diff --git a/setup/fedora-setup b/setup/fedora-setup
new file mode 100644
index 0000000..15a8c91
--- /dev/null
+++ b/setup/fedora-setup
@@ -0,0 +1,362 @@
+#!/bin/bash
+# -----------------------------------------------------------
+# a simple post-install script to be used on a fedora system
+# there's a lot to be done yet...
+# -----------------------------------------------------------
+
+
+# -----------------------------------------------------------
+# verify sufficient privileges before running the rest
+# -----------------------------------------------------------
+if [[ "$(id -u)" -ne 0 ]]; then
+    echo "[x] Run as root. Exiting."
+    exit 1
+fi
+
+# -----------------------------------------------------------
+# stores current folder, expects it to be a non-privileged 
+# user's home (as you sudo-up, say, from your home before
+# running this)
+# -----------------------------------------------------------
+tadyma=`pwd`
+utils_fol=$tadyma/utils
+# msfile location
+msfC_file=/usr/share/applications/metasploit-framework.desktop
+(xset r rate 217 87)
+
+# -----------------------------------------------------------
+# upgrade packages (clear cache also) before proceeding with
+# any installations; enable testing repos to savor fresh juice
+# -----------------------------------------------------------
+dnf config-manager --set-enabled updates
+dnf config-manager --set-enabled updates-testing
+dnf --setopt deltarpm=true upgrade --refresh
+
+# -----------------------------------------------------------
+# install kernel-devel before anything else
+dnf install -yy kernel-devel
+
+# -----------------------------------------------------------
+# enable rpmfusion-free repo
+# -----------------------------------------------------------
+dnf install -yy http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm
+dnf config-manager --set-enabled rpmfusion-free
+
+# -----------------------------------------------------------
+# zsh + oh-my-zsh + git + vim + rsync
+# -----------------------------------------------------------
+dnf install -yy zsh git vim rsync
+cd
+sh -c "$(curl -fsSL https://raw.github.com/robbyrussell/oh-my-zsh/master/tools/install.sh)"
+cd $tadyma
+
+# -----------------------------------------------------------
+# install the most important tools
+# -----------------------------------------------------------
+dnf install -yy htop whois screen feh scrot gpicview p7zip unar
+dnf install -yy gnome-terminal terminator oathtool
+dnf install -yy gmrun redshift gparted ethtool keepassxc
+dnf install -yy xarchiver xfce4-settings screenfetch neofetch galculator
+dnf install -yy lightdm light-locker gnome-disk-utility thunderbird firefox vlc
+dnf install -yy lightdm-gtk-greeter-settings notify-send libreoffice-core
+dnf install -yy lxtask lxappearance lxdm lxpolkit volumeicon i3lock tor privoxy
+# -----------------------------------------------------------
+# install class2-importance tools
+# -----------------------------------------------------------
+dnf install -yy oggconvert pinta pdfmod youtube-dl
+#putty audacity guitarix frama-c
+
+# -----------------------------------------------------------
+# thermal
+# -----------------------------------------------------------
+dnf install -yy tlp tlp-rdw
+# -----------------------------------------------------------
+# thinkpads only (additional batteries support, not needed here)
+# -----------------------------------------------------------
+#dnf install https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm
+#dnf install http://repo.linrunner.de/fedora/tlp/repos/releases/tlp-release.fc$(rpm -E %fedora).noarch.rpm
+# akmod-tp_smapi (TLP repo) – optional ThinkPad only, tp-smapi is needed for battery charge thresholds, recalibration and specific status output of tlp-stat
+# akmod-acpi_call (TLP repo) – optional ThinkPad only, acpi-call is needed for battery charge thresholds and recalibration on Sandy Bridge and newer models (X220/T420, X230/T430 et al.)
+# kernel-devel (Fedora repo) – optional, needed for the akmod packages above
+#dnf install akmod-tp_smapi akmod-acpi_call kernel-devel
+
+
+# -----------------------------------------------------------
+# set up python environment - TO DO
+# -----------------------------------------------------------
+#dnf install python python3 \
+#ipython
+# python env
+
+#virtualenv utils/venv
+#source utils/venv/bin/activate
+#virtualenv --clear
+#virtualenv --clear /utils/venv
+#rmvirtualenv utils/venv
+
+
+# -----------------------------------------------------------
+# install openh264 for video support, see:
+# https://fedoraproject.org/wiki/OpenH264
+# https://ask.fedoraproject.org/en/question/95637/h264-videos-not-working-in-firefox/
+# https://ask.fedoraproject.org/en/question/120605/video-problems-on-firefox-on-fedora-28/
+# https://www.youtube.com/html5
+# -----------------------------------------------------------
+#dnf install gstreamer1-plugin-openh264 mozilla-openh264
+#su -c 'dnf install http://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm'
+dnf install -yy ffmpeg-libs 
+dnf groupupdate multimedia
+dnf install -yy compat-ffmpeg28
+
+
+# -----------------------------------------------------------
+# install additional packages
+# -----------------------------------------------------------
+dnf install -yy flatpak
+
+# -----------------------------------------------------------
+# much fun
+# -----------------------------------------------------------
+dnf install -yy cmatrix
+#espeak fortune-mod banner dog
+
+# -----------------------------------------------------------
+# nw-sec
+# -----------------------------------------------------------
+dnf install -yy nmap aircrack-ng nethogs iptraf-ng wireshark nmap-ncat
+
+# -----------------------------------------------------------
+# create a directory for utils in user's home
+# -----------------------------------------------------------
+#mkdir $utils_fol
+#cd $utils_fol
+
+# hashcat
+#git clone https://github.com/hashcat/hashcat.git
+
+# John-the-Ripper
+#git clone https://github.com/magnumripper/JohnTheRipper.git -b bleeding-jumbo john
+
+# -----------------------------------------------------------
+# metasploit framework - [!] add metasploit-framework.desktop to /usr/share/applications
+# for metasploit to be accessible to all root users, install it in root's home
+# -----------------------------------------------------------
+##cd /root
+##curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && chmod 755 msfinstall && ./msfinstall -y
+### next step expects metasploit .desktop file to be present in relative root dir 
+##cp metasploit-framework.desktop $msfC_file && chmod 0644 $msfC_file
+##unset msfC_file
+
+cd $utils_fol
+
+# mitmproxy 
+#pip3 install mitmproxy
+
+# setoolkit 
+#sudo dnf install git python-pexpect python-pefile python-crypto pyOpenSSL
+#git clone https://github.com/trustedsec/social-engineer-toolkit/ set/
+
+# sdtool
+#git clone https://github.com/BertoldVdb/sdtool.git
+
+# int0x80
+# git clone https://github.com/int0x80/anti-forensics.git
+# git clone https://github.com/int0x80/windows.git
+# git clone https://github.com/int0x80/SweetSecurity.git
+# git clone https://github.com/int0x80/1337-Noms-The-Hacker-Cookbook.git
+# git clone https://github.com/int0x80/Packt-Publishing-Free-Learning.git
+# git clone https://github.com/int0x80/killallthehumans.git
+# git clone https://github.com/int0x80/githump.git
+# git clone https://github.com/int0x80/reversing.git
+# git clone https://github.com/int0x80/blog.git
+# git clone https://github.com/int0x80/iot-stuff.git
+# git clone https://github.com/int0x80/notes.git
+# git clone https://github.com/int0x80/dotfiles.git
+
+
+# vermaden's scripts
+# git clone https://github.com/vermaden/scripts.git $HOME/utils/vermaden-scripts
+
+cd $tadyma
+
+# -----------------------------------------------------------
+# ibus - typing
+#imsettings-switch
+#ibus-setup ibus-daemon
+
+
+# -----------------------------------------------------------
+# youtube-dl
+#youtube-dl -v --user-agent -- --prefer-free-formats <yt link>
+# convert it later with oggconvert
+
+# -----------------------------------------------------------
+# nmcli
+#nmcli device wifi rescan
+#nmcli device wifi list
+#nmcli con up free
+
+# -----------------------------------------------------------
+# [!] warning - possibly(?) GNOME-dependent
+# -----------------------------------------------------------
+#dnf install evince
+#gnome-sound-recorder
+dnf install -yy gnome-calculator
+# tiling terminal - not really necessary
+# tilix \
+# disk image burner, got enough of these
+# brasero \ - vital
+
+# -----------------------------------------------------------
+dnf install -yy xed nemo nemo-desktop
+
+# -----------------------------------------------------------
+# flatpak
+# add flathub repo; profit
+#flatpak --user remote-add flathub https://flathub.org/repo/flathub.flatpakrepo
+# install sweet stuff...
+#flatpak install --user https://www.flathub.org/repo/appstream/org.signal.Signal.flatpakref
+#flatpak install --user https://flathub.org/repo/appstream/com.discordapp.Discord.flatpakref
+
+# HW video decode support for Intel integrated graphics in fedora
+# rpm-fusion needs to be installed beforehand
+dnf install -yy libva-intel-driver
+
+# ---------------------------------
+# graphics 
+# lspci -k | grep -A 2 -E "(VGA|3D)"
+# inxi -b
+
+# so that flashtool would work, add user (fedora) to group dialout
+#adduser fedora dialout
+gpasswd -a fedora dialout
+
+# no-more-secrets
+#cd $utils_fol 
+#git clone https://github.com/bartobri/no-more-secrets.git
+#cd ./no-more-secrets
+#make nms
+#make sneakers
+#sudo make install
+#systemctl list-units --type=target | nms
+
+
+# ----------------------
+# at
+#at = "systemctl suspend" -t 13:37 Thu
+
+# ----------------------
+# shred
+#shred -n 2 -zuv  $( find . -xdev -type f -exec ls {} \; | tail -100)
+
+# ----------------------
+# netstat
+#netstat -anp|more
+
+
+
+# -----------------------------------------------------------
+# misc - mostly not in fedora repos
+# -----------------------------------------------------------
+# https://atom.io
+#atom
+rpm --import https://packagecloud.io/AtomEditor/atom/gpgkey
+sh -c 'echo -e "[Atom]\nname=Atom Editor\nbaseurl=https://packagecloud.io/AtomEditor/atom/el/7/\$basearch\nenabled=1\ngpgcheck=0\nrepo_gpgcheck=1\ngpgkey=https://packagecloud.io/AtomEditor/atom/gpgkey" > /etc/yum.repos.d/atom.repo'
+dnf install -yy atom
+#dnf install atom-beta
+
+
+# ----------- D O C K E R ------------------
+# to be configured...
+
+
+# adding repo necessary, see https://www.virualbox.org
+#virtualbox
+# see https://www.torproject.org
+#tor-browser
+# see https://www.mega.nz
+#mega-sync
+# adding repo necessary, see https://www.vivaldi.com
+#vivaldi-stable
+#https://help.vivaldi.com/article/html5-proprietary-media-on-linux/
+
+# to be configured also^...
+
+# pulls a ton of KDE deps
+#kdeconnect-indicator kdeconnectd
+
+
+# -----------------------------------------------------------
+# openbox
+# -----------------------------------------------------------
+# ./config/openbox/helper.sh
+#
+# https://github.com/vermaden/scripts.git
+
+# we might need these for (maybe not) window pausing
+# dnf install -yy xprop xdotool zenity xbindkeys
+    
+
+# -----------------------------------------------------------
+# change plymouth theme
+# -----------------------------------------------------------
+plymouth-set-default-theme -R details # sets it to "details" and rebuilds initrd
+
+
+# -----------------------------------------------------------
+# zswap
+# -----------------------------------------------------------
+# add "zswap/enabled=1" at the and of the line "GRUB_CMDLINE_LINUX.."
+
+# -----------------------------------------------------------
+# configure zram
+# -----------------------------------------------------------
+dnf install -yy zram
+modprobe zram
+# getconf _NPROCESSORS_ONLN # number of compressing threads == no. cpu cores
+# cat /sys/block/zram0/max_comp_streams
+# grep MemTotal /proc/meminfo | grep -E --only-matching '[[:digit:]]+' # mem KiB
+# cat /sys/block/zram0/disksize
+systemctl start zram.service
+# echo "2010222K" > /sys/block/zram0/disksize # create a 2GiB zswap device
+# mkswap /dev/zram0 # format as swap
+# swapon -p 100 /dev/zram0 # turn zram swap on
+# systemctl enable zram-swap.service
+# systemctl start zram-swap.service
+
+
+# decrease swappiness - use more ram - temporary solution
+#sudo sysctl vm.swappiness = 20
+# current swappiness level
+#cat /proc/sys/vm/swappiness
+# permanent solution 
+echo "vm.swappiness = 20" >> /etc/sysctl.conf
+
+
+systemctl disable ModemManager.service
+systemctl disable plymouth-quit-wait.service
+systemctl disable plymouth-start.service
+#systemctl disable livesys-late.service
+systemctl disable plymouth-read-write.service
+
+
+# -----------------------------------------------------------
+# headless
+# -----------------------------------------------------------
+# to be configured...
+
+# kickstart
+# https://docs.fedoraproject.org/en-US/fedora/f29/install-guide/advanced/Kickstart_Installations/#chap-kickstart-installations
+
+# vnc
+# https://docs.fedoraproject.org/en-US/fedora/f29/install-guide/advanced/VNC_Installations/#chap-vnc-installations
+
+
+# -------------------------------------------------------------
+# "file" hashes generation based on a wordlist of supposed pwds
+# dunno why I'm doing this
+#while read line \
+#do\
+# echo -e " `mkpasswd --method=\$\6\$ ` < $line " >> filehashes ; \
+#done < file
+