Appendix: Post-Deployment TODOs

Fix vault-ssh-sign script: add u0_a385 to principals

[ ]

Currently hardcodes u0_a361 (old Termux user)

Test zsh persistence after Termux update

[ ]

chsh -s zsh may not survive pkg updates

Add mobile aliases to dotfiles-optimus

[ ]

dcap, dinfra, dnetapi, wrklog, regex

Create Termux-specific stow package in dotfiles-optimus

[ ]

Starship config, .zshrc Termux overrides, gpg-agent.conf

Automate Vault cert renewal (systemd timer or cron)

[ ]

8-hour TTL causes daily SSH failures

Add Termux:Boot sshd startup to dotfiles

[ ]

~/.termux/boot/start-sshd.sh

Samsung DeX mode testing

[ ]

Desktop-like terminal on external display

Bluetooth keyboard workflow documentation

[ ]

Key mappings, tmux splits for mobile

Termux:Float evaluation

[ ]

Floating terminal over other Android apps

Wired EAP-TLS for Z Fold 7

[ ]

USB-C Ethernet adapter + 802.1X