Settings after Trisquel 8 installation

Hello! I use Trisqule + LXDE + Lightdm on Laptop 1.9 MHz, 8GB Ram. After installation I turn environment like this. I delete unnecessary packages, install necessary packages, disable NetworkManager and create wpa-supplicant unit for systemd, also configure iptables, tor, icecat. numlockx for auto switch on numlock after boot.

# Install and delete packages
2 apt-get install apt-file icecat gimp audacious audacity abrowser thunar geany tor iptables openvpn filezilla evince pdftk libreoffice git numlockx
4 apt-get remove sylpheed pidgin xfburn xsane xscreensaver

# Remove unnecessary units from systemd
# Networkmanager save wifi password so I do not use it
5 systemctl disable NetworkManager

# acpid reacts on events listening own file. systemd does this. so I disable acpid
systemctl disable acpid
systemctl disable acpid.path
systemctl disable acpid.socket

# if have no printers disable cups - print service
252 systemctl disable cups

# friendly recovery mode - what's this?
256 systemctl disable friendly-recovery.service

# if you would like to turn clock manually without system connects to time server disable time synchronization
260 systemctl disable systemd-timesyncd.service
261 systemctl status ureadahead.service

# not having LAN disable remote-fs and avahi
265 systemctl disable remote-fs.target
334 systemctl disable avahi-daemon.service

Internet through wpa_supplicant

# cat /etc/wpa_supplicant/wpa_supplicant.conf
ctrl_interface=/run/wpa_supplicant
ctrl_interface_group=0
update_config=1

network={
ssid="homewifi"
scan_ssid=1
proto=WPA2
key_mgmt=WPA-PSK
psk=hashmyhash
}

# ifconfig wlp2s0 up
# wpa_supplicant -B -i wlp2s0 -c /etc/wpa_supplicant/wpa_supplicant.conf
# dhclient wlp2s0 &
# ping fsf.org
..it goes ok..

# cat wpa2.service
[Unit]
Description=WPA 2
Wants=network.target
After=sys-subsystem-net-devices-wlp2s0.device
Before=network.target
BindsTo=sys-subsystem-net-devices-wlp2s0.device

[Service]
Type=oneshot
RemainAfterExit=yes

ExecStart=/sbin/ifconfig wlp2s0 up
ExecStart=/sbin/wpa_supplicant -B -i wlp2s0 -c /etc/wpa_supplicant/wpa_supplicant.conf
ExecStart=/sbin/dhclient wlp2s0

[Install]
WantedBy=multi-user.target

# systemctl enable wpa2.service

Iptables configuration

nano /etc/iptables-desktop.config
cat /etc/iptables-desktop.config
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -m state ! --state NEW -j DROP
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
COMMIT

iptables-restore < /etc/iptables-desktop.config
service iptables save

# installing iptables-persitant for run firewall configurations with systemd after boot
apt-get install iptables-persistant