1
0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-12-22 07:01:33 -05:00

Add SSH client config and DNSSEC for Kicksecure

Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-01-18 08:12:34 -05:00
parent a578e202f4
commit c7d4edd2fe
No known key found for this signature in database
GPG Key ID: 060B29EB996BD9F2

View File

@ -35,6 +35,14 @@ sudo systemctl enable --now hide-hardware-info.service
#Install packages
sudo apt install --no-install-recommends qubes-gpg-split qubes-u2f eog qt5ct qt5-style-plugins arc-theme -y
#Setup SSH client
echo "GSSAPIAuthentication no" | sudo tee /etc/ssh/ssh_config.d/10-custom.conf
echo "VerifyHostKeyDNS yes" | sudo tee -a /etc/ssh/ssh_config.d/10-custom.conf
#Force DNSSEC
sudo sed -i 's/#DNSSEC=no/DNSSEC=yes/g' /etc/systemd/resolved.conf
sudo systemctl restart systemd-resolved
#Theming
git config --global http.proxy http://127.0.0.1:8082
git clone https://github.com/horst3180/arc-icon-theme
@ -73,4 +81,4 @@ OnCalendar=daily
Persistent=true
[Install]
WantedBy=timers.target" | sudo tee /etc/systemd/user/update-user-flatpaks.timer
WantedBy=timers.target" | sudo tee /etc/systemd/user/update-user-flatpaks.timer