first step is to init pacman and update system
- init pacman for package verification function according to link
- update system to latest one: pacman -Syu
next step is to add user and configure ssh
- add normal login user with useradd. Add user to group: wheel,log and systemctl-journal
- add user git with useradd
- update sudo with visudo
- add public key in .ssh/authorized_keys for git and normal login user
- install git and change user git shell to git-shell.
- test ssh public key access and git clone from local computer
- disable ssh root access and passwd login
- install sshguard
next step is to configure network,time and other system configuration
- configure netctl for dhcp (enable both IPv4 and IPv6) and enable this profile as startup service. (I couldn't sucess for static IP configuration) (update: change to system-networkd for statis ip)
- set timezone with timedatectl
- install ntp and enable it as startup service
- set up iptables rules in /etc/iptables/iptables.rules and ip6tables.rules
- install bash-completion
next step is to install different application
- install vnstat
- install shadowsocks
- install nginx, spawn-fcgi,python2-webpy,python2-flup,python2-matplotlib,python2-iso8601
- install python2-pip and pip2 install --upgrade google-api-python-client
- install my own webapplication *.service file and start app