move sysctl, mkinitcpio and systemctl commands to sysctl.bash

1 files changed, 22 insertions, 0 deletions

diff --git a/sysctl.bash b/sysctl.bash
index b2c9b9c..fcbadb2 100755
--- a/sysctl.bash
+++ b/sysctl.bash
@@ -1,8 +1,30 @@
 #!/bin/bash
 
+sudo sysctl --system
+
+sudo mkinitcpio -P
+
+sudo systemctl daemon-reload
+
 systemctl --user enable gnome-keyring-daemon.socket
 systemctl --user enable ssh-agent.socket
 sudo systemctl enable keyd.service
 sudo systemctl enable proton.VPN.service
 sudo systemctl enable snapper-cleanup.timer
 sudo systemctl enable snapper-timeline.timer
+
+# fail2ban
+sudo systemctl enable --now fail2ban
+
+# fs trim
+sudo systemctl enable --now fstrim.timer
+
+echo "==> Restarting services..."
+for svc in sshd fail2ban cups; do
+    if systemctl is-active --quiet "$svc"; then
+        echo "  Restarting active service: $svc"
+        sudo systemctl restart "$svc"
+    else
+        echo "  Skipping restart for inactive service: $svc"
+    fi
+done