not comprehensive! written for myself. probably applies to many other linux. these is post install items only.
this keeps your clock accurate. time.is can be used to verify your time is exact.
$ timedatectl
$ pacman -S chrony
$ vim /etc/chrony.conf
$ systemctl enable --now chrony