Use Ansible to do the things below:
- Disable root login
- Set up printer
- Add second LUKS passphrase
- Configure GRUB
- Configure auto login to improve user experience as LUKS is used
- Disable wait-online service unit
- Disable lp module
- Nextcloud als Sicherung
- Enable S3 over s2idle
- Use LZ4 for initrd image
- Set up firmware password
- Fix cryptsetup configuration
- Set Neovim as default editor
- Replace GRUB with Linux EFI stub
- Encrypt full disk including root a) Full disk encryption (including boot) on Debian