move nmtrust to standalone role

This commit is contained in:
Pig Monkey 2018-11-17 22:35:24 -08:00
parent 420d2587da
commit 5585ef9c7b
12 changed files with 44 additions and 32 deletions

View file

@ -20,6 +20,7 @@
- { role: iptables, tags: ['iptables'] }
- { role: nettools, tags: ['nettools'] }
- { role: networkmanager, tags: ['networkmanager'] }
- { role: nmtrust, tags: ['nmtrust'] }
- { role: macchiato, tags: ['macchiato'] }
- { role: ntp, tags: ['ntp'] }
- { role: firejail, tags: ['firejail'] }

View file

@ -1,6 +1,6 @@
---
dependencies:
- { role: networkmanager }
- { role: nmtrust }
- { role: firejail }
- { role: systemd }
- { role: tor }

View file

@ -1,5 +1,5 @@
---
dependencies:
- { role: networkmanager }
- { role: nmtrust }
- { role: systemd }
- { role: sysctl }

View file

@ -1,3 +1,3 @@
---
dependencies:
- { role: networkmanager }
- { role: nmtrust }

View file

@ -1,6 +1,6 @@
---
dependencies:
- { role: networkmanager }
- { role: nmtrust }
- { role: systemd }
- { role: cron }
- { role: firejail }

View file

@ -1,4 +1,4 @@
---
dependencies:
- { role: networkmanager }
- { role: nmtrust }
- { role: systemd }

View file

@ -9,33 +9,19 @@
- gnome-keyring
- name: Push connectivity check config
template: src=connectivity.conf.j2 dest=/etc/NetworkManager/conf.d/20-connectivity.conf
template:
src: connectivity.conf.j2
dest: /etc/NetworkManager/conf.d/20-connectivity.conf
when: network.conn_check is defined
- name: Enable and start NetworkManager
service: name=NetworkManager.service enabled=yes state=started
service:
name: NetworkManager.service
enabled: yes
state: started
- name: Enable and start NetworkManager dispatcher
service: name=NetworkManager-dispatcher.service enabled=yes state=started
- name: Install nmtrust
aur:
name: nmtrust-git
user: "{{ user.name }}"
tags:
- aur
- name: Create nmtrust config directory
file:
path: /etc/nmtrust
state: directory
- name: Push trusted network list
template:
src: trusted_networks.j2
dest: /etc/nmtrust/trusted_networks
- name: Verify trusted unit list exists
file:
path: /etc/trusted_units
state: touch
service:
name: NetworkManager-dispatcher.service
enabled: yes
state: started

View file

@ -0,0 +1,3 @@
---
dependencies:
- { role: networkmanager }

View file

@ -0,0 +1,22 @@
---
- name: Install nmtrust
aur:
name: nmtrust-git
user: "{{ user.name }}"
tags:
- aur
- name: Create nmtrust config directory
file:
path: /etc/nmtrust
state: directory
- name: Push trusted network list
template:
src: trusted_networks.j2
dest: /etc/nmtrust/trusted_networks
- name: Verify trusted unit list exists
file:
path: /etc/nmtrust/trusted_units
state: touch

View file

@ -1,5 +1,5 @@
---
dependencies:
- { role: virtualenv }
- { role: networkmanager }
- { role: nmtrust }
- { role: backitup }

View file

@ -2,4 +2,4 @@
dependencies:
- { role: firejail }
- { role: systemd }
- { role: networkmanager }
- { role: nmtrust }