134 lines
3.3 KiB
Plaintext
134 lines
3.3 KiB
Plaintext
dotfiles
|
|
|
|
cd
|
|
git init
|
|
git remote add origin gitea@git.kompot.si:urosm/dot.git
|
|
git pull
|
|
git checkout main -f
|
|
|
|
locales
|
|
|
|
sudo dpkg-reconfigure locales
|
|
|
|
firewall
|
|
|
|
sudo apt install ufw
|
|
sudo ufw allow "SSH"
|
|
sudo ufw allow 1194/udp
|
|
|
|
sway desktop
|
|
|
|
neovim
|
|
|
|
sudo apt install ninja-build gettext cmake unzip curl
|
|
git clone --depth 1 --branch v0.9.1 https://github.com/neovim/neovim
|
|
cd neovim
|
|
make CMAKE_BUILD_TYPE=Release
|
|
sudo make install
|
|
|
|
# networking and firewall packages
|
|
sudo apt install network-manager
|
|
# utilities packages
|
|
sudo apt install git
|
|
sudo apt install ncal
|
|
sudo apt install udisks2
|
|
# desktop packages
|
|
sudo apt install --no-install-recommends sway # window manager
|
|
sudo apt install swayidle swaylock # window manager extras
|
|
sudo apt install mako-notifier libnotify-bin # notification daemon
|
|
sudo apt install foot # terminal
|
|
sudo apt install fuzzel # launcher
|
|
sudo apt install wl-clipboard # clipboard utility
|
|
sudo apt install light wlsunset # backlight utility
|
|
sudo apt install grim # screenshot utility
|
|
sudo apt install fonts-agave # font
|
|
# audio packages
|
|
sudo apt install pipewire-audio
|
|
# audio configuration
|
|
systemctl --user --now enable wireplumber.service
|
|
# application packages
|
|
sudo apt install firefox-esr # browser
|
|
sudo apt install mpv # media player
|
|
sudo apt install zathura # pdf reader
|
|
# building neovim
|
|
# building lua-language-server
|
|
sudo apt install ninja-build
|
|
git clone --depth 1 --branch 3.6.25 https://github.com/luals/lua-language-server
|
|
git submodule --init --recursive
|
|
./make.sh
|
|
# printing and scanning packages
|
|
sudo apt install cups
|
|
sudo apt install simple-scan
|
|
sudo apt install ocrmypdf # ocr
|
|
sudo apt install tesseract-ocr-slv
|
|
sudo apt install imagemagick
|
|
# libreoffice packages
|
|
sudo apt install libreoffice libreoffice-gtk3 libreoffice-l10n-sl
|
|
# pandoc and latex packages
|
|
sudo apt install pandoc
|
|
sudo apt install texlive-latex-recommended
|
|
sudo apt install texlive-fonts-extra
|
|
# remote desktop packages
|
|
sudo apt install remmina # remote desktop client
|
|
sudo apt install wireguard-tools # vpn
|
|
# shell packages
|
|
sudo apt install shellcheck
|
|
# ocaml packages
|
|
sudo apt install opam
|
|
```
|
|
|
|
# `wireguard` configuration
|
|
|
|
Server:
|
|
|
|
```sh
|
|
# enable ipv4 forwarding
|
|
sudo sysctl -w net.ipv4.ip_forward=1
|
|
# to make the change permanent edit /etc/sysctl.conf
|
|
sudo sed -i "s/^#net.ipv4.ip_forward = 1/net.ipv4.ip_forward = 1/" /etc/sysctl.conf
|
|
# generate private and public keys
|
|
wg genkey > server.key
|
|
wg pubkey < server.key > server.pub
|
|
```
|
|
|
|
Client:
|
|
|
|
```sh
|
|
# generate private and public keys
|
|
wg genkey > client.key
|
|
wg pubkey < client.key > client.pub
|
|
```
|
|
|
|
Example of `/etc/wireguard/wg0.conf` on the server:
|
|
|
|
```
|
|
[Interface]
|
|
Address = 10.200.200.1/24
|
|
ListenPort = 1194
|
|
PrivateKey = <server.key>
|
|
|
|
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o enp1s0 -j MASQUERADE
|
|
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o enp1s0 -j MASQUERADE
|
|
|
|
[Peer]
|
|
PublicKey = <client1.pub>
|
|
AllowedIPs = 10.200.200.2/32
|
|
|
|
[Peer]
|
|
PublicKey = <client2.pub>
|
|
AllowedIPs = 10.200.200.3/32
|
|
```
|
|
|
|
Example of `/etc/wireguard/wg0.conf` on the client:
|
|
|
|
```
|
|
[Interface]
|
|
Address = 10.200.200.2/32
|
|
PrivateKey = <client.key>
|
|
|
|
[Peer]
|
|
PublicKey = <server.pub>
|
|
Endpoint = <server ip>:1194
|
|
AllowedIPs = 0.0.0.0/0, ::/0
|
|
```
|