From 7fa37c29f0352e3198f63f573d9ed1b1f8e63994 Mon Sep 17 00:00:00 2001
From: KemoNine <kemonine@kemonine.info>
Date: Fri, 31 Jul 2020 23:42:20 +0000
Subject: [PATCH] Move journald and audit=0 info from notes to docs

---
 docs/README.md         |  1 +
 docs/finalize_setup.md |  7 +++++++
 docs/journald.md       | 28 ++++++++++++++++++++++++++++
 notes.txt              | 27 ---------------------------
 4 files changed, 36 insertions(+), 27 deletions(-)
 create mode 100644 docs/journald.md

diff --git a/docs/README.md b/docs/README.md
index 4baf301..4c286ea 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -5,3 +5,4 @@ This folder contains a bunch of general information on how to get the base of a
 * [Base Firmware](base.md)
 * [Finalize Arch Setup](finalize_setup.md)
 * [Setup swap (you really do need this)](swap.md)
+* [journald Tweaks (make it less chatty and resource hungry)](journald.md)
diff --git a/docs/finalize_setup.md b/docs/finalize_setup.md
index 5e0317a..0ac2943 100644
--- a/docs/finalize_setup.md
+++ b/docs/finalize_setup.md
@@ -46,4 +46,11 @@ locale-gen
 nano -w /etc/hostname
 nano -w /etc/hosts
 
+# Turn off kernel audit logging
+nano -w /boot/cmdline.txt
+    add audit=0 at end of cmdline
+
+# Reboot system for all changes to take effect
+systemctl reboot
+
 ```
\ No newline at end of file
diff --git a/docs/journald.md b/docs/journald.md
new file mode 100644
index 0000000..cf412ea
--- /dev/null
+++ b/docs/journald.md
@@ -0,0 +1,28 @@
+# journald
+
+The below commands will adjust some ```journald``` settings so it is less chatty and uses fewer resources.
+
+``` sh
+
+mkdir /etc/systemd/journald.conf.d/
+cat > /etc/systemd/journald.conf.d/00-wall.conf <<EOF
+[Journal]
+ForwardToWall=no
+EOF
+cat > /etc/systemd/journald.conf.d/00-journal-size.conf <<EOF
+[Journal]
+SystemMaxUse=256M
+EOF
+cat > /etc/systemd/journald.conf.d/00-audit.conf <<EOF
+[Journal]
+Audit=no
+EOF
+cat > /etc/systemd/journald.conf.d/00-console.conf <<EOF
+[Journal]
+ForwardToConsole=no
+TTYPath=
+EOF
+systemctl mask systemd-journald-audit.socket
+systemctl restart systemd-journald
+
+```
diff --git a/notes.txt b/notes.txt
index c2f541c..bcdcb21 100644
--- a/notes.txt
+++ b/notes.txt
@@ -1,30 +1,3 @@
-########################################
-# Tweak journald
-########################################
-
-mkdir /etc/systemd/journald.conf.d/
-cat > /etc/systemd/journald.conf.d/00-wall.conf <<EOF
-[Journal]
-ForwardToWall=no
-EOF
-cat > /etc/systemd/journald.conf.d/00-journal-size.conf <<EOF
-[Journal]
-SystemMaxUse=256M
-EOF
-cat > /etc/systemd/journald.conf.d/00-audit.conf <<EOF
-[Journal]
-Audit=no
-EOF
-cat > /etc/systemd/journald.conf.d/00-console.conf <<EOF
-[Journal]
-ForwardToConsole=no
-TTYPath=
-EOF
-systemctl restart systemd-journald
-systemctl mask systemd-journald-audit.socket
-nano -w /boot/cmdline.txt
-    add audit=0 at end of cmdline
-
 ########################################
 # rpi tooling setup
 ########################################