make sure systemd-timesyncd is installed as the time-daemon, remove unwanted packages

fail2ban/jail.local

@@ -1,4 +1,5 @@
 # Fail2Ban configuration file.
 [DEFAULT]
-ignoreip = 127.0.0.1/8
+ignoreip  = 127.0.0.1/8
 banaction = firewallcmd-nftset
+backend   = systemd

install.sh

@@ -37,11 +37,19 @@ if [[ ! -f /etc/sysctl.d/60-swappiness.conf ]]; then
   /sbin/sysctl --quiet --system
 fi
 
+# remove unwanted packages
+DEBIAN_FRONTEND=noninteractive apt-get -y purge snapd cryptsetup ufw iptables popularity-contest ntpsec
+DEBIAN_FRONTEND=noninteractive apt-get -y autoremove
+systemctl daemon-reload
+
 # update system
 DEBIAN_FRONTEND=noninteractive apt-get -y update
 # special dpkg options needed for things like nointeractive grub updates
 DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" dist-upgrade
 
+# Install systemd-timesyncd as the time-daemon. It may already be installed, or ntpsec (purged above) may have been in it's place.
+DEBIAN_FRONTEND=noninteractive apt-get -y install systemd-timesyncd
+
 # configure unattended upgrades with automatic reboots
 DEBIAN_FRONTEND=noninteractive apt-get -y install unattended-upgrades apt-listchanges
 sed -i 's|//      "origin=Debian,codename=${distro_codename}-updates";|        "origin=Debian,codename=${distro_codename}-updates";|g' /etc/apt/apt.conf.d/50unattended-upgrades