gistfile1.txt

#!/bin/bash

UN=$USER
sudo fdesetup enable --user $UN
echo "PLEASE SHARE THE RECOVERY KEY ABOVE WITH MAX!"

sudo pmset -a powernap 0
sudo pmset -a standby 0
sudo pmset -a standbydelay 0
sudo pmset -a autopoweroff 0

echo "Setting up the top right hot corner to lock your computer"
sudo defaults write com.apple.dock wvous-tr-corner -int 10

echo "Enable requiring password immediately after sleep or screen saver begins"
sudo defaults write com.apple.screensaver askForPassword -int 1
sudo defaults write com.apple.screensaver askForPasswordDelay -int 0;

echo "Configuring firewall"
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setloggingmode on
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setstealthmode on

pkill -HUP socketfilterfw

echo "Disabling guest user account"
sudo defaults write /Library/Preferences/com.apple.loginwindow GuestEnabled -bool NO
sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool NO
sudo defaults write /Library/Preferences/com.apple.AppleFileServer guestAccess -bool NO

echo "Disabling auto connect to captive portals"
sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.captive.control.plist Active -bool false