Debian Common:
  - apt-get install unattended-upgrades firehol systraq git-core logwatch rkhunter munin sudo

  - in /etc, git init && git add * && git commit -a

  - update /etc/hostname with a new name from onion-names.txt

  unattended-upgrades:
  - in /etc/cron.daily/apt, change UpdateInterval to 1, change
    UnattendedUpgradeInterval to 1.  git commit -a.

  iptables:
  - in /etc/firehol, update firehol.conf to:
      "protections all
      policy reject
      server ssh accept 
      client accept all"
   - add any other services needed.  
   - edit /etc/default/firehol and s/NO/YES/.
   - git commit -a

  ssh:
  - rekey the ssh host keys.
  - replace /etc/ssh/sshd_config with our standard sshd_config file.
  - git commit -a
  
  exim4:
  - dpkg-reconfigure exim4-config
    - change to Internet host and take the defaults for the rest
    - git commit -a

  systraq:
  - follow the directions in /usr/share/doc/systraq/manual.txt.gz for
    installation.
  rkhunter:
  - run rkhunter --update --propupd

  aliases:
  - update /etc/aliases to point root at (this should be a mailing list
    for tor-sysadmins).

  etc/init.d:
  - clean up extraneous services with update-rc.d -f <service> remove