mattfox / home-gateway Goto Github PK

Replace SysV init scripts with systemd units.

Done when:

• All the rules in /etc/init.d/firewall are in well-defined individual files in /etc/firewall.d/.
• The firewall state is simply an /etc/init.d/firewall file that uses run-parts to execute files in /etc/firewall.d/.
• Various other states add files into /etc/firewall.d. For example, the collectd state should add some rules into a file in /etc/firewall.d that opens up access to collectd from www101.tansen.ca.

So that, for example, the IPs assigned by my ISP and HE tunnels don't have to be hard-coded.

This depends on having kernel 4.3-ish.

See https://wiki.debian.org/nftables, https://packages.debian.org/jessie-backports/nftables and https://packages.debian.org/jessie-backports/linux-image-686-pae.

This is more related to the TL-SG108E, not these configs, although it will affect the network config of the router.

Change the default VLAN to something other than 1, so that there's no traffic on VLAN 1. This will make things more secure, because with the TL-SG108E there's no way to make a port not a member of VLAN 1. Broadcasts on VLAN 1 currently go out to the modem, and there's no way to disable that directly.

install packages: sudo
configure users
/etc/ssh/ssh_known_hosts
default locale

See https://github.com/mattfox/home-gateway-routes-selector

There's a number of files that ought to trigger a change. See https://docs.saltstack.com/en/latest/ref/states/requisites.html#onchanges. Apparently cmd.wait is being deprecated some time.