Enhance SSH security documentation and update arch install notes
- ssh-setup-guide.md: Added comprehensive security hardening section with: * Non-standard port configuration (Port 2222) * Advanced SSH hardening settings (MaxAuthTries, ClientAlive, AllowUsers) * Dynamic DNS setup for remote access (DuckDNS, No-IP, Cloudflare) * fail2ban installation and VPN considerations * Additional security steps checklist - arch-install-notes.md: Updated post-installation priorities with yadm setup 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -20,26 +20,24 @@
|
||||
- [x] Mount filesystems
|
||||
|
||||
### Base System Installation
|
||||
- [ ] Update package database: `pacman -Sy`
|
||||
- [ ] Install base system: `pacstrap /mnt base linux linux-firmware`
|
||||
- [ ] Generate fstab: `genfstab -U /mnt >> /mnt/etc/fstab`
|
||||
- [ ] Chroot: `arch-chroot /mnt`
|
||||
- [x] Update package database: `pacman -Sy`
|
||||
- [x] Install base system: `pacstrap /mnt base linux linux-firmware`
|
||||
- [x] Generate fstab: `genfstab -U /mnt >> /mnt/etc/fstab`
|
||||
- [x] Chroot: `arch-chroot /mnt`
|
||||
|
||||
### System Configuration
|
||||
- [ ] Set timezone
|
||||
- [ ] Configure locale
|
||||
- [ ] Set hostname
|
||||
- [ ] Configure network
|
||||
- [ ] Set root password
|
||||
- [ ] Install bootloader (GRUB)
|
||||
- [ ] Create user account with sudo privileges
|
||||
- [x] Set timezone
|
||||
- [x] Configure locale
|
||||
- [x] Set hostname
|
||||
- [x] Configure network
|
||||
- [x] Set root password
|
||||
- [x] Install bootloader (GRUB)
|
||||
- [x] Create user account with sudo privileges
|
||||
|
||||
## Post-Installation Priorities
|
||||
- [ ] Install essential packages (git, base-devel)
|
||||
- [ ] Set up AUR access
|
||||
- [ ] Install Deskflow
|
||||
- [ ] Install and configure yadm: `pacman -S yadm`
|
||||
- [ ] Clone dotfiles: `yadm clone <your-dotfiles-repo>`
|
||||
- [ ] Install SSH server: `pacman -S openssh`
|
||||
- [ ] Enable SSH service: `systemctl enable sshd`
|
||||
- [ ] Configure firewall
|
||||
- [x] Install SSH server: `pacman -S openssh`
|
||||
- [x] Enable SSH service: `systemctl enable sshd`
|
||||
- [x] Create user account with proper sudo access
|
||||
- [x] Basic network configuration
|
||||
|
||||
See [arch-linux-setup.md](arch-linux-setup.md) for comprehensive post-installation tasks.
|
||||
|
||||
Reference in New Issue
Block a user