Debian Init Makefile Project

This project provides an automated setup for configuring a Debian-based system using a Makefile and modular shell scripts. It includes tasks such as system updates, security hardening, and application installation.

Installation and Usage

Prerequisites

Ensure the following environment variables are set before running make all:

• TRUSTED_IPV4_CIDR: Define a trusted IPv4 subnet (e.g., 192.168.1.0/24)
• TRUSTED_IPV6_CIDR: Define a trusted IPv6 subnet (e.g., fc00::/7)

If these variables are not set, the Makefile execution will halt with an error message.

Available Targets

Target	Description
all	Executes system initialization, updates, security configuration, and tool installations.
init	Initializes necessary directories.
system_update	Updates the system packages.
update_hostname	Update the hostname and domain.
configure_security	Configures security features including AppArmor, Fail2Ban, firewall, system hardening, and unattended upgrades.
configure_security_manually	Configures additional security settings that require user discretion.
disable_services	Disables unnecessary services, including root SSH access.
install_security_tools	Installs security-related tools such as ClamAV, debsecan, Logwatch, and Lynis.
secure_system	Secures system logs and sets up scheduled security checks.
clean	Removes temporary files created during execution.

Full Setup

To execute the full setup, run the following command with the required variables:

make all TRUSTED_IPV4_CIDR=192.168.1.0/24 TRUSTED_IPV6_CIDR=fc00::/7

Updating Hostname and Domain Name

The update_hostname target updates the system hostname and domain.

make update_hostname NEW_HOSTNAME=myserver NEW_DOMAIN=mydomain.com

Cleaning Up

make clean

Removes any temporary or cache files created during execution.