NetForge

Cross-platform automatic network performance tuning and security hardening.

Windows 10/11 / Linux (NetworkManager) / macOS 12+

Local-first. Zero telemetry. Prefer Ethernet, resilient DNS, TCP tuning, optional hardening.

Apply path and source of truth: this monorepo (VERSION 2.1.2). The former split repos (netforge-windows, netforge-linux, netforge-macos) are archived stubs.

Suite landing: netforge.jonbailey.xyz (marketing page; install from this repo).

Repository layout

netforge/
  windows/   PowerShell NetworkAuto + scheduled tasks
  linux/     bash + NetworkManager / systemd-resolved
  macos/     bash + networksetup

This monorepo replaces the former split repos (netforge-windows, netforge-linux, netforge-macos).

Quick install

Windows (Admin PowerShell)

git clone https://github.com/Pitchfork-and-Torch/netforge.git
cd netforge\windows
.\src\Get-NetForgeStatus.ps1
.\src\NetworkAuto.ps1 -DryRun
.\src\Install-NetworkAuto.ps1

Bootstrap (clones monorepo, installs Windows platform):

irm https://raw.githubusercontent.com/Pitchfork-and-Torch/netforge/main/windows/install.ps1 | iex

Linux (root)

git clone https://github.com/Pitchfork-and-Torch/netforge.git
cd netforge/linux
sudo ./src/install-network-auto.sh
./src/netforge-status.sh

macOS (root)

git clone https://github.com/Pitchfork-and-Torch/netforge.git
cd netforge/macos
sudo ./src/install-network-auto.sh
./src/netforge-status.sh

Shared design

• Discover adapters/services at runtime - no hard-coded NIC names
• Prefer Ethernet over Wi-Fi when both are up
• DNS toward resilient public resolvers (DoH on Windows; DoT/resolved on Linux; networksetup on macOS)
• Optional hardening behind config flags
• Triggers on boot/logon and network connect
• Lock + log so concurrent runs do not clobber each other

See SUITE.md for platform edge cases and related tools.

Profiles

Each platform ships home, travel, corporate, and privacy-max configs. Start with a dry-run, then install.

Related Pitchfork-and-Torch tools

Tool	Role
trench-coat (site)	Multi-hop privacy cloak
ghost-continuum (site)	Defense / deception / forensics
GrokLink OS (site)	Gated agent on portable radio hardware
SkyCache (site)	Receive-only community satellite hub

License

MIT - see LICENSE.

Support

Bug reports via GitHub Issues.