Use Ansible to do the things below:
-
Disable root login
-
Set up printer
-
Add second LUKS passphrase
-
Configure GRUB
-
Configure auto login to improve user experience as LUKS is used
-
Disable wait-online service unit
-
Disable lp module
-
Nextcloud als Sicherung
-
Enable S3 over s2idle
-
Use LZ4 for initrd image
-
Set up firmware password
-
Fix cryptsetup configuration
-
Set Neovim as default editor
-
Replace GRUB with Linux EFI stub
-
Encrypt full disk including root a) Full disk encryption (including boot) on Debian
-
Bigger font in GRUB a)
sudo grub-mkfont --output=/boot/grub/fonts/DejaVuSansMono48.pf2 --size=48 /usr/share/fonts/truetype/dejavu/DejaVuSansMono.ttf
a) In/etc/default/grub
:GRUB_GFXPAYLOAD=keep GRUB_FONT=/boot/grub/fonts/DejaVuSansMono48.pf2
-
Enable suite sid for unattended-upgrades in
Unattended-Upgrade::Origins-Pattern
in/etc/apt/apt.conf.d/50unattended-upgrades
:"o=Debian,a=sid";