diff --git a/containers/storage.conf b/.config/containers/storage.conf similarity index 100% rename from containers/storage.conf rename to .config/containers/storage.conf diff --git a/readme b/readme new file mode 100644 index 0000000..86f7aea --- /dev/null +++ b/readme @@ -0,0 +1,4 @@ +Configs for debian 12 setup. + +Clone to $HOME, run ./scripts/full.sh and pray. + diff --git a/beszel.sh b/scripts/beszel.sh similarity index 100% rename from beszel.sh rename to scripts/beszel.sh diff --git a/full.sh b/scripts/full.sh similarity index 78% rename from full.sh rename to scripts/full.sh index cde362c..834c265 100755 --- a/full.sh +++ b/scripts/full.sh @@ -12,8 +12,12 @@ sudo apt install -y \ python3-pip \ vim +sudo cp "$HOME/.vimrc" /root/.vimrc + +./zfs.sh ./sshd.sh ./nginx.sh ./ufw.sh ./podman.sh ./unattended.sh +./beszel.sh diff --git a/nginx.sh b/scripts/nginx.sh similarity index 100% rename from nginx.sh rename to scripts/nginx.sh diff --git a/podman.sh b/scripts/podman.sh similarity index 55% rename from podman.sh rename to scripts/podman.sh index 1e419df..8227d5d 100755 --- a/podman.sh +++ b/scripts/podman.sh @@ -4,5 +4,8 @@ set -euo pipefail sudo apt install -y podman +sudo mkdir -p /etc/containers/ +sudo cp "$HOME/.config/containers/storage.conf" /etc/containers/storage.conf + systemctl --user enable podman.socket systemctl --user start podman.socket diff --git a/sshd.sh b/scripts/sshd.sh similarity index 73% rename from sshd.sh rename to scripts/sshd.sh index d3a7ff2..ba55539 100755 --- a/sshd.sh +++ b/scripts/sshd.sh @@ -2,7 +2,7 @@ set -euo pipefail -# TODO: just 'sed' the usual hardenings +# TODO: 'sed' automate the usual hardenings sudo vim /etc/ssh/sshd_config if ! sudo sshd -t; then diff --git a/ufw.sh b/scripts/ufw.sh similarity index 90% rename from ufw.sh rename to scripts/ufw.sh index cbff590..afafe3b 100755 --- a/ufw.sh +++ b/scripts/ufw.sh @@ -7,9 +7,11 @@ sudo apt install -y ufw sudo ufw default deny incoming sudo ufw default allow outgoing +# Allow SSH port port=$(cat /etc/ssh/sshd_config | grep -o 'Port [0-9]*' | grep -o '[0-9]*') sudo ufw allow "$port/tcp" +# Allow Nginx if installed if ! which nginx; then sudo ufw allow "Nginx Full" fi diff --git a/unattended.sh b/scripts/unattended.sh similarity index 100% rename from unattended.sh rename to scripts/unattended.sh diff --git a/zfs.sh b/scripts/zfs.sh similarity index 100% rename from zfs.sh rename to scripts/zfs.sh