d-i debian-installer/locale string en_US

# root account setup
d-i passwd/root-login boolean true

d-i passwd/root-password-crypted password [removed]

# setup regular user
d-i passwd/make-user boolean true
d-i passwd/username string alice
d-i passwd/user-fullname string alice
d-i passwd/user-password-crypted password [removed]
d-i user-setup/encrypt-home boolean false
d-i user-setup/allow-password-weak boolean true

d-i passwd/user-default-groups string cdrom floppy audio dip video plugdev users netdev lpadmin scanner sudo

# Clock and time zone setup
d-i clock-setup/utc boolean true
d-i time/zone string UTC
d-i clock-setup/ntp boolean true

# Partitioning
d-i partman-auto/method string lvm
d-i partman-lvm/device_remove_lvm boolean true
d-i partman-md/device_remove_md boolean true
d-i partman-lvm/confirm boolean true
d-i partman-lvm/confirm_nooverwrite boolean true
d-i partman/choose_partition select finish
d-i partman-auto-lvm/guided_size string max
d-i partman-auto/choose_recipe select atomic
d-i partman/default_filesystem string ext4
d-i partman/confirm_write_new_label boolean true
d-i partman/confirm boolean true
d-i partman/confirm_nooverwrite boolean true
d-i grub-installer/only_debian boolean true
d-i grub-installer/bootdev string default

# Scan another CD or DVD?
apt-cdrom-setup apt-setup/cdrom/set-first boolean false

# Package mirror
d-i mirror/country string manual
d-i mirror/http/hostname string deb.debian.org
d-i mirror/http/directory string /debian
d-i mirror/http/proxy string
d-i apt-setup/use_mirror boolean true

# Don't send reports back to the project
popularity-contest popularity-contest/participate boolean false

# Package selection
tasksel tasksel/first multiselect standard

# Automatically install grub to the MBR
d-i grub-installer/only_debian boolean true

# Turn off last message about the install being complete
d-i finish-install/reboot_in_progress note

# SSH key addition
d-i preseed/late_command string \
    in-target mkdir -p /root/.ssh; \
    echo "[removed]" >> /root/.ssh/authorized_keys; \
    in-target chown -R root:root /root/.ssh/; \
    in-target chmod 644 /root/.ssh/authorized_keys; \
    in-target chmod 700 /root/.ssh/

# SSL certificate installation
d-i preseed/late_command string in-target sh -c 'echo "[removed]" > /usr/local/share/ca-certificates/genisys_cert.crt && update-ca-certificates'

# copy firstboot.service file to client
d-i preseed/late_command string wget -nd -m 'ftp://10.0.0.1:21/first-boot' -P /first-boot
d-i preseed/late_command string chmod 0644 /first-boot
d-i preseed/late_command string chown root /first-boot

# enable systemd service
d-i preseed/late_command string systemctl daemon-reload
d-i preseed/late_command string systemctl enable systemd-firstboot.service

# there must be an entrypoint file
# ensure entrypoint is executable
d-i preseed/late_command string chmod +x /first-boot/entrypoint