From 98a8fcfe0214790093959f58df2510b1b0bdafee Mon Sep 17 00:00:00 2001
From: Pig Monkey <pm@pig-monkey.com>
Date: Fri, 29 Jul 2016 21:00:02 -0700
Subject: [PATCH] install tor

This needs a firejail profile and a config option to specify when to
start the service.
---
 playbook.yml                              |  1 +
 roles/tor/files/tor-service-override.conf |  3 +++
 roles/tor/meta/main.yml                   |  4 ++++
 roles/tor/tasks/main.yml                  | 18 ++++++++++++++++++
 4 files changed, 26 insertions(+)
 create mode 100644 roles/tor/files/tor-service-override.conf
 create mode 100644 roles/tor/meta/main.yml
 create mode 100644 roles/tor/tasks/main.yml

diff --git a/playbook.yml b/playbook.yml
index e109168..20fce75 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -55,6 +55,7 @@
     - { role: postgresql, tags: ['postgresql'] }
     - { role: calibre, tags: ['calibre'] }
     - { role: cli53, tags: ['cli53'] }
+    - { role: tor, tags: ['tor'] }
   vars_prompt:
     - name: user_password
       prompt: "Enter desired user password"
diff --git a/roles/tor/files/tor-service-override.conf b/roles/tor/files/tor-service-override.conf
new file mode 100644
index 0000000..f52789f
--- /dev/null
+++ b/roles/tor/files/tor-service-override.conf
@@ -0,0 +1,3 @@
+[Service]
+ExecStart=
+ExecStart=/usr/bin/firejail --writable-var /usr/bin/tor -f /etc/tor/torrc
diff --git a/roles/tor/meta/main.yml b/roles/tor/meta/main.yml
new file mode 100644
index 0000000..ee895d1
--- /dev/null
+++ b/roles/tor/meta/main.yml
@@ -0,0 +1,4 @@
+---
+dependencies:
+  - { role: firejail }
+  - { role: systemd }
diff --git a/roles/tor/tasks/main.yml b/roles/tor/tasks/main.yml
new file mode 100644
index 0000000..904ee9b
--- /dev/null
+++ b/roles/tor/tasks/main.yml
@@ -0,0 +1,18 @@
+---
+- name: Install Tor
+  pacman: name={{ item }} state=present
+  with_items:
+    - tor
+    - torsocks
+
+- name: Create Tor systemd unit file directory
+  file: path=/etc/systemd/system/tor.service.d state=directory
+  tags:
+    - firejail
+
+- name: Push Tor socket unit file
+  copy: src=tor-service-override.conf dest=/etc/systemd/system/tor.service.d/override.conf
+  notify:
+    - reload systemd config
+  tags:
+    - firejail