etc: power: laptop-mode add config for disk spinup time, noatime mount option control, do not autosuspend usb mouse/keyboard
etc: ufw: enable ufw firewall
etc: ssh: add sshd config
 * change port to 822
 * Restrict ciphers and MACs
 * User 1024 bit server keys
 * Disable root logins
 * DIsable password auth
etc: icedove: add default prefs
 * auto-update addons
 * http protocol handler st to x-www-browser
 * tweak calendar display options
 * set spellchecker to FR
 * download all mail attachments locally
usr/share: add extra fonts as submodule
add gtk/openbox/... themes as submodule
skel: add snapfly menu to autostart
etc: iceweasel: security: disable malware detection
https://wiki.mozilla.org/Security/Features/Application_Reputation_Design_Doc#How_to_turn_off_this_feature
> When a binary file is downloaded, the user-agent extracts several pieces of metadata about the file
> The browser performs local lookups whenever a binary file is downloaded. If a local result is not found, the user-agent may perform a remote-lookup
> Google has offered an application reputation feature to detect malicious downloads as part of Google Safe Browsing since 2012
doc, packages: add logtop as alternative package
Merge branch 'master' into boot-splash
packages: add plymouth