msb/base-stack
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Compare commits

base: msb:239dd082f3c4d4ec1fb36020327b87688dd54468
Branches Tags
msb:master
..
compare: msb:14244a4d3ddae0018ca6e1f681f7afe8ce7f6a57
Branches Tags
msb:master

2 Commits
239dd082f3 ... 14244a4d3d

Author SHA1 Message Date
Matthew Saunders Brown
14244a4d3d make sure systemd-timesyncd is installed as the time-daemon, remove unwanted packages 2024-12-08 14:18:41 -08:00
Matthew Saunders Brown
8ffdb74ce2 make systemd default backed for fail2ban 2024-12-08 14:17:31 -08:00
2 changed files with 10 additions and 1 deletions
Show Stats Expand all files Collapse all files

1
fail2ban/jail.local
View File

@ -2,3 +2,4 @@
[DEFAULT] [DEFAULT]
ignoreip = 127.0.0.1/8 ignoreip = 127.0.0.1/8
banaction = firewallcmd-nftset banaction = firewallcmd-nftset
backend = systemd

8
install.sh
View File

@ -37,11 +37,19 @@ if [[ ! -f /etc/sysctl.d/60-swappiness.conf ]]; then
/sbin/sysctl --quiet --system /sbin/sysctl --quiet --system
fi fi
# remove unwanted packages
DEBIAN_FRONTEND=noninteractive apt-get -y purge snapd cryptsetup ufw iptables popularity-contest ntpsec
DEBIAN_FRONTEND=noninteractive apt-get -y autoremove
systemctl daemon-reload
# update system # update system
DEBIAN_FRONTEND=noninteractive apt-get -y update DEBIAN_FRONTEND=noninteractive apt-get -y update
# special dpkg options needed for things like nointeractive grub updates # special dpkg options needed for things like nointeractive grub updates
DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" dist-upgrade DEBIAN_FRONTEND=noninteractive apt-get -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" dist-upgrade
# Install systemd-timesyncd as the time-daemon. It may already be installed, or ntpsec (purged above) may have been in it's place.
DEBIAN_FRONTEND=noninteractive apt-get -y install systemd-timesyncd
# configure unattended upgrades with automatic reboots # configure unattended upgrades with automatic reboots
DEBIAN_FRONTEND=noninteractive apt-get -y install unattended-upgrades apt-listchanges DEBIAN_FRONTEND=noninteractive apt-get -y install unattended-upgrades apt-listchanges
sed -i 's|// "origin=Debian,codename=${distro_codename}-updates";| "origin=Debian,codename=${distro_codename}-updates";|g' /etc/apt/apt.conf.d/50unattended-upgrades sed -i 's|// "origin=Debian,codename=${distro_codename}-updates";| "origin=Debian,codename=${distro_codename}-updates";|g' /etc/apt/apt.conf.d/50unattended-upgrades