nodiscc
9b79fb8fad
language: set the default keyboard layout to french
2020-03-07 21:01:45 +01:00
nodiscc
d85d357bd3
languages: enable generation of french and english locales
2020-03-07 21:01:45 +01:00
nodiscc
924033e249
networkmanager: add example configuration file for dnsmasq
2020-03-07 21:01:45 +01:00
nodiscc
63952c6319
add networkmanager configuration: enable local caching resolver
...
https://wiki.archlinux.org/index.php/NetworkManager#DNS_caching_and_conditional_forwarding
2020-03-07 21:01:45 +01:00
nodiscc
dc1b696be4
add mlocate/updatedb configuration: do not scan version control directories (.git, .svn ...)
2020-03-07 21:01:44 +01:00
nodiscc
250734c895
language: add localepurge configuration:
...
- purge all locales except english and french locales
- add dpkg hooks
- delete localized manpages
- show freed space (quick/imprecise calculation)
packages: remove duplicate entry
2020-03-07 21:01:44 +01:00
nodiscc
4a4634b8ea
disable systemd "predictable interface names" by overriding the system's default 99-default.link
...
https://www.freedesktop.org/wiki/Software/systemd/PredictableNetworkInterfaceNames/
2020-03-07 21:01:44 +01:00
nodiscc
a51e3d513e
sudo: decrease sudo session timeout to 3 minutes instead of the default 15 minutes
2020-03-07 21:01:44 +01:00
nodiscc
51ed7dba45
sudo: do not trust user-defined $PATH, use standard system binaries PATH
2020-03-07 21:01:44 +01:00
nodiscc
9624db669c
sudo: enable password feedback (stars)
2020-03-07 21:01:44 +01:00
nodiscc
c6bb714873
and openssh server (sshd) configuration.
...
hardened configuration from https://github.com/dev-sec/ansible-ssh-hardening/ and https://gitlab.com/nodiscc/ansible-xsrv-common/
2020-03-07 21:01:44 +01:00
nodiscc
e8c92d12eb
lightdm: add greeter configuratino (background, visible indicators/clock, theme, icons, font, antialiasing)
2020-03-07 21:01:44 +01:00
nodiscc
08bab4afa1
laptop-mode: do not auto-suspend USB HID devices (mouse/keyboard) when laptop-mode activates
2020-03-07 21:01:44 +01:00
nodiscc
7b773cc066
laptop-mode: remount disks with noatime option when laptop-mode activates
2020-03-07 21:01:44 +01:00
nodiscc
ed20d9f7ec
laptop-mode: set disk spinup interval to 20 seconds on battery, 5 seconds on AC
2020-03-07 21:01:44 +01:00
nodiscc
3964cc143d
add grub configuration:
...
- enable boot splash
- enable dynamic power management for the radeon driver
- force Linux mode in ACPI/BIOS, force using vendor specifc drivers for backlight (fixes backlight control on some BIOSes) https://unix.stackexchange.com/questions/110624/what-do-the-kernel-parameters-acpi-osi-linux-and-acpi-backlight-vendor-do
- enable apparmor
- add various configuration examples
2020-03-07 21:01:43 +01:00
nodiscc
e7a8f631d0
enable fonctconfig configuration files
2020-03-07 21:01:43 +01:00
nodiscc
98aced2235
fontconfig: enable anti-aliasing
2020-03-07 21:01:43 +01:00
nodiscc
8b28562355
fontconfig: Use lcddefault as default for LCD filter
2020-03-07 21:01:43 +01:00
nodiscc
ac79c0d504
fontconfig: disable font hinting
2020-03-07 21:01:43 +01:00
nodiscc
6e4ca22ec1
apt: force downloads over IPv4 since IPv6 is disabled in sysctl
2020-03-07 21:01:43 +01:00
nodiscc
4307e5e1ec
add sysctl configuration (networking/security)
2020-03-07 21:01:43 +01:00
nodiscc
1ebd8f794a
add plymouth configuration (set boot screen theme to debian-logo)
2020-03-07 21:01:43 +01:00
nodiscc
eb786ed776
add apt sources configuration (debian buster + security + updates/proposed-updates + backports)
2020-03-07 21:01:43 +01:00
nodiscc
0ae4e4ce76
apt: disable installatino of "recommended" packages
...
keeps the number of installed packages and disk space requirements to the minimum necessary
2020-03-07 21:01:43 +01:00
nodiscc
b2e51f6e96
apt: configure automatic security/bugfix upgrades (unattended-upgrades):
...
- auto-upgrade packages from buster-updates, proposed-updates, security, backports
- split the upgrade into minimal steps (so that shutodwns during upgrades are possible)
- enable logging to syslog
- daily, automatic update of package lists, download and installation of upgrades
2020-03-07 21:01:42 +01:00
nodiscc
10cb95271d
config: add lightdm config:
...
- disable xdmcp/vnc
- do no hide users list
- disable guest user
- set xfce as default sessions
2020-03-07 21:01:42 +01:00
nodiscc
0d1298d0b0
config: ufw: enable firewall on boot, set log level to low
...
https://manpages.debian.org/buster/ufw/ufw.8.en.html
2020-03-07 21:01:42 +01:00
