Moved several configuration files outside of script to skeleton directory.

2025-12-01 21:27:26 -05:00
parent 53a1fd3e55
commit b2cec1d67b
8 changed files with 62 additions and 68 deletions
--- a/etc/ssh/sshd_config
+++ b/etc/ssh/sshd_config
@@ -0,0 +1,11 @@
+AllowUsers PLACEHOLDER
+AuthenticationMethods publickey,password
+Ciphers aes256-gcm@openssh.com
+Compression no
+HostKey /etc/ssh/ssh_host_ed25519_key
+HostKeyAlgorithms ssh-ed25519
+KexAlgorithms mlkem768x25519-sha256
+MACs umac-128-etm@openssh.com
+PermitRootLogin no
+PubkeyAcceptedAlgorithms ssh-ed25519
+Subsystem sftp internal-sftp
--- a/etc/sysctl.d/90-bbr.conf
+++ b/etc/sysctl.d/90-bbr.conf
@@ -0,0 +1 @@
+net.ipv4.tcp_congestion_control = bbr
--- a/etc/systemd/network/50-default-ether.network
+++ b/etc/systemd/network/50-default-ether.network
@@ -0,0 +1,16 @@
+[Match]
+Type=ether
+
+[Link]
+RequiredForOnline=routable
+
+[Network]
+DHCP=yes
+IPv6AcceptRA=yes
+EmitLLDP=yes
+
+[DHCPv4]
+RouteMetric=100
+
+[IPv6AcceptRA]
+RouteMetric=100
--- a/etc/systemd/network/50-default-wlan.network
+++ b/etc/systemd/network/50-default-wlan.network
@@ -0,0 +1,19 @@
+[Match]
+Type=wlan
+WLANInterfaceType=station
+SSID=*
+
+[Link]
+RequiredForOnline=routable
+
+[Network]
+DHCP=yes
+IPv6AcceptRA=yes
+IgnoreCarrierLoss=3s
+EmitLLDP=yes
+
+[DHCPv4]
+RouteMetric=200
+
+[IPv6AcceptRA]
+RouteMetric=200
--- a/etc/systemd/resolved.conf.d/90-no-fallbackdns.conf
+++ b/etc/systemd/resolved.conf.d/90-no-fallbackdns.conf
@@ -0,0 +1,2 @@
+[Resolve]
+FallbackDNS=
--- a/etc/systemd/resolved.conf.d/90-no-llmnr.conf
+++ b/etc/systemd/resolved.conf.d/90-no-llmnr.conf
@@ -0,0 +1,2 @@
+[Resolve]
+LLMNR=no
--- a/etc/systemd/resolved.conf.d/90-no-mdns.conf
+++ b/etc/systemd/resolved.conf.d/90-no-mdns.conf
@@ -0,0 +1,2 @@
+[Resolve]
+MulticastDNS=no