Update

etc/systemd/coredump.conf

@@ -0,0 +1,21 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See coredump.conf(5) for details.
+
+[Coredump]
+#Storage=external
+#Compress=yes
+#ProcessSizeMax=2G
+#ExternalSizeMax=2G
+#JournalSizeMax=767M
+#MaxUse=
+#KeepFree=

etc/systemd/journal-remote.conf

@@ -0,0 +1,19 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See journal-remote.conf(5) for details
+
+[Remote]
+# Seal=false
+# SplitMode=host
+# ServerKeyFile=/etc/ssl/private/journal-remote.pem
+# ServerCertificateFile=/etc/ssl/certs/journal-remote.pem
+# TrustedCertificateFile=/etc/ssl/ca/trusted.pem

etc/systemd/journal-upload.conf

@@ -0,0 +1,18 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See journal-upload.conf(5) for details
+
+[Upload]
+# URL=
+# ServerKeyFile=/etc/ssl/private/journal-upload.pem
+# ServerCertificateFile=/etc/ssl/certs/journal-upload.pem
+# TrustedCertificateFile=/etc/ssl/ca/trusted.pem

etc/systemd/journald.conf

@@ -0,0 +1,42 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See journald.conf(5) for details.
+
+[Journal]
+#Storage=volatile
+#Compress=yes
+#Seal=yes
+#SplitMode=uid
+#SyncIntervalSec=5m
+#RateLimitIntervalSec=30s
+#RateLimitBurst=1000
+SystemMaxUse=50M
+#SystemKeepFree=
+#SystemMaxFileSize=
+#SystemMaxFiles=100
+#RuntimeMaxUse=
+#RuntimeKeepFree=
+#RuntimeMaxFileSize=
+#RuntimeMaxFiles=100
+#MaxRetentionSec=
+MaxFileSec=1week
+#ForwardToSyslog=no
+#ForwardToKMsg=no
+#ForwardToConsole=no
+#ForwardToWall=yes
+#TTYPath=/dev/console
+#MaxLevelStore=debug
+#MaxLevelSyslog=debug
+#MaxLevelKMsg=notice
+#MaxLevelConsole=info
+#MaxLevelWall=emerg
+#LineMax=48K

etc/systemd/journald.conf.pacnew

@@ -0,0 +1,43 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See journald.conf(5) for details.
+
+[Journal]
+#Storage=auto
+#Compress=yes
+#Seal=yes
+#SplitMode=uid
+#SyncIntervalSec=5m
+#RateLimitIntervalSec=30s
+#RateLimitBurst=10000
+#SystemMaxUse=
+#SystemKeepFree=
+#SystemMaxFileSize=
+#SystemMaxFiles=100
+#RuntimeMaxUse=
+#RuntimeKeepFree=
+#RuntimeMaxFileSize=
+#RuntimeMaxFiles=100
+#MaxRetentionSec=
+#MaxFileSec=1month
+#ForwardToSyslog=no
+#ForwardToKMsg=no
+#ForwardToConsole=no
+#ForwardToWall=yes
+#TTYPath=/dev/console
+#MaxLevelStore=debug
+#MaxLevelSyslog=debug
+#MaxLevelKMsg=notice
+#MaxLevelConsole=info
+#MaxLevelWall=emerg
+#LineMax=48K
+#ReadKMsg=yes

etc/systemd/logind.conf

@@ -0,0 +1,38 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See logind.conf(5) for details.
+
+[Login]
+#NAutoVTs=1
+#ReserveVT=6
+#KillUserProcesses=no
+#KillOnlyUsers=
+#KillExcludeUsers=root
+#InhibitDelayMaxSec=5
+HandlePowerKey=ignore
+#HandleSuspendKey=suspend
+#HandleHibernateKey=hibernate
+#HandleLidSwitch=suspend
+#HandleLidSwitchExternalPower=suspend
+#HandleLidSwitchDocked=ignore
+#PowerKeyIgnoreInhibited=no
+#SuspendKeyIgnoreInhibited=no
+#HibernateKeyIgnoreInhibited=no
+#LidSwitchIgnoreInhibited=yes
+#HoldoffTimeoutSec=30s
+#IdleAction=ignore
+#IdleActionSec=30min
+#RuntimeDirectorySize=10%
+#RemoveIPC=yes
+#InhibitorsMax=8192
+#SessionsMax=8192
+#UserTasksMax=33%

etc/systemd/network/20-wired.network

@@ -0,0 +1,12 @@
+[Match]
+Name=enp2s0
+
+[Network]
+DHCP=ipv4
+DNS=9.9.9.9
+DNSOverTLS=opportunistic
+DNSSEC=true
+
+[DHCP]
+RouteMetric=10
+UseDNS=no

etc/systemd/network/25-wireless.network

@@ -0,0 +1,12 @@
+[Match]
+Name=wlp3s0
+
+[Network]
+DHCP=ipv4
+DNS=9.9.9.9
+DNSOverTLS=opportunistic
+DNSSEC=true
+
+[DHCP]
+RouteMetric=20
+UseDNS=no

etc/systemd/network/26-wireless.network

@@ -0,0 +1,12 @@
+[Match]
+Name=wlp0s20f0u2
+
+[Network]
+DHCP=ipv4
+DNS=9.9.9.9
+DNSOverTLS=opportunistic
+DNSSEC=true
+
+[DHCP]
+RouteMetric=30
+UseDNS=no

etc/systemd/networkd.conf

@@ -0,0 +1,16 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See networkd.conf(5) for details
+
+[DHCP]
+#DUIDType=vendor
+#DUIDRawData=

etc/systemd/rbackup-bond/10-bond1.network

@@ -5,7 +5,7 @@ Name=bond1
 DHCP=ipv4
 DNSOverTLS=opportunistic
 DNSSEC=true
-DNS=9.9.9.9
+DNS=9.9.9.10
 
 [DHCP]
 UseDNS=no

etc/systemd/rbackup-bond/25-wireless.network

@@ -1,5 +1,5 @@
 [Match]
-Name=wlan0
+Name=wlp3s0
 
 [Network]
 LinkLocalAddressing=no

etc/systemd/rbackup-normal/20-wired.network

@@ -0,0 +1,12 @@
+[Match]
+Name=enp2s0
+
+[Network]
+DHCP=ipv4
+DNS=9.9.9.9
+DNSOverTLS=opportunistic
+DNSSEC=true
+
+[DHCP]
+RouteMetric=10
+UseDNS=no

etc/systemd/rbackup-normal/25-wireless.network

@@ -0,0 +1,12 @@
+[Match]
+Name=wlp3s0
+
+[Network]
+DHCP=ipv4
+DNS=9.9.9.9
+DNSOverTLS=opportunistic
+DNSSEC=true
+
+[DHCP]
+RouteMetric=20
+UseDNS=no

etc/systemd/rbackup-normal/26-wireless.network

@@ -0,0 +1,12 @@
+[Match]
+Name=wlp0s20f0u2
+
+[Network]
+DHCP=ipv4
+DNS=9.9.9.9
+DNSOverTLS=opportunistic
+DNSSEC=true
+
+[DHCP]
+RouteMetric=30
+UseDNS=no

etc/systemd/resolved.conf

@@ -0,0 +1,24 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See resolved.conf(5) for details
+
+[Resolve]
+#DNS=1.1.1.1 9.9.9.9
+#FallbackDNS=1.1.1.1 9.9.9.9
+#Domains=
+#LLMNR=yes
+#MulticastDNS=yes
+#DNSSEC=no
+#DNSOverTLS=no
+Cache=yes
+#DNSStubListener=udp
+

etc/systemd/resolved.conf.pacnew

@@ -0,0 +1,24 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See resolved.conf(5) for details
+
+[Resolve]
+#DNS=
+#FallbackDNS=1.1.1.1 9.9.9.10 8.8.8.8 2606:4700:4700::1111 2620:fe::10 2001:4860:4860::8888
+#Domains=
+#LLMNR=yes
+#MulticastDNS=yes
+#DNSSEC=allow-downgrade
+#DNSOverTLS=no
+#Cache=yes
+#DNSStubListener=yes
+#ReadEtcHosts=yes

etc/systemd/sleep.conf

@@ -0,0 +1,25 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See systemd-sleep.conf(5) for details
+
+[Sleep]
+#AllowSuspend=yes
+#AllowHibernation=yes
+#AllowSuspendThenHibernate=yes
+#AllowHybridSleep=yes
+#SuspendMode=
+#SuspendState=mem standby freeze
+#HibernateMode=platform shutdown
+#HibernateState=disk
+#HybridSleepMode=suspend platform shutdown
+#HybridSleepState=disk
+HibernateDelaySec=60min

etc/systemd/swap.conf

@@ -0,0 +1,57 @@
+################################################################################
+# Defaults are optimized for general usage
+################################################################################
+
+################################################################################
+# You can override any settings by files in:
+# /etc/systemd/swap.conf.d/*.conf
+################################################################################
+
+################################################################################
+# Zswap
+#
+# Kernel >= 3.11
+# Zswap create compress cache between swap and memory for reduce IO
+# https://www.kernel.org/doc/Documentation/vm/zswap.txt
+
+zswap_enabled=1
+zswap_compressor=lz4      # lzo lz4
+zswap_max_pool_percent=25 # 1-99
+zswap_zpool=zbud          # zbud z3fold
+
+################################################################################
+# ZRam
+#
+# Kernel >= 3.15
+# Zram compression streams count for additional information see:
+# https://www.kernel.org/doc/Documentation/blockdev/zram.txt
+
+zram_enabled=0
+zram_size=$(($RAM_SIZE/4))      # This is 1/4 of ram size by default.
+zram_streams=$NCPU
+zram_alg=lz4                    # lzo lz4 deflate lz4hc 842 - for Linux 4.8.4
+zram_prio=32767                 # 1 - 32767
+
+################################################################################
+# Swap File Chunked
+# Allocate swap files dynamically
+# For btrfs fallback to swapfile + loop will be used
+# ex. Min swap size 512M, Max 8*512M
+swapfc_enabled=0
+swapfc_force_use_loop=0     # Force usage of swapfile + loop
+swapfc_frequency=1s         # How often check free swap space
+swapfc_chunk_size=512M      # Allocate size of swap chunk
+swapfc_max_count=8          # 0 - unlimited, note: 32 is a kernel maximum
+swapfc_free_swap_perc=15    # Add new chunk if free < 15%
+                            # Remove chunk if free > 15+40% & chunk count > 2
+swapfc_path=/var/lib/systemd-swap/swapfc/
+# Only for swapfile + loop
+swapfc_nocow=1              # Disable CoW on swapfile
+swapfc_directio=1           # Use directio for loop dev
+swapfc_force_preallocated=0 # Will preallocate created files
+
+################################################################################
+# Swap devices
+# Find and auto swapon all available swap devices
+swapd_auto_swapon=1
+swapd_prio=1024

etc/systemd/system.conf

@@ -0,0 +1,64 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See systemd-system.conf(5) for details.
+
+[Manager]
+#LogLevel=info
+#LogTarget=journal-or-kmsg
+#LogColor=yes
+#LogLocation=no
+#DumpCore=yes
+#ShowStatus=yes
+#CrashChangeVT=no
+#CrashShell=no
+#CrashReboot=no
+#CtrlAltDelBurstAction=reboot-force
+#CPUAffinity=1 2
+#RuntimeWatchdogSec=0
+#ShutdownWatchdogSec=10min
+#WatchdogDevice=
+#CapabilityBoundingSet=
+#NoNewPrivileges=no
+#SystemCallArchitectures=
+#TimerSlackNSec=
+#DefaultTimerAccuracySec=1min
+#DefaultStandardOutput=journal
+#DefaultStandardError=inherit
+#DefaultTimeoutStartSec=90s
+#DefaultTimeoutStopSec=90s
+#DefaultRestartSec=100ms
+#DefaultStartLimitIntervalSec=10s
+#DefaultStartLimitBurst=5
+#DefaultEnvironment=
+#DefaultCPUAccounting=no
+#DefaultIOAccounting=no
+#DefaultIPAccounting=no
+#DefaultBlockIOAccounting=no
+#DefaultMemoryAccounting=yes
+#DefaultTasksAccounting=yes
+#DefaultTasksMax=15%
+#DefaultLimitCPU=
+#DefaultLimitFSIZE=
+#DefaultLimitDATA=
+#DefaultLimitSTACK=
+#DefaultLimitCORE=
+#DefaultLimitRSS=
+#DefaultLimitNOFILE=1024:524288
+#DefaultLimitAS=
+#DefaultLimitNPROC=
+#DefaultLimitMEMLOCK=
+#DefaultLimitLOCKS=
+#DefaultLimitSIGPENDING=
+#DefaultLimitMSGQUEUE=
+#DefaultLimitNICE=
+#DefaultLimitRTPRIO=
+#DefaultLimitRTTIME=

etc/systemd/system/bluetooth.target.wants/bluetooth.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/bluetooth.service

etc/systemd/system/dbus-org.bluez.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/bluetooth.service

etc/systemd/system/dbus-org.freedesktop.network1.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/systemd-networkd.service

etc/systemd/system/dbus-org.freedesktop.resolve1.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/systemd-resolved.service

etc/systemd/system/dbus-org.freedesktop.timesync1.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/systemd-timesyncd.service

etc/systemd/system/disable-turbo-boost.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=Disable Turbo Boost on Intel CPU
+ 
+[Service]
+ExecStart=/bin/sh -c "/usr/bin/echo 1 > /sys/devices/system/cpu/intel_pstate/no_turbo"
+ExecStop=/bin/sh -c "/usr/bin/echo 0 > /sys/devices/system/cpu/intel_pstate/no_turbo"
+RemainAfterExit=yes
+ 
+[Install]
+WantedBy=sysinit.target

etc/systemd/system/getty.target.wants/getty@tty1.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/getty@.service

etc/systemd/system/graphical.target.wants/threema-web.service

@@ -0,0 +1 @@
+/etc/systemd/system/threema-web.service

etc/systemd/system/iwd.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=Wireless service
+Before=network.target
+Wants=network.target
+
+[Service]
+Type=dbus
+BusName=net.connman.iwd
+ExecStart=/usr/lib/iwd/iwd
+LimitNPROC=1
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target

etc/systemd/system/lvm2-monitor.service

@@ -0,0 +1 @@
+/dev/null

etc/systemd/system/multi-user.target.wants/apparmor.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/apparmor.service

etc/systemd/system/multi-user.target.wants/irqbalance.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/irqbalance.service

etc/systemd/system/multi-user.target.wants/libvirtd.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/libvirtd.service

etc/systemd/system/multi-user.target.wants/lm_sensors.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/lm_sensors.service

etc/systemd/system/multi-user.target.wants/randomvpn.service

@@ -0,0 +1 @@
+/etc/systemd/system/randomvpn.service

etc/systemd/system/multi-user.target.wants/remote-fs.target

@@ -0,0 +1 @@
+/usr/lib/systemd/system/remote-fs.target

etc/systemd/system/multi-user.target.wants/systemd-networkd.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/systemd-networkd.service

etc/systemd/system/multi-user.target.wants/systemd-resolved.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/systemd-resolved.service

etc/systemd/system/multi-user.target.wants/ufw.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/ufw.service

etc/systemd/system/netctl@failover.service

@@ -0,0 +1,8 @@
+.include /usr/lib/systemd/system/netctl@.service
+
+[Unit]
+Description=A wired connection with failover to wireless
+BindsTo=sys-subsystem-net-devices-enp2s0.device
+BindsTo=sys-subsystem-net-devices-wlp3s0.device
+After=sys-subsystem-net-devices-enp2s0.device
+After=sys-subsystem-net-devices-wlp3s0.device

etc/systemd/system/randomvpn.service

@@ -0,0 +1,20 @@
+[Unit]
+Description=Random VPN client
+After=syslog.target network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+WorkingDirectory=/etc/openvpn/client/
+ProtectHome=true
+ProtectSystem=strict
+ExecStart=/usr/bin/randomvpn start
+RemainAfterExit=yes
+# CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE LimitNPROC=10
+# DeviceAllow=/dev/null rw
+# DeviceAllow=/dev/net/tun rw
+ExecStop=/usr/bin/randomvpn stop
+KillMode=process
+
+[Install]
+WantedBy=multi-user.target

etc/systemd/system/rnetworking.service

@@ -1,13 +1,17 @@
 [Unit]
  Description=Restart networking services if internet connection not detected
- After=network-online.target
+ After=network-online.target iwd.service
 
 [Service]
- Type=oneshot
- ExecStart=/usr/bin/rnetworking
- TimeoutStopSec=180
- KillMode=process
- KillSignal=SIGINT
+Type=oneshot
+ProtectHome=true
+ProtectSystem=strict
+ExecStart=/usr/bin/rnetworking
+CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE LimitNPROC=10
+DeviceAllow=/dev/null rw
+DeviceAllow=/dev/net/tun rw
+StandardOutput=null
+KillMode=process
 
 [Install]
  WantedBy=multi-user.target

etc/systemd/system/rnetworking.timer

@@ -1,8 +1,9 @@
 [Unit]
- Description=Comprobación automatica de servicios de red cada 5 minutos
+ Description=Check network services every 5 minutes
+
 [Timer]
- OnBootSec=2min
- OnUnitActiveSec=10min
+ OnBootSec=1min
+ OnUnitActiveSec=5min
  Unit=rnetworking.service
 
 [Install]

etc/systemd/system/sockets.target.wants/systemd-networkd.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/system/systemd-networkd.socket

etc/systemd/system/sockets.target.wants/virtlockd.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/system/virtlockd.socket

etc/systemd/system/sockets.target.wants/virtlogd.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/system/virtlogd.socket

etc/systemd/system/sysinit.target.wants/enable-processor-performance.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/enable-processor-performance.service

etc/systemd/system/sysinit.target.wants/systemd-timesyncd.service

@@ -0,0 +1 @@
+/usr/lib/systemd/system/systemd-timesyncd.service

etc/systemd/system/systemd-journal-flush.service

@@ -0,0 +1 @@
+/dev/null

etc/systemd/system/systemd-journald-audit.socket

@@ -0,0 +1 @@
+/dev/null

etc/systemd/system/timers.target.wants/rnetworking.timer

@@ -0,0 +1 @@
+/etc/systemd/system/rnetworking.timer

etc/systemd/system/tlp.service

@@ -0,0 +1,20 @@
+# tlp - systemd startup/shutdown service
+#
+# Copyright (c) 2018 Thomas Koch <linrunner at gmx.net>
+# This software is licensed under the GPL v2 or later.
+
+[Unit]
+Description=TLP system startup/shutdown
+#Wants=bluetooth.service NetworkManager.service
+After=multi-user.target
+Before=shutdown.target
+Documentation=http://linrunner.de/tlp
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+ExecStart=/usr/bin/tlp init start
+ExecStop=/usr/bin/tlp init stop
+
+[Install]
+WantedBy=multi-user.target

etc/systemd/system/tor-router.service

@@ -0,0 +1,13 @@
+[Unit]
+ Description=Start rules for transparent tor proxy
+ After=network-online.target 
+
+[Service]
+ Type=simple
+ ExecStart=/usr/bin/tor-router
+ TimeoutStopSec=180
+ KillMode=process
+ KillSignal=SIGINT
+
+[Install]
+ WantedBy=multi-user.target

etc/systemd/timesyncd.conf

@@ -0,0 +1,19 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# Entries in this file show the compile time defaults.
+# You can change settings by editing this file.
+# Defaults can be restored by simply deleting this file.
+#
+# See timesyncd.conf(5) for details.
+
+[Time]
+#NTP=
+#FallbackNTP=0.arch.pool.ntp.org 1.arch.pool.ntp.org 2.arch.pool.ntp.org 3.arch.pool.ntp.org
+#RootDistanceMaxSec=5
+#PollIntervalMinSec=32
+#PollIntervalMaxSec=2048

etc/systemd/user.conf

@@ -0,0 +1,44 @@
+#  This file is part of systemd.
+#
+#  systemd is free software; you can redistribute it and/or modify it
+#  under the terms of the GNU Lesser General Public License as published by
+#  the Free Software Foundation; either version 2.1 of the License, or
+#  (at your option) any later version.
+#
+# You can override the directives in this file by creating files in
+# /etc/systemd/user.conf.d/*.conf.
+#
+# See systemd-user.conf(5) for details
+
+[Manager]
+#LogLevel=info
+#LogTarget=console
+#LogColor=yes
+#LogLocation=no
+#SystemCallArchitectures=
+#TimerSlackNSec=
+#DefaultTimerAccuracySec=1min
+#DefaultStandardOutput=inherit
+#DefaultStandardError=inherit
+#DefaultTimeoutStartSec=90s
+#DefaultTimeoutStopSec=90s
+#DefaultRestartSec=100ms
+#DefaultStartLimitIntervalSec=10s
+#DefaultStartLimitBurst=5
+#DefaultEnvironment=
+#DefaultLimitCPU=
+#DefaultLimitFSIZE=
+#DefaultLimitDATA=
+#DefaultLimitSTACK=
+#DefaultLimitCORE=
+#DefaultLimitRSS=
+#DefaultLimitNOFILE=
+#DefaultLimitAS=
+#DefaultLimitNPROC=
+#DefaultLimitMEMLOCK=
+#DefaultLimitLOCKS=
+#DefaultLimitSIGPENDING=
+#DefaultLimitMSGQUEUE=
+#DefaultLimitNICE=
+#DefaultLimitRTPRIO=
+#DefaultLimitRTTIME=

etc/systemd/user/sockets.target.wants/dirmngr.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/user/dirmngr.socket

etc/systemd/user/sockets.target.wants/gpg-agent-browser.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/user/gpg-agent-browser.socket

etc/systemd/user/sockets.target.wants/gpg-agent-extra.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/user/gpg-agent-extra.socket

etc/systemd/user/sockets.target.wants/gpg-agent-ssh.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/user/gpg-agent-ssh.socket

etc/systemd/user/sockets.target.wants/gpg-agent.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/user/gpg-agent.socket

etc/systemd/user/sockets.target.wants/p11-kit-server.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/user/p11-kit-server.socket

etc/systemd/user/sockets.target.wants/pulseaudio.socket

@@ -0,0 +1 @@
+/usr/lib/systemd/user/pulseaudio.socket