Henrik Bakken
96 lines
2.6 KiB
Bash
96 lines
2.6 KiB
Bash
# firewall
|
|
sudo ufw enable
|
|
sudo ufw allow 22/tcp comment "ssh"
|
|
sudo ufw allow 80/tcp comment "web"
|
|
sudo ufw allow 443/tcp comment "websecure"
|
|
sudo ufw allow 10000:10100/tcp comment "generic"
|
|
|
|
# general
|
|
sudo systemctl enable --now sshd.service
|
|
sudo systemctl enable --now fstrim.timer
|
|
yay plymouth tldextract go nodejs unzip exa
|
|
|
|
# nvidia
|
|
yay cuda nvidia-settings nvidia-docker
|
|
|
|
# python
|
|
yay python-pip pyenv ipython
|
|
|
|
# sound
|
|
yay manjaro-pipewire pavucontrol
|
|
|
|
# terminal and shell
|
|
yay kitty fish
|
|
chsh -s /usr/bin/fish
|
|
|
|
# code
|
|
yay neovim tig stylua tmux diff-so-fancy ripgrep prettier jq git-lfs shfmt glow
|
|
git clone https://github.com/tmux-plugins/tpm ~/.config/tmux/plugins/tpm
|
|
|
|
# file sync
|
|
yay syncthings rclone
|
|
sudo systemctl enable --now syncthing@hjalmarlucius.service
|
|
systemctl --user daemon-reload
|
|
systemctl --user enable --now rclone-gdrive.service
|
|
sudo ufw allow 22000,21027/udp comment "syncthing"
|
|
sudo ufw allow to 224.0.0.0/4 comment "Multicast"
|
|
|
|
# docker incl non-root daemon
|
|
yay docker docker-compose dry-bin nvidia-docker docker-buildx
|
|
sudo ufw allow 2376/tcp comment "Docker"
|
|
sudo ufw allow 2377/tcp comment "Docker"
|
|
sudo ufw allow 4789/udp comment "Docker"
|
|
sudo ufw allow 7946/udp comment "Docker"
|
|
sudo ufw allow 7946/tcp comment "Docker"
|
|
sudo groupadd docker && sudo usermod -aG docker $USER
|
|
sudo systemctl enable --now containerd.service
|
|
sudo systemctl enable --now docker.service
|
|
|
|
# printer
|
|
yay manajaro-printer samsung-unified-driver-printer
|
|
|
|
# monitors
|
|
yay iftop bpytop nvtop
|
|
|
|
# pdf
|
|
yay zathura zathura-pdf-mupdf zathura-djvu zathura-ps
|
|
|
|
# fonts
|
|
yay noto-fonts-emoji ttf-hack
|
|
|
|
# browser
|
|
yay qutebrowser pdfjs bitwarden-cli
|
|
|
|
# zerotier
|
|
yay zerotier-one
|
|
sudo systemctl enable --now zerotier-one.service
|
|
sudo zerotier-cli join d5e5fb653797795b
|
|
sudo ufw allow from 9993/udp comment "zerotier"
|
|
sudo ufw allow from 172.30.0.0/16 comment "zerotier"
|
|
|
|
# coolercontrol
|
|
yay coolercontrol
|
|
sudo systemctl enable --now coolercontrold.service
|
|
sudo systemctl edit coolercontrold.service # set log level to WARN
|
|
|
|
# video streaming
|
|
yay plex-media-server
|
|
sudo systemctl enable --now plexmediaserver.service
|
|
sudo ufw allow 8010 comment "chromecast"
|
|
sudo ufw allow 32400/tcp comment "plex"
|
|
sudo ufw allow 1900/udp comment "plex DLNA server"
|
|
sudo ufw allow 32469/tcp comment "plex DLNA server"
|
|
sudo ufw allow 32410,32412,32413,32414/udp comment "plex GDM discovery"
|
|
|
|
# steam
|
|
yay steam
|
|
sudo ufw allow 27031,27036/udp comment "Steam Link"
|
|
sudo ufw allow 27036,27037/tcp comment "Steam Link"
|
|
|
|
# qbittorrent
|
|
yay qbittorrent
|
|
sudo ufw allow 6881/tcp comment "qbittorrent"
|
|
|
|
# applications
|
|
yay i3status rofi mutt redshift discord teamviewer qalculate cmus ncspot
|