42 lines
1.6 KiB
Bash
42 lines
1.6 KiB
Bash
#!/bin/sh
|
|
|
|
. /lib/tiny-cloud/common
|
|
|
|
# Enable SSH keepalive
|
|
sed -i -e 's/^[\s#]*TCPKeepAlive\s.*/TCPKeepAlive yes/' -e 's/^[\s#]*ClientAliveInterval\s.*/ClientAliveInterval 60/' /etc/ssh/sshd_config
|
|
echo 'enabled SSH keep alives'
|
|
|
|
# openRC
|
|
sed -i -e 's/^[\s#]*rc_cgroup_mode=.*/rc_cgroup_mode="unified"/' /etc/rc.conf
|
|
sed -i -e 's/^[\s#]*rc_logger=.*/rc_logger="YES"/' /etc/rc.conf
|
|
echo 'enabled cgroupv2, openRC logging'
|
|
|
|
# speed up dhcpcd and chronyd
|
|
add_once /etc/dhcpcd.conf noarp >/dev/null
|
|
sed -i -e 's/^[\s#]*FAST_STARTUP=.*/FAST_STARTUP=yes/' /etc/conf.d/chronyd
|
|
|
|
# OpenRC parallel - causes too much chaos
|
|
#sed -i -e 's/^[\s#]*rc_parallel=.*/rc_parallel="YES"/' /etc/rc.conf
|
|
#echo 'enable parallel openRC'
|
|
|
|
# load falco kernel module at boot
|
|
grep -q falco /etc/modules || echo falco >> /etc/modules
|
|
|
|
# Setup syslog-ng json logging and apparmor tweaks
|
|
cp /lib/zdt/syslog-ng.conf /etc/syslog-ng/syslog-ng.conf
|
|
cp /lib/zdt/syslog-ng.logrotate.conf /etc/logrotate.d/syslog-ng
|
|
cp /lib/zdt/syslog-ng.apparmor /etc/apparmor.d/local/sbin.syslog-ng
|
|
|
|
[ -f /etc/periodic/daily/logrotate ] && mv /etc/periodic/daily/logrotate /etc/periodic/hourly/
|
|
echo 'syslog-ng: all to /var/log/messages as json, rotate hourly'
|
|
|
|
# use init to spawn monit
|
|
add_once /etc/inittab ":2345:respawn:/usr/bin/monit -Ic /etc/monitrc.zdt" >/dev/null
|
|
echo 'Enable monit via inittab'
|
|
|
|
# QoL - color prompt even for doas bash
|
|
[ -f /etc/profile.d/color_prompt.sh.disabled ] && mv /etc/profile.d/color_prompt.sh.disabled /etc/profile.d/color_prompt.sh
|
|
ln -sf /etc/profile.d/color_prompt.sh /etc/bash/color_prompt.sh
|
|
|
|
echo 'alias rs="doas bash"' > /etc/profile.d/alias.sh
|