First draft of the installation script

etc/X11/xorg.conf.d/30-touchpad.conf

@@ -0,0 +1,8 @@
+Section "InputClass"
+    Identifier "touchpad"
+    Driver "libinput"
+    MatchIsTouchpad "on"
+    Option "Tapping" "on"
+    Option "ClickMethod" "clickfinger"
+    Option "NaturalScrolling" "true"
+EndSection

etc/iptables/iptables.rules

@@ -0,0 +1,49 @@
+# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
+*security
+:INPUT ACCEPT [484:209329]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [586:99971]
+COMMIT
+# Completed on Wed May 20 18:14:58 2020
+# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
+*raw
+:PREROUTING ACCEPT [511:211250]
+:OUTPUT ACCEPT [586:99971]
+COMMIT
+# Completed on Wed May 20 18:14:58 2020
+# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
+*mangle
+:PREROUTING ACCEPT [511:211250]
+:INPUT ACCEPT [511:211250]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [586:99971]
+:POSTROUTING ACCEPT [586:99971]
+COMMIT
+# Completed on Wed May 20 18:14:58 2020
+# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
+*filter
+:INPUT DROP [0:0]
+:FORWARD DROP [0:0]
+:OUTPUT ACCEPT [15:932]
+:TCP - [0:0]
+:UDP - [0:0]
+-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
+-A INPUT -i lo -j ACCEPT
+-A INPUT -m conntrack --ctstate INVALID -j DROP
+-A INPUT -p udp -m conntrack --ctstate NEW -j UDP
+-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j TCP
+-A INPUT -p tcp -m recent --set --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
+-A INPUT -p udp -m recent --set --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
+-A INPUT -j REJECT --reject-with icmp-proto-unreachable
+-A TCP -p tcp -m recent --update --seconds 60 --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
+-A UDP -p udp -m recent --update --seconds 60 --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
+COMMIT
+# Completed on Wed May 20 18:14:58 2020
+# Generated by iptables-save v1.8.4 on Wed May 20 18:14:58 2020
+*nat
+:PREROUTING ACCEPT [4:239]
+:INPUT ACCEPT [0:0]
+:OUTPUT ACCEPT [74:6294]
+:POSTROUTING ACCEPT [74:6294]
+COMMIT
+# Completed on Wed May 20 18:14:58 2020

etc/systemd/system/march.service

@@ -0,0 +1,8 @@
+[Unit]
+Description=March Reboot Service
+
+[Service]
+ExecStart=/root/arch-reboot.sh
+
+[Install]
+WantedBy=multi-user.target

etc/systemd/system/suspend@.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=User suspend actions
+Before=sleep.target
+
+[Service]
+User=%I
+Type=forking
+Environment=DISPLAY=:0
+ExecStartPre= 
+ExecStart= /home/tuan/.scripts/i3lock.py
+ExecStartPost=/usr/bin/sleep 1
+
+[Install]
+WantedBy=sleep.target