# firewall
sudo ufw enable
sudo ufw allow 22/tcp comment "ssh"
sudo ufw allow 80/tcp comment "web"
sudo ufw allow 443/tcp comment "websecure"
sudo ufw allow 10000:10100/tcp comment "generic"

# general
sudo systemctl enable --now sshd.service
sudo systemctl enable --now fstrim.timer
yay plymouth tldextract go nodejs unzip exa

# nvidia
yay cuda nvidia-settings nvidia-docker

# python
yay python-pip pyenv ipython

# sound
yay manjaro-pipewire pavucontrol

# terminal and shell
yay kitty fish
chsh -s /usr/bin/fish

# code
yay neovim tig stylua tmux diff-so-fancy ripgrep prettier jq git-lfs shfmt glow
git clone https://github.com/tmux-plugins/tpm ~/.config/tmux/plugins/tpm

# file sync
yay syncthings rclone
sudo systemctl enable --now syncthing@hjalmarlucius.service
systemctl --user daemon-reload
systemctl --user enable --now rclone-gdrive.service
sudo ufw allow 22000,21027/udp comment "syncthing"
sudo ufw allow to 224.0.0.0/4 comment "Multicast"

# docker incl non-root daemon
yay docker docker-compose dry-bin nvidia-docker docker-buildx
sudo ufw allow 2376/tcp comment "Docker"
sudo ufw allow 2377/tcp comment "Docker"
sudo ufw allow 4789/udp comment "Docker"
sudo ufw allow 7946/udp comment "Docker"
sudo ufw allow 7946/tcp comment "Docker"
sudo groupadd docker && sudo usermod -aG docker $USER
sudo systemctl enable --now containerd.service
sudo systemctl enable --now docker.service

# printer
yay manajaro-printer samsung-unified-driver-printer

# monitors
yay iftop bpytop nvtop

# pdf
yay zathura zathura-pdf-mupdf zathura-djvu zathura-ps

# fonts
yay noto-fonts-emoji ttf-hack

# browser
yay qutebrowser pdfjs bitwarden-cli

# zerotier
yay zerotier-one
sudo systemctl enable --now zerotier-one.service
sudo zerotier-cli join d5e5fb653797795b
sudo ufw allow from 9993/udp comment "zerotier"
sudo ufw allow from 172.30.0.0/16 comment "zerotier"

# coolercontrol
yay coolercontrol
sudo systemctl enable --now coolercontrold.service
sudo systemctl edit coolercontrold.service  # set log level to WARN

# video streaming
yay plex-media-server
sudo systemctl enable --now plexmediaserver.service
sudo ufw allow 8010 comment "chromecast"
sudo ufw allow 32400/tcp comment "plex"
sudo ufw allow 1900/udp comment "plex DLNA server"
sudo ufw allow 32469/tcp comment "plex DLNA server"
sudo ufw allow 32410,32412,32413,32414/udp comment "plex GDM discovery"

# steam
yay steam
sudo ufw allow 27031,27036/udp comment "Steam Link"
sudo ufw allow 27036,27037/tcp comment "Steam Link"

# qbittorrent
yay qbittorrent
sudo ufw allow 6881/tcp comment "qbittorrent"

# applications
yay i3status rofi mutt redshift discord teamviewer qalculate cmus ncspot