Update Network, Firewall & Proxmox Template Syspreps

01-debian-networking.txt

@@ -1,13 +1,15 @@
+# ip A to find interface name
+su - root
 vi /etc/dhcpcd.conf
 denyinterfaces enp1s0
 
-sudo vi /etc/network/interfaces
+vi /etc/network/interfaces
 source /etc/network/interfaces.d/*
 auto lo
 iface lo inet loopback
 allow-hotplug enp1s0
 
-sudo vi /etc/network/interfaces.d/enp1s0
+vi /etc/network/interfaces.d/enp1s0
 iface enp1s0 inet static
         address 192.168.1.203
         netmask 255.255.255.0
@@ -15,7 +17,7 @@ iface enp1s0 inet static
         dns-domain intensewebs.com
         dns-nameservers 192.168.1.140 192.168.1.141 192.168.1.124
 
-sudo vi /etc/resolv.conf
+vi /etc/resolv.conf
 domain intensewebs.com
 search intensewebs.com
 nameserver 192.168.1.140
@@ -36,7 +38,10 @@ reboot
 ~
 .
 
-___________________________________________________________________________
+----------------------------------------------------------
+# TO REMOVE OLD KEYS FROM known_hosts file
+ssh-keygen -f "/home/privacy/.ssh/known_hosts" -R "192.168.1.124"
+_________________________________________________________________________
 # OPTIONAL NOT NEEDED METHODS
 # IF DESIRING TO USE Netork Manager: sudo apt install network-manager
 ip link list

02-ssh-help.txt

@@ -8,6 +8,7 @@ ssh-keygen -t ed25519 -b 256 -C "comment" -f ~/.ssh/id_ed25519
 # ENABLE root access during OS install with password but don't enable SSH remote login for 'root'.
 # DEBIAN--LOGIN AS ROOT - Adding SUDO
 su - root
+# Disable CDROM REPOSITORY: vi /etc/apt/sources.list
 sudo apt update && sudo apt upgrade
 # apt install sudo
 ----------------------------------------------------------

03-firewalld.txt

@@ -9,34 +9,34 @@ systemctl stop firewalld.service
 systemctl disable firewalld.service
 apt policy firewalld
 
+
+systemctl enable firewalld
+systemctl start firewalld
 firewall-cmd --permanent --add-port=80/tcp
 firewall-cmd --permanent --add-port=443/tcp
 firewall-cmd --permanent --add-source=192.168.1.0/24
 firewall-cmd --add-service=ssh --permanent
-systemctl enable firewalld
 firewall-cmd --reload
 systemctl status firewalld
 firewall-cmd --state
 firewall-cmd --list-services
 firewall-cmd --list-all
 
-# VNC
-# sudo firewall-cmd --zone=public --add-port 5901/tcp --permanent
-# sudo firewall-cmd --zone=public --add-service=vnc-server --permanent
-# sudo firewall-cmd --zone=public --add-source=192.168.1.0/24
-# sudo firewall-cmd --reload
-
-# firewall-cmd --permanent --add-service=vnc-server
-# firewall-cmd --reload
-# sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent
-
 firewall-cmd --get-active-zones
 firewall-cmd --zone=public --list-all
-# firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop'
-# firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept'
 firewall-cmd --zone=internal --add-source=192.168.1.0/24
 firewall-cmd --zone=public --remove-service=ssh
 firewall-cmd --zone=public --remove-service=dhcpv6-client
 firewall-cmd --runtime-to-permanent
 firewall-cmd --add-service=cockpit --permanent
 firewall-cmd --reload
+
+# VNC
+firewall-cmd --zone=public --add-port 5901/tcp --permanent
+firewall-cmd --zone=public --add-service=vnc-server --permanent
+firewall-cmd --zone=public --add-source=192.168.1.0/24
+sudo firewall-cmd --reload
+
+# sudo firewall-cmd --zone=public --remove-service=vnc-server --permanent
+# firewall-cmd --add-rich-rule='rule family=ipv4 service name=ssh log prefix="Dropped SSH" level="notice" limit value=5/m drop'
+# firewall-cmd --add-rich-rule='rule family=ipv4 source address=10.1.111.21/24 service name=ssh log prefix="SSH Logs" level="notice" accept'

proxmox-create-template

@@ -5,7 +5,7 @@ timedatectl set-timezone UTC
 apt install -y unattended-upgrades
 dpkg-reconfigure -plow unattended-upgrades
 
-# Anonymize the VM & Sysprep Windows: C:\Windows\System32\Sysprep\sysprep.exe /oobe /generalize /shutdown
+# Anonymize the VM or Sysprep Windows: C:\Windows\System32\Sysprep\sysprep.exe /oobe /generalize /shutdown
 
 truncate -s 0 /etc/machine-id
 rm -f /var/lib/dbus/machine-id
@@ -20,5 +20,5 @@ rm -f /var/lib/dhcp/*.leases
 apt clean
 shutdown -h now
 
-# # Via command line - (VM # in Proxmox)
+# # Via command line clone VM or below (VM # in Proxmox)
 qm template 100