#!/bin/sh
#
# run after a Debian minimal install w/SSH server

apt-get update

echo "iptables-persistent iptables-persistent/autosave_v4 boolean true" | debconf-set-selections
echo "iptables-persistent iptables-persistent/autosave_v6 boolean true" | debconf-set-selections
echo "unattended-upgrades unattended-upgrades/enable_auto_updates boolean true" | debconf-set-selections

apt-get install \
  aptitude bc binutils build-essential cryptsetup curl dnsmasq dnsutils \
  dosfstools exfatprogs gdisk git gpg iptables-persistent keyutils \
  libarchive-tools lm-sensors mutt ncat net-tools parted pigz pinentry-tty \
  psmisc rclone rsync rsyslog sqlite3 strace sudo tmux unattended-upgrades \
  unzip vim-nox whois zip

apt-get install --no-install-recommends smem

systemctl disable bluetooth.service remote-fs.target rsync.service
systemctl enable unattended-upgrades netfilter-persistent