Turn into salt-states if possible.

• Disable avahi-daemon (mDNS): systemctl disable avahi-daemon.service
• Disable desktop (change boot options: https://www.digikey.com/en/maker/blogs/2018/how-to-boot-to-command-line-and-ssh-on-raspberry-pi)
• Remove sound support: alsactl?

General resource:

• https://gist.github.com/rdmarsh/5070295