Core

Prepare:

apt-get install -y wget curl lsb-release
truncate -s0 /etc/apt/sources.list
mkdir -p /etc/apt/sources.list.d/.old
mv /etc/apt/sources.list.d/* /etc/apt/sources.list.d/.old
wget -O /etc/apt/trusted.gpg.d/mostertman.gpg \
  https://pkg.mostertman.com/repo-signing-key.gpg

And:

cat <<EOF > /etc/apt/sources.list.d/mostertman.list
# Main OS repositories
deb https://ubuntu.pkg.mostertman.com/    $(lsb_release -sc) main restricted universe multiverse
deb https://updates.pkg.mostertman.com/   $(lsb_release -sc) main restricted universe multiverse
deb https://security.pkg.mostertman.com/  $(lsb_release -sc) main restricted universe multiverse
deb https://backports.pkg.mostertman.com/ $(lsb_release -sc) main restricted universe multiverse

deb https://esm-apps.pkg.mostertman.com/  $(lsb_release -sc)-apps-security  main
deb https://esm-apps.pkg.mostertman.com/  $(lsb_release -sc)-apps-updates   main
deb https://esm-infra.pkg.mostertman.com/ $(lsb_release -sc)-infra-security main
deb https://esm-infra.pkg.mostertman.com/ $(lsb_release -sc)-infra-updates  main
deb https://esm-usg.pkg.mostertman.com/   $(lsb_release -sc)                main

# nginx (mainline)
deb https://nginx.pkg.mostertman.com/ $(lsb_release -sc) nginx

# Salt
deb https://salt.pkg.mostertman.com/ stable main

# Wazuh
deb https://wazuh.pkg.mostertman.com/ stable main

# Ansible
deb https://ansible.pkg.mostertman.com/ $(lsb_release -sc) main

# Docker CE
deb https://docker.pkg.mostertman.com/ $(lsb_release -sc) stable

# Gitlab CE
deb https://gitlab.pkg.mostertman.com $(lsb_release -sc) main

# PowerDNS (Authoritive, Recursor, dnsdist)
deb https://pdns.pkg.mostertman.com/ $(lsb_release -sc)-auth-49 main
deb https://pdns.pkg.mostertman.com/ $(lsb_release -sc)-rec-52 main
deb https://pdns.pkg.mostertman.com/ $(lsb_release -sc)-dnsdist-19 main

# Hashicorp (Terraform, Vault)
deb https://hashicorp.pkg.mostertman.com/ $(lsb_release -sc) main

# Yubico
deb https://yubico.pkg.mostertman.com/ $(lsb_release -sc) main
EOF

Shielded:

echo '192.168.0.78 pkg.mostertman.com' >> /etc/hosts
apt-get install -y wget curl lsb-release
truncate -s0 /etc/apt/sources.list
mkdir -p /etc/apt/sources.list.d/.old
mv /etc/apt/sources.list.d/* /etc/apt/sources.list.d/.old
wget -O /etc/apt/trusted.gpg.d/mostertman.gpg \
  https://pkg.mostertman.com/repo-signing-key.gpg

cat <<EOF > /etc/apt/sources.list.d/mostertman.list
deb https://pkg.mostertman.com/ubuntu/    $(lsb_release -sc) main restricted universe multiverse
deb https://pkg.mostertman.com/updates/   $(lsb_release -sc) main restricted universe multiverse
deb https://pkg.mostertman.com/security/  $(lsb_release -sc) main restricted universe multiverse
deb https://pkg.mostertman.com/backports/ $(lsb_release -sc) main restricted universe multiverse

deb https://pkg.mostertman.com/esm-apps/  $(lsb_release -sc)-apps-security main
deb https://pkg.mostertman.com/esm-apps/  $(lsb_release -sc)-apps-updates main
deb https://pkg.mostertman.com/esm-infra/ $(lsb_release -sc)-infra-security main
deb https://pkg.mostertman.com/esm-infra/ $(lsb_release -sc)-infra-updates main
deb https://pkg.mostertman.com/esm-usg/   $(lsb_release -sc) main

deb https://pkg.mostertman.com/nginx/ $(lsb_release -sc) nginx

deb https://pkg.mostertman.com/media/ $(lsb_release -sc) main
deb https://pkg.mostertman.com/salt/  stable main
deb https://pkg.mostertman.com/wazuh/ stable main
EOF