install tor

This needs a firejail profile and a config option to specify when to
start the service.

playbook.yml

@@ -55,6 +55,7 @@
     - { role: postgresql, tags: ['postgresql'] }
     - { role: calibre, tags: ['calibre'] }
     - { role: cli53, tags: ['cli53'] }
+    - { role: tor, tags: ['tor'] }
   vars_prompt:
     - name: user_password
       prompt: "Enter desired user password"

roles/tor/files/tor-service-override.conf

@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=/usr/bin/firejail --writable-var /usr/bin/tor -f /etc/tor/torrc

roles/tor/meta/main.yml

@@ -0,0 +1,4 @@
+---
+dependencies:
+  - { role: firejail }
+  - { role: systemd }

roles/tor/tasks/main.yml

@@ -0,0 +1,18 @@
+---
+- name: Install Tor
+  pacman: name={{ item }} state=present
+  with_items:
+    - tor
+    - torsocks
+
+- name: Create Tor systemd unit file directory
+  file: path=/etc/systemd/system/tor.service.d state=directory
+  tags:
+    - firejail
+
+- name: Push Tor socket unit file
+  copy: src=tor-service-override.conf dest=/etc/systemd/system/tor.service.d/override.conf
+  notify:
+    - reload systemd config
+  tags:
+    - firejail