Minimal desktop auto-configuration with a script and ansible-pull:

• Set up of ufw, with deny incoming policy and allow outgoing policy.
• openssh-server installation, open firewall from a given range of IPs