Commit graph

1083 commits

Author SHA1 Message Date
Pig Monkey
7b65fecfc2 create networkmanager role 2016-01-18 22:04:33 -08:00
Pig Monkey
dd7b034c37 move pdsh out of include 2016-01-18 21:54:12 -08:00
Pig Monkey
29f9ddb3f4 add missing comma 2016-01-18 19:07:47 -08:00
Pig Monkey
77d2944c9f refactor trusted network framework
Previously, services would be killed anytime an interface was
deactivated, even if another interface was still connected to a trusted
network. Now we check all active connections against the trusted list
and take the appropriate action.

It's also more modular, and allows the user to more easily
activate/deactive services directly without stopping/starting networking
if for some reason the dispatcher didn't run correctly.
2016-01-18 19:01:05 -08:00
Pig Monkey
cbcbde3242 hostname is optional
Setting the hostname is part of the pre-ansible install instructions, so
it is really only useful here to change the hostname. Changing the
hostname probably doesn't happen often and is simple enough without
ansible, so meh.
2016-01-15 19:26:02 -08:00
Pig Monkey
21661fee54 use a calendar schedule for tarsnapper timer
This is basically equivalent to cron's @hourly, but the `Persistant`
option will cause it to run immediately if the last start time was
missed.
2016-01-15 19:23:12 -08:00
Pig Monkey
22c0cc6441 add boot delay back to mailsync timer
Without this, it appears that the timer will never do its initial
execution.
2016-01-15 19:14:01 -08:00
Pig Monkey
a128e48306 use networkmanager dispatcher for bitlbee 2016-01-15 19:12:55 -08:00
Pig Monkey
f276c4cdd4 match complete lines in trusted_networks file 2016-01-14 21:51:30 -08:00
Pig Monkey
d02b3e1f1a apparently dashes in yaml vars breaks stuff 2016-01-14 21:44:01 -08:00
Pig Monkey
698c5cf830 add git-annex network dispatchers 2016-01-14 21:35:35 -08:00
Pig Monkey
b31ec015cd add git-annex systemd service 2016-01-14 21:11:30 -08:00
Pig Monkey
8d3089a1db reference tarsnap in the trusted network section 2016-01-14 20:03:19 -08:00
Pig Monkey
e239726eef user bin is no longer required 2016-01-14 19:58:06 -08:00
Pig Monkey
823b73c91e fix task names 2016-01-14 19:57:38 -08:00
Pig Monkey
d0154ca5c3 remove mailsync boot delay
This isn't needed when we can just specify that the service runs after
network.target.
2016-01-14 19:53:12 -08:00
Pig Monkey
948e3de457 remove unecessary space 2016-01-14 19:51:40 -08:00
Pig Monkey
eb338e915d add tarsnap docs 2016-01-14 19:50:53 -08:00
Pig Monkey
0ed5d3c50a add tarsnapper service, timer and dispatcher 2016-01-14 19:33:21 -08:00
Pig Monkey
146adbd5b9 add a basic tarsnapper config
Users can use the include dir to add the jobs they really care about.
2016-01-14 18:22:18 -08:00
Pig Monkey
73cd0be82f install tarsnapper
the other one
2016-01-14 18:15:13 -08:00
Pig Monkey
cce5af058a install vdirsyncer/khal/khard to system level virtualenv 2016-01-14 18:12:58 -08:00
Pig Monkey
aff07b170e create a directory for system level virtualenvs 2016-01-14 18:08:08 -08:00
Pig Monkey
3456556165 move virtualenv to its own role
we use this for some system packages, so it isn't really a python dev
specific thing
2016-01-14 18:01:54 -08:00
Pig Monkey
608d0b5253 s/sudo/become 2016-01-14 17:47:41 -08:00
Pig Monkey
e5af6c2dff specify ansible library dir
`./library` is included by default. In Ansible pre-2.0 it would go
through recursively so being this explicit was not necessary.
2016-01-14 17:29:39 -08:00
Pig Monkey
0b62437c1b properly kill jailed unbound
/run/unbound.pid will hold the PID of unbound inside of the jail
(usually something like 2), which is not useful for systemd. It will try
to kill that PID and fail (eventually timing out).

Editing /usr/lib/systemd/system/unbound.service is super lame and should
never be done, but I can't figure out how to clear the PIDFile line just
by editing our unit override.
2016-01-14 17:23:52 -08:00
Pig Monkey
58643e2d6f only sync mail on trusted networks 2016-01-13 18:35:23 -08:00
Pig Monkey
9e5f9b87e6 mac spoofing 2016-01-13 17:53:13 -08:00
Pig Monkey
8f707c9d6f install pdfgrep 2016-01-13 15:55:04 -08:00
Pig Monkey
652b1c1d54 firejail unbound 2016-01-13 15:51:09 -08:00
Pig Monkey
899a531a0c add a simple stateful firewall
https://wiki.archlinux.org/index.php/Simple_stateful_firewall
2016-01-11 21:08:11 -08:00
Pig Monkey
deb67f8468 change openvpn path
/bin is just a symlink to /usr/bin
2016-01-11 19:19:24 -08:00
Pig Monkey
6b0c1dacf0 support config for passwordless sudo 2016-01-11 19:17:08 -08:00
Pig Monkey
58702a4bfb move browser chooser to browser role
It sort of fits both places, but probably makes more sense here.
2016-01-11 19:06:50 -08:00
Pig Monkey
82399d1a03 update disposable 2016-01-11 19:03:59 -08:00
Pig Monkey
ac975bdfee update disposable 2016-01-11 18:57:03 -08:00
Pig Monkey
d496d7a1d3 update unbound blocked hosts 2016-01-11 18:56:26 -08:00
Pig Monkey
8b1bc82e7b set unbound private networks 2016-01-11 18:56:11 -08:00
Pig Monkey
fba3d339c6 set unbound username and directory 2016-01-11 18:55:54 -08:00
Pig Monkey
86e27c718d set browser choose as default browser 2016-01-11 18:55:27 -08:00
Peter Hogg
9b26b5e205 Merge pull request #11 from jshuping/more_tools
add a few more tools
2016-01-10 18:57:23 -08:00
John Shuping
20a6eddb50 add a few more tools 2016-01-10 16:30:22 -05:00
Peter Hogg
6b797ce4f0 Merge pull request #10 from brett/inkscape
media: add Inkscape for vector graphics
2016-01-09 17:52:22 -08:00
Brett Eisenberg
e38737f74e media: add Inkscape for vector graphics 2016-01-09 17:38:32 -08:00
Pig Monkey
e84ea9a0ce Merge branch 'master' of github.com:pigmonkey/spark 2016-01-09 17:12:01 -08:00
Pig Monkey
aeb0686141 remove firejail bitlbee profile
included with latest firejail release
2016-01-09 17:10:10 -08:00
Peter Hogg
69d05d042a Merge pull request #9 from brett/docs
docs: update README to ensure submodules are present
2016-01-09 17:04:49 -08:00
Brett Eisenberg
8cc526f344 docs: update README to ensure submodules are present 2016-01-09 17:01:48 -08:00
Pig Monkey
64a7b54218 auto-detect thinkpad and macbook 2016-01-08 15:50:34 -08:00