---
common_basic_packages:
  - cron-apt
  - curl
  - emacs-nox
  - ncurses-term
  - etckeeper
  - git
  - htop
  - intel-microcode
  - iputils-ping
  - mtr-tiny
  - ncdu
  - rsync
  - strace
  - sudo
  - screen
  - tmux
  - tree
  - vim
  - zsh
  # for ansible/debian
  - lsb-release
  - python3-apt
  - python3-pycurl
  # extra
  - lshw
  - gdisk
  - cryptsetup
  - nvme-cli

common_sysctl: True
common_sysctls:
#- key: net.ipv6.conf.all.disable_ipv6
#  val: 1
- key: net.ipv4.conf.default.rp_filter
  val: 1
- key: net.ipv4.conf.all.rp_filter
  val: 1

- key: net.ipv4.conf.all.accept_redirects
  val: 0
- key: net.ipv4.conf.default.accept_redirects
  val: 0
- key: net.ipv6.conf.all.accept_redirects
  val: 0
- key: net.ipv6.conf.default.accept_redirects
  val: 0

- key: net.ipv4.conf.all.send_redirects
  val: 0

- key: net.ipv4.conf.default.accept_source_route
  val: 0

common_snapper: True
common_smartd: True