Commit graph

76 commits

Author SHA1 Message Date
Pig Monkey
f5d443058f add dictd for offline dictionary 2019-04-29 18:43:34 -07:00
Pig Monkey
65f710db9a move PDF tasks to distinct role 2019-04-25 18:58:59 -07:00
Pig Monkey
2fc02e7ae8 add solaar for managing logitech unify receivers 2018-12-13 19:16:50 -08:00
Pig Monkey
5585ef9c7b move nmtrust to standalone role 2018-11-17 22:35:24 -08:00
Pig Monkey
c4be5e5e7b add systemd timer to update pacman mirrors daily
This increases the likelihood of speedy and up-to-date mirrors,
particularly during travel.
2018-11-17 21:38:45 -08:00
Géza Búza
8d8ec13b8f Add GNOME support
Add ability to install the GNOME desktop environment.
Most common global settings (date and time, power management, touchpad settings, theme) can be configured via Ansible variables.
See "group_vars/all" file.
2018-04-19 22:19:26 +02:00
Pig Monkey
d8d5a799c0 add syncthing support 2018-04-13 21:42:16 -07:00
Géza Búza
b289a381bf Add Gnome Display Manager as an alternative
Add ability to install GDM as a graphical login prompt.
Also certain global settings can be changed by Ansible variables. See
"gdm" key of group-vars/all file.
2018-04-07 20:56:04 +02:00
Pig Monkey
12b1655b6c move backitup to its own role
Single task roles are kind of lame, but this lets us set it as a
dependency.
2017-07-11 21:04:28 -07:00
Pig Monkey
1d6db50950 install kiwix-cli 2017-06-17 20:31:13 -07:00
Pig Monkey
88e0f776f8 move gnupg install to role 2017-06-11 16:43:33 -07:00
Pig Monkey
328f7b5047 replace grsec with linux-hardened
Existing users will want to remove all the deprecated grsec stuff.

    # pacman --remove --nosave --recursive linux-grsec linux-grsec-headers paxd pax-utils paxtest checksec

closes #56
2017-05-06 18:20:37 -07:00
Pig Monkey
676f9ce7d7 add himawaripy 2017-04-09 12:34:59 -07:00
Pig Monkey
0233d6e042 provide pass-otp and pass-update extensions 2017-03-20 14:51:06 -07:00
Pig Monkey
bfd3ad7c9b use hostsctl instead of unbound blocking
This seems like a better solution.
2017-03-19 17:21:02 -07:00
Pig Monkey
aa10a99caa add wttr script
I've had this in ~/bin for a year or so. Might as well keep it here.
2017-02-05 18:56:36 -08:00
Pig Monkey
1ecb9019c1 consolidate spelling dictionaries
Previously hunspell was installed as a firefox dep, and aspell was
installed for weechat.
2017-01-24 19:24:46 -08:00
Pig Monkey
f1b742c6e7 move bluetooth masking to bluetooth role 2017-01-14 17:47:34 -08:00
Pig Monkey
ff26e3568c replace slim with lightdm
This will be a breaking change for existing users.

After running the new tasks to install and enable LightDM, disable Slim:

    # systemctl disable slim.service

LightDM uses `~/.xprofile` instead of `~/.xinitrc`. Move all of the
contents from `~/.xinitrc` to `~/.xprofile`, except for the `exec` line.
In your `~/.xinitrc` you can source your new `~/.xprofile` so that it is
still functional in case you find yourself using it again.

https://wiki.archlinux.org/index.php/Xprofile
3a75c5d454

On the next reboot you'll be greeted by LightDM. Slim can then be
uninstalled.

    # pacman --remove slim
2016-12-23 16:07:20 -08:00
Pig Monkey
f06e42b088 install magic-wormhole 2016-12-17 18:48:55 -08:00
Pig Monkey
fc8496e145 only run cryptshot tasks when configured 2016-11-24 12:37:33 -08:00
Pig Monkey
58b13b6432 update playbook role 2016-11-24 11:00:29 -08:00
Pig Monkey
c91617cca0 move borg tasks to own role 2016-11-24 10:58:00 -08:00
Pig Monkey
d90be1937f install timewarrior 2016-11-05 13:09:00 -07:00
Pig Monkey
13fb6f0db4 autoset timezone via localtime
If you happen to have a VPN in a different timezone that is set as a
trusted network, things may get a little weird.
2016-09-03 17:26:39 -07:00
Pig Monkey
152c4eba20 undo git-annex regression 2016-09-02 16:46:21 -07:00
Pig Monkey
ba30d6cec9 Merge branch 'tor' 2016-09-02 16:45:03 -07:00
Pig Monkey
c0b303cc98 only perform parcimonie tasks when tor variable is defined 2016-09-02 16:23:55 -07:00
Pig Monkey
9c3f089dfb create a single role for aws management 2016-08-31 19:54:13 -07:00
Pig Monkey
6fe54654b3 do not perform any git-annex tasks if gitannex variable is not defined 2016-08-18 20:46:24 -07:00
Pig Monkey
948b2a3b9f only perform tor tasks when tor variable is defined 2016-08-18 20:41:28 -07:00
Pig Monkey
8d706940bc move tor higher up the chain
This will just ensure that tor is the first thing added to the trusted
unit file on fresh installs, avoiding any future order-of-operations
issues.
2016-08-12 19:06:07 -07:00
Pig Monkey
433283b486 split bitlbee and weechat roles 2016-08-12 18:57:05 -07:00
Pig Monkey
2507edc493 install parcimonie
Hooking into tor's nmtrust config seems to make sense. I don't know if
someone would want to run tor and not this, and you can't run this and
not tor.

This does introduce a new requirement for nmtrust that we haven't seen
before: tor must be started before parcimonie for it to work. Given the
order of the tasks, spark will cause parcimonie to be added to the
trusted unit file after tor, which means we should be good here. But if
a user were to manually edit the file, placing parcimonie above tor, it
would not work. I'm not sure I really want to deal with that problem.

We're running parcimonie for the primary user rather than using the
special `all-users.conf` that parcimonie ships with. That would cause
parcimonie to run for all users who have a ~~/.gnupg`, which in our case
includes root. Running this as root seems like a Bad Idea.
2016-08-10 21:18:14 -07:00
Pig Monkey
98a8fcfe02 install tor
This needs a firejail profile and a config option to specify when to
start the service.
2016-07-29 21:00:02 -07:00
Pig Monkey
16f55667c5 install microcode updates on intel CPUs
Ansible reports the CPUs on the x260 as being "GenuineIntel". I don't
know if other Intel-based machines (like Macbooks) return some other
value.
2016-04-17 11:24:46 -07:00
Pig Monkey
5177a67809 fix skylake lid close freeze
Disabling Intel pstate is only necessary on Skylake machines with the
current kernel. The bug is fixed in 4.6RC2, so this is only temporary.
2016-04-08 20:25:34 -07:00
Pig Monkey
b6bcff0265 jail mpd
Ansible doesn't seem to have a way to interact with systemd user
instances. All the prep is done, but the user still needs to manually
enable and start the mpd user service.

    $ systemd --user enable mpd.service
    $ systemd --user start mpd.service

Alternatively, the user could include mpd in their shell profile,
xinitrc, or just call it whenever they want it to run. We jail mpd in
/usr/local/bin, just like everything else.

    $ mpd
2016-03-31 20:17:39 -07:00
Pig Monkey
08442f2701 jail mpv 2016-03-31 18:17:32 -07:00
Pig Monkey
a8d303b5a5 jail pianobar 2016-03-31 18:16:11 -07:00
Pig Monkey
dd7d5cf206 install cli53
I don't know if this is the best way to handle building go packages.
Basically the idea is to treat GOPATH like python virtualenvs. A
different one for each thing we install. I'm open to other ideas (or
just moving the root to someplace other than /usr/local/go).
2016-03-31 11:17:33 -07:00
Pig Monkey
6b1d61afbf jail calibre 2016-03-20 17:37:56 -07:00
Peter Hogg
e6e7445b70 Merge pull request #23 from jshuping/hashicorp
role for the hashicorp tool suite
2016-02-29 18:50:09 -08:00
Pig Monkey
c01e34150a replace pmount with udisk/udiskie
udiskie can integrate with pass for LUKS passphrases, ie:
c87c293a78/config/udiskie/config.yml (L5)
2016-02-29 17:56:01 -08:00
John Shuping
97f7d1ebd4 role for the hashicorp tool suite 2016-02-19 12:35:03 -05:00
Pig Monkey
ea522fcb77 install postgresql 2016-02-17 17:43:47 -08:00
Pig Monkey
157805398d breakout cron role 2016-01-30 16:07:54 -08:00
Pig Monkey
e58061025d breakout cups tasks to role 2016-01-30 14:37:55 -08:00
Pig Monkey
be6565c68b split vm role into virtualbox and vagrant 2016-01-21 19:27:31 -08:00
Pig Monkey
736254ddc9 rename network role 2016-01-21 19:23:03 -08:00