Pig Monkey
1963cb2c70
replace rofi-pass-git with rofi-pass
...
Versioned packages are always preferred to git checkouts.
Existing users should uninstall the previously used rofi-pass-git
package first.
2016-06-01 20:11:21 -07:00
Pig Monkey
5b49f52892
add exfat support
2016-05-31 10:04:30 -07:00
Pig Monkey
43ee2ef040
install py3status
2016-05-17 18:05:21 -07:00
Pig Monkey
ea848fc725
control fingerprint auth with a variable
2016-05-05 19:11:26 -07:00
Pig Monkey
c460c11778
replace mutt-sidebar with neomutt
...
Existing users should uninstall mutt-sidebar.
Be aware that the sidebar config is slightly different in neomutt
http://www.neomutt.org/feature/sidebar/
2016-05-05 18:48:21 -07:00
Pig Monkey
dfe131add7
add trusted network
2016-05-05 18:47:04 -07:00
Pig Monkey
e322307d04
install downgrade
2016-04-30 09:17:45 -07:00
Pig Monkey
3a1a8cb50b
increase amount of inotify watchers for git-annex assistant
...
annex all the things
2016-04-28 15:21:51 -07:00
Pig Monkey
16f55667c5
install microcode updates on intel CPUs
...
Ansible reports the CPUs on the x260 as being "GenuineIntel". I don't
know if other Intel-based machines (like Macbooks) return some other
value.
2016-04-17 11:24:46 -07:00
Pig Monkey
c1c153d50b
move grub handler to its own role
2016-04-17 11:17:02 -07:00
Pig Monkey
7757d1eb49
ddrescue
2016-04-15 20:11:10 -07:00
Pig Monkey
c29f7c22df
add play script for mpv + youtube-dl integration
...
I recommend binding play to a key via sxhkd. Enjoy streaming video from
anywhere, without allowing all the javascripts in your browser.
2016-04-15 17:56:41 -07:00
Pig Monkey
5db68aed28
enable fingerprint auth for i3lock
2016-04-11 19:15:10 -07:00
Pig Monkey
010fb9950e
use thinkpad fingerprint reader for sudo
2016-04-09 19:06:39 -07:00
Pig Monkey
5961c59408
flatten thinkpad role
2016-04-09 11:15:32 -07:00
Pig Monkey
6e9fb44175
remove thinkpad fan controls
...
This project doesn't seem to be coming back.
2016-04-09 11:12:02 -07:00
Pig Monkey
99a0ad176a
add vdirsyncer to mailsync script
2016-04-09 11:06:20 -07:00
Pig Monkey
ba6709a96c
note mailsync timer change
2016-04-09 10:58:09 -07:00
Pig Monkey
79e33f2fd6
change sync time to 5 min
2016-04-09 10:46:32 -07:00
Pig Monkey
033ba2fbd0
replace sleep lock script with a systemd unit
...
Existing users should delete the old script.
# rm /usr/lib/systemd/system-sleep/lock.sh
2016-04-08 20:47:32 -07:00
Pig Monkey
5177a67809
fix skylake lid close freeze
...
Disabling Intel pstate is only necessary on Skylake machines with the
current kernel. The bug is fixed in 4.6RC2, so this is only temporary.
2016-04-08 20:25:34 -07:00
Pig Monkey
82f173b82d
yubikey-personalization-gui is now in official repos
2016-04-08 11:39:38 -07:00
Pig Monkey
fa05d7eaf6
verify existence of /media
2016-04-08 11:37:57 -07:00
Pig Monkey
38901827f0
install hdparm
...
This is installed later for TLP, but we need it available at this point
too.
2016-04-08 11:37:15 -07:00
Pig Monkey
fbc0fe9b67
install imv
2016-04-08 11:37:06 -07:00
Pig Monkey
8a80f1e180
allow sandboxed mpv access to ssl certs
...
This is needed for streaming.
2016-04-06 21:00:55 -07:00
Pig Monkey
940a1627a2
leave mpd firejail whitelisting up to the user
2016-04-06 19:56:38 -07:00
Pig Monkey
3be2f733fe
install VA-API
2016-04-06 19:54:03 -07:00
Pig Monkey
04baac296c
update trusted networks
2016-04-06 12:02:50 -07:00
Pig Monkey
ce390833bf
allow mpv access to /etc/fonts
2016-04-03 17:23:27 -07:00
Pig Monkey
110b96a24b
update firewarden
2016-04-03 15:44:13 -07:00
Pig Monkey
29d6709ede
use symlink invocation for zathura firejail
...
Existing users will need to remove the old script first.
# rm /usr/local/bin/zathura
2016-04-03 15:41:24 -07:00
Pig Monkey
937d315641
add trusted network
2016-04-02 16:27:51 -07:00
Pig Monkey
ad75e63ee9
fix virtualenv_command
2016-04-02 14:56:32 -07:00
Pig Monkey
0a6499a40b
remove redundant dependency
2016-04-02 14:27:28 -07:00
Pig Monkey
ab04cfc8d5
only start git-annex if autostart file exists
...
The service will fail otherwise.
2016-04-02 14:19:11 -07:00
Pig Monkey
42050cfe83
do not verify pgp key for tor browser
...
This is lame, but on a fresh install the user will not have the key in
their keyring. We could add it, but doing that blindly seems even worse
than just skipping it. This way the user will at least get an error
whenever they try to upgrade the package, which will prompt them to
acquire and verify the key manually.
2016-04-02 13:42:17 -07:00
Pig Monkey
96bf3c69c5
update ad hosts
2016-04-02 13:35:18 -07:00
Pig Monkey
cf8e7269fd
include root hints
2016-04-02 13:32:08 -07:00
Pig Monkey
b37ec44b46
add weechat firejail profile
2016-04-02 10:54:22 -07:00
Pig Monkey
5187c982aa
automatically include firejail profiles
2016-04-02 10:28:48 -07:00
Pig Monkey
96a523aa54
add zathura firejail profile
2016-04-02 10:18:40 -07:00
Pig Monkey
61ff65254b
use private-etc in mpv firejail profile
2016-04-02 10:18:12 -07:00
Pig Monkey
be9c3a479a
add chromium firejail profile
2016-04-02 10:17:16 -07:00
Pig Monkey
162275436c
update mpd firejail profile
2016-03-31 20:58:40 -07:00
Pig Monkey
ed0a08d049
blacklist spark program files
2016-03-31 20:53:59 -07:00
Pig Monkey
f2485a2781
simplify firejail profiles with our own generic profile
2016-03-31 20:42:23 -07:00
Pig Monkey
f5e6e6b373
jail ncmpcpp
2016-03-31 20:28:07 -07:00
Pig Monkey
b6bcff0265
jail mpd
...
Ansible doesn't seem to have a way to interact with systemd user
instances. All the prep is done, but the user still needs to manually
enable and start the mpd user service.
$ systemd --user enable mpd.service
$ systemd --user start mpd.service
Alternatively, the user could include mpd in their shell profile,
xinitrc, or just call it whenever they want it to run. We jail mpd in
/usr/local/bin, just like everything else.
$ mpd
2016-03-31 20:17:39 -07:00
Pig Monkey
08442f2701
jail mpv
2016-03-31 18:17:32 -07:00
