apt update
apt upgrade
export NU=USER
adduser $NU
usermod -aG sudo $NU

• sudo apt install emacs-nox
• if root has correct public cert:
  • mkdir -p ~/.ssh && sudo cp /root/.ssh/authorized_keys ~/.ssh/. && sudo chown $USER:$USER ~/.ssh/authorized_keys
• otherwise:
  • mkdir .ssh && chdir .ssh && emacs -nw authorized_keys
  • add public rsa
• logout, login to test that cert is working
• sudo emacs -nw /etc/ssh/sshd_conf and change PasswordAuthentication from yes to no
• sudo systemctl restart sshd.service
• copy .emacs and .emacs/d from somewhere else…

(based off of these directions):

sudo apt install -y postfix
sudo cp /usr/share/postfix/main.cf.debian /etc/postfix/main.cf
sudo postconf -e "relayhost = [email-smtp.us-west-2.amazonaws.com]:2587" "smtp_sasl_auth_enable = yes" "smtp_sasl_security_options = noanonymous" "smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd" "smtp_use_tls = yes" "smtp_tls_security_level = encrypt" "smtp_tls_note_starttls_offer = yes"
sudo sh -c 'echo [email-smtp.us-west-2.amazonaws.com]:2587 AWSUSER:AWSPASS > /etc/postfix/sasl_passwd'
sudo postmap hash:/etc/postfix/sasl_passwd
sudo chown root:root /etc/postfix/sasl_passwd /etc/postfix/sasl_passwd.db
sudo chmod 0600 /etc/postfix/sasl_passwd /etc/postfix/sasl_passwd.db
sudo postconf -e 'smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt'
sudo cp /etc/resolv.conf /var/spool/postfix/etc/resolv.conf # getting hostname unresolved without this. A bug in 14.04 that remains?
sed -e '0/^smtp/s/^/#/' -i /etc/postfix/master.cf # shut down smtp incoming
sudo sh -c 'echo inet_interfaces = loopback-only >> /etc/postfix/main.cf' # smtp accepted only internally (redundant?)
sudo postfix stop; sudo postfix start; sudo postfix reload

• postfix should be set up with no configuration. When you do this, there are instructions given at the end to copy some sort of sample configuration.
• to reconfigure: sudo dpkg-reconfigure postfix
• to reload the settings: sudo postfix stop; sudo postfix start; sudo postfix reload
• when testing tail -f /var/log/mail.log is your friend