61 lines
949 B
Plaintext
61 lines
949 B
Plaintext
---
|
|
common_basic_packages:
|
|
- cron-apt
|
|
- curl
|
|
- ncurses-term
|
|
- etckeeper
|
|
- git
|
|
- htop
|
|
- intel-microcode
|
|
- iputils-ping
|
|
- mtr-tiny
|
|
- ncdu
|
|
- rsync
|
|
- strace
|
|
- sudo
|
|
- screen
|
|
- tmux
|
|
- tree
|
|
- vim
|
|
- zsh
|
|
# for ansible/debian
|
|
- lsb-release
|
|
- python3-apt
|
|
- python3-pycurl
|
|
# extra
|
|
- cgroupfs-mount
|
|
- cryptsetup
|
|
- fuse
|
|
- gdisk
|
|
- lshw
|
|
- nvme-cli
|
|
- molly-guard
|
|
|
|
common_sysctl: True
|
|
common_sysctls:
|
|
#- key: net.ipv6.conf.all.disable_ipv6
|
|
# val: 1
|
|
- key: net.ipv4.conf.default.rp_filter
|
|
val: 1
|
|
- key: net.ipv4.conf.all.rp_filter
|
|
val: 1
|
|
|
|
- key: net.ipv4.conf.all.accept_redirects
|
|
val: 0
|
|
- key: net.ipv4.conf.default.accept_redirects
|
|
val: 0
|
|
- key: net.ipv6.conf.all.accept_redirects
|
|
val: 0
|
|
- key: net.ipv6.conf.default.accept_redirects
|
|
val: 0
|
|
|
|
- key: net.ipv4.conf.all.send_redirects
|
|
val: 0
|
|
|
|
- key: net.ipv4.conf.default.accept_source_route
|
|
val: 0
|
|
|
|
common_snapper: True
|
|
common_smartd: True
|
|
|