From caf388ce0bb66859e5a280d42bb54787397b6ab2 Mon Sep 17 00:00:00 2001
From: bchanot <bchanot@gmail.fr>
Date: Tue, 6 Oct 2026 11:39:40 +0200
Subject: [PATCH] =?UTF-8?q?chore(release):=201.0.0=20=E2=80=94=20version.t?=
 =?UTF-8?q?xt=20+=20CHANGELOG?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CHANGELOG.md | 39 +++++++++++++++++++++++++++++++++++++++
 version.txt  |  1 +
 2 files changed, 40 insertions(+)
 create mode 100644 CHANGELOG.md
 create mode 100644 version.txt

diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 0000000..791f9f9
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,39 @@
+# Changelog
+
+All notable changes to this project are documented here.
+Format: [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). Versioning: semver.
+
+## [Unreleased]
+
+## [1.0.0] — 2026-10-06
+
+### Added
+- macOS support in `install.sh`: Homebrew instead of apt, colima for Docker,
+  brew services for code-server/mariadb, bash or zsh login shell choice
+  (`MACOS_SHELL`), report of the Linux-only items skipped.
+- `bash/bashrc-osx`: `bashrc-linux` mirrored with the macOS deltas (brew env,
+  `ls -G`, `EPOCHREALTIME` timer, `cc` without systemd-run).
+- `zsh/zshrc-osx` + `zsh/bchanot.zsh-theme`: oh-my-zsh config and theme
+  porting the bash prompt.
+- `gitconfig` template deployed as user-scope `~/.gitconfig`, `@USER@` /
+  `@EMAIL@` filled at install; a differing file is kept as
+  `~/.gitconfig.backup-<date>`.
+- `git-delta` in the apt and brew package lists (the gitconfig pager).
+- Security baseline on Linux, always applied and idempotent: fail2ban sshd
+  jail (journal backend, all-ports ban, LAN ignored), unattended security
+  upgrades, sshd hardening drop-in gated by `sshd -t`.
+- End-of-install offers on Linux: `/tmp` on disk (mask `tmp.mount` +
+  tmpfiles rules) and SSH memory guard (sshd OOM-exempt drop-in + earlyoom).
+- `cloudpex/`: on-demand SMB mount helper, installer and FR README; site
+  values prompted at install into `/etc/cloudpex.conf`, never in the script.
+- Apt package list mirroring the reference machine: gitleaks, web stack,
+  `ubuntu-desktop-minimal`, lspci-gated NVIDIA driver install, `gh`.
+
+### Changed
+- Shell identity exported as `USER` / `EMAIL` instead of `VIUSER` / `VIMAIL`
+  in every rc file; the installer takes the login name from `id -un`.
+- `install.sh` uses `cp -Rpv` (BSD-compatible).
+
+### Fixed
+- `bin/dt` macOS portability: `lsof` cwd, BSD `date` start time, bash 3.2
+  tilde expansion, `sed -E` help.
diff --git a/version.txt b/version.txt
new file mode 100644
index 0000000..3eefcb9
--- /dev/null
+++ b/version.txt
@@ -0,0 +1 @@
+1.0.0