build: add hook for setting up initial services status in chroot
update initial-servicves-status hook, add TODO
usr: add plymouth debian-logo theme
Merge branch 'master' into boot-splash
etc: add plymouth config
etc: ufw: enable ufw firewall
etc: ssh: add sshd config
 * change port to 822
 * Restrict ciphers and MACs
 * User 1024 bit server keys
 * Disable root logins
 * DIsable password auth
etc: icedove: add default prefs
 * auto-update addons
 * http protocol handler st to x-www-browser
 * tweak calendar display options
 * set spellchecker to FR
 * download all mail attachments locally
usr/share: add extra fonts as submodule
add gtk/openbox/... themes as submodule
skel: add snapfly menu to autostart
etc: iceweasel: security: disable malware detection
https://wiki.mozilla.org/Security/Features/Application_Reputation_Design_Doc#How_to_turn_off_this_feature
> When a binary file is downloaded, the user-agent extracts several pieces of metadata about the file
> The browser performs local lookups whenever a binary file is downloaded. If a local result is not found, the user-agent may perform a remote-lookup
> Google has offered an application reputation feature to detect malicious downloads as part of Google Safe Browsing since 2012
doc, packages: add logtop as alternative package
Merge branch 'master' into boot-splash
packages: add plymouth
Merge branch 'master' into initial-services-status
packages: add avahi-dnsconfd to avahi packages list (allows resolving of .local domains)
build, config, services: update default services configuration, disable unnecessary services
packages: replace sflphone with qutecom (works behind NATs)
Merge branch 'master' into firewall-rules