Pig Monkey
7b65fecfc2
create networkmanager role
2016-01-18 22:04:33 -08:00
Pig Monkey
dd7b034c37
move pdsh out of include
2016-01-18 21:54:12 -08:00
Pig Monkey
29f9ddb3f4
add missing comma
2016-01-18 19:07:47 -08:00
Pig Monkey
77d2944c9f
refactor trusted network framework
...
Previously, services would be killed anytime an interface was
deactivated, even if another interface was still connected to a trusted
network. Now we check all active connections against the trusted list
and take the appropriate action.
It's also more modular, and allows the user to more easily
activate/deactive services directly without stopping/starting networking
if for some reason the dispatcher didn't run correctly.
2016-01-18 19:01:05 -08:00
Pig Monkey
cbcbde3242
hostname is optional
...
Setting the hostname is part of the pre-ansible install instructions, so
it is really only useful here to change the hostname. Changing the
hostname probably doesn't happen often and is simple enough without
ansible, so meh.
2016-01-15 19:26:02 -08:00
Pig Monkey
21661fee54
use a calendar schedule for tarsnapper timer
...
This is basically equivalent to cron's @hourly, but the `Persistant`
option will cause it to run immediately if the last start time was
missed.
2016-01-15 19:23:12 -08:00
Pig Monkey
22c0cc6441
add boot delay back to mailsync timer
...
Without this, it appears that the timer will never do its initial
execution.
2016-01-15 19:14:01 -08:00
Pig Monkey
a128e48306
use networkmanager dispatcher for bitlbee
2016-01-15 19:12:55 -08:00
Pig Monkey
f276c4cdd4
match complete lines in trusted_networks file
2016-01-14 21:51:30 -08:00
Pig Monkey
d02b3e1f1a
apparently dashes in yaml vars breaks stuff
2016-01-14 21:44:01 -08:00
Pig Monkey
698c5cf830
add git-annex network dispatchers
2016-01-14 21:35:35 -08:00
Pig Monkey
b31ec015cd
add git-annex systemd service
2016-01-14 21:11:30 -08:00
Pig Monkey
8d3089a1db
reference tarsnap in the trusted network section
2016-01-14 20:03:19 -08:00
Pig Monkey
e239726eef
user bin is no longer required
2016-01-14 19:58:06 -08:00
Pig Monkey
823b73c91e
fix task names
2016-01-14 19:57:38 -08:00
Pig Monkey
d0154ca5c3
remove mailsync boot delay
...
This isn't needed when we can just specify that the service runs after
network.target.
2016-01-14 19:53:12 -08:00
Pig Monkey
948e3de457
remove unecessary space
2016-01-14 19:51:40 -08:00
Pig Monkey
eb338e915d
add tarsnap docs
2016-01-14 19:50:53 -08:00
Pig Monkey
0ed5d3c50a
add tarsnapper service, timer and dispatcher
2016-01-14 19:33:21 -08:00
Pig Monkey
146adbd5b9
add a basic tarsnapper config
...
Users can use the include dir to add the jobs they really care about.
2016-01-14 18:22:18 -08:00
Pig Monkey
73cd0be82f
install tarsnapper
...
the other one
2016-01-14 18:15:13 -08:00
Pig Monkey
cce5af058a
install vdirsyncer/khal/khard to system level virtualenv
2016-01-14 18:12:58 -08:00
Pig Monkey
aff07b170e
create a directory for system level virtualenvs
2016-01-14 18:08:08 -08:00
Pig Monkey
3456556165
move virtualenv to its own role
...
we use this for some system packages, so it isn't really a python dev
specific thing
2016-01-14 18:01:54 -08:00
Pig Monkey
608d0b5253
s/sudo/become
2016-01-14 17:47:41 -08:00
Pig Monkey
e5af6c2dff
specify ansible library dir
...
`./library` is included by default. In Ansible pre-2.0 it would go
through recursively so being this explicit was not necessary.
2016-01-14 17:29:39 -08:00
Pig Monkey
0b62437c1b
properly kill jailed unbound
...
/run/unbound.pid will hold the PID of unbound inside of the jail
(usually something like 2), which is not useful for systemd. It will try
to kill that PID and fail (eventually timing out).
Editing /usr/lib/systemd/system/unbound.service is super lame and should
never be done, but I can't figure out how to clear the PIDFile line just
by editing our unit override.
2016-01-14 17:23:52 -08:00
Pig Monkey
58643e2d6f
only sync mail on trusted networks
2016-01-13 18:35:23 -08:00
Pig Monkey
9e5f9b87e6
mac spoofing
2016-01-13 17:53:13 -08:00
Pig Monkey
8f707c9d6f
install pdfgrep
2016-01-13 15:55:04 -08:00
Pig Monkey
652b1c1d54
firejail unbound
2016-01-13 15:51:09 -08:00
Pig Monkey
899a531a0c
add a simple stateful firewall
...
https://wiki.archlinux.org/index.php/Simple_stateful_firewall
2016-01-11 21:08:11 -08:00
Pig Monkey
deb67f8468
change openvpn path
...
/bin is just a symlink to /usr/bin
2016-01-11 19:19:24 -08:00
Pig Monkey
6b0c1dacf0
support config for passwordless sudo
2016-01-11 19:17:08 -08:00
Pig Monkey
58702a4bfb
move browser chooser to browser role
...
It sort of fits both places, but probably makes more sense here.
2016-01-11 19:06:50 -08:00
Pig Monkey
82399d1a03
update disposable
2016-01-11 19:03:59 -08:00
Pig Monkey
ac975bdfee
update disposable
2016-01-11 18:57:03 -08:00
Pig Monkey
d496d7a1d3
update unbound blocked hosts
2016-01-11 18:56:26 -08:00
Pig Monkey
8b1bc82e7b
set unbound private networks
2016-01-11 18:56:11 -08:00
Pig Monkey
fba3d339c6
set unbound username and directory
2016-01-11 18:55:54 -08:00
Pig Monkey
86e27c718d
set browser choose as default browser
2016-01-11 18:55:27 -08:00
Peter Hogg
9b26b5e205
Merge pull request #11 from jshuping/more_tools
...
add a few more tools
2016-01-10 18:57:23 -08:00
John Shuping
20a6eddb50
add a few more tools
2016-01-10 16:30:22 -05:00
Peter Hogg
6b797ce4f0
Merge pull request #10 from brett/inkscape
...
media: add Inkscape for vector graphics
2016-01-09 17:52:22 -08:00
Brett Eisenberg
e38737f74e
media: add Inkscape for vector graphics
2016-01-09 17:38:32 -08:00
Pig Monkey
e84ea9a0ce
Merge branch 'master' of github.com:pigmonkey/spark
2016-01-09 17:12:01 -08:00
Pig Monkey
aeb0686141
remove firejail bitlbee profile
...
included with latest firejail release
2016-01-09 17:10:10 -08:00
Peter Hogg
69d05d042a
Merge pull request #9 from brett/docs
...
docs: update README to ensure submodules are present
2016-01-09 17:04:49 -08:00
Brett Eisenberg
8cc526f344
docs: update README to ensure submodules are present
2016-01-09 17:01:48 -08:00
Pig Monkey
64a7b54218
auto-detect thinkpad and macbook
2016-01-08 15:50:34 -08:00