statistics"
+,lsof,"list open files"
+,pftop,"real-time pf state viewer"
+#
+# =====================================================================
+# Media / Utilities (server-side)
+# =====================================================================
+,ffmpeg,"video and audio processing"
+,ImageMagick,"image manipulation CLI"
+,yt-dlp,"YouTube downloader"
+,rclone,"cloud storage sync"
+#
+# =====================================================================
+# Mail
+# =====================================================================
+# smtpd is in base -- no package needed
+,neomutt,"terminal email client"
+,msmtp,"SMTP client"
+#
+# =====================================================================
+# IRC
+# =====================================================================
+,catgirl,"terminal IRC client"
+#
+# =====================================================================
+# Suckless Builds (optional, for console/X if needed)
+# =====================================================================
+G,https://github.com/krisyotam/dwm,"tiling window manager"
+G,https://github.com/krisyotam/dwmblocks,"modular status bar"
+G,https://github.com/krisyotam/dmenu,"application launcher"
+G,https://github.com/krisyotam/st,"terminal emulator"
+G,https://github.com/krisyotam/scron,"simple cron daemon"
+G,https://github.com/krisyotam/quark,"tiny HTTP server"