fail2ban/jail.local

@@ -1,5 +1,4 @@
 # Fail2Ban configuration file.
 [DEFAULT]
-ignoreip  = 127.0.0.1/8
+ignoreip = 127.0.0.1/8
 banaction = firewallcmd-nftset
-backend   = systemd

install.sh

@@ -37,19 +37,11 @@ if [[ ! -f /etc/sysctl.d/60-swappiness.conf ]]; then
   /sbin/sysctl --quiet --system
 fi
 
-# remove unwanted packages
-DEBIAN_FRONTEND=noninteractive apt-get -y purge snapd cryptsetup ufw iptables popularity-contest ntpsec
-DEBIAN_FRONTEND=noninteractive apt-get -y autoremove
-systemctl daemon-reload
-
 # update system
 DEBIAN_FRONTEND=noninteractive apt-get -y update
 # special dpkg options needed for things like nointeractive grub updates
 DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" dist-upgrade
 
-# Install systemd-timesyncd as the time-daemon. It may already be installed, or ntpsec (purged above) may have been in it's place.
-DEBIAN_FRONTEND=noninteractive apt-get -y install systemd-timesyncd
-
 # configure unattended upgrades with automatic reboots
 DEBIAN_FRONTEND=noninteractive apt-get -y install unattended-upgrades apt-listchanges
 sed -i 's|//      "origin=Debian,codename=${distro_codename}-updates";|        "origin=Debian,codename=${distro_codename}-updates";|g' /etc/apt/apt.conf.d/50unattended-upgrades