msb/base-stack
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

add mailutils, adjust f2b perms, move autoremove

Browse Source
This commit is contained in:
Matthew Saunders Brown 2022-11-17 10:44:10 -08:00
parent 3a27b9a841
commit 0b65fd92cc
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
install.sh
View File

@ -37,10 +37,10 @@ DEBIAN_FRONTEND=noninteractive apt-get -y update
# update grub first, by itself, as it requires special overrides to run unattended # update grub first, by itself, as it requires special overrides to run unattended
DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" install grub-common grub2-common grub-pc grub-pc-bin DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" install grub-common grub2-common grub-pc grub-pc-bin
DEBIAN_FRONTEND=noninteractive apt-get -y dist-upgrade DEBIAN_FRONTEND=noninteractive apt-get -y dist-upgrade
DEBIAN_FRONTEND=noninteractive apt-get -y autoremove
# remove unwanted packages # remove unwanted packages
DEBIAN_FRONTEND=noninteractive apt-get -y purge snapd cryptsetup ufw iptables landscape-common popularity-contest DEBIAN_FRONTEND=noninteractive apt-get -y purge snapd cryptsetup ufw iptables landscape-common popularity-contest
DEBIAN_FRONTEND=noninteractive apt-get -y autoremove
## used to disable apparmor, going to try leaving it in now ## used to disable apparmor, going to try leaving it in now
# aa-teardown # aa-teardown
# systemctl stop apparmor # systemctl stop apparmor
@ -92,7 +92,8 @@ systemctl restart firewalld
# fail2ban # fail2ban
DEBIAN_FRONTEND=noninteractive apt-get -y install fail2ban DEBIAN_FRONTEND=noninteractive apt-get -y install fail2ban
chmod 644 fail2ban/*/* chmod 644 fail2ban/*.local
chmod 644 fail2ban/*/*.conf
cp -a fail2ban/* /etc/fail2ban/ cp -a fail2ban/* /etc/fail2ban/
systemctl enable fail2ban systemctl enable fail2ban
systemctl start fail2ban systemctl start fail2ban
@ -106,7 +107,8 @@ sed -i 's|.*MaxRetentionSec=.*|MaxRetentionSec=1week|g' /etc/systemd/journald.co
systemctl restart systemd-journald.service systemctl restart systemd-journald.service
# install some handy extra packages # install some handy extra packages
DEBIAN_FRONTEND=noninteractive apt-get -y install gdu exa pwgen DEBIAN_FRONTEND=noninteractive apt-get -y install gdu exa pwgen mailutils --no-install-recommends
# --no-install-recommends is required to keep mailutils from pulling in postfix & mysql
# install # install
chmod 750 sbin/* chmod 750 sbin/*