Commit graph

290 commits

Author SHA1 Message Date
Pig Monkey
43ee2ef040 install py3status 2016-05-17 18:05:21 -07:00
Pig Monkey
ea848fc725 control fingerprint auth with a variable 2016-05-05 19:11:26 -07:00
Pig Monkey
c460c11778 replace mutt-sidebar with neomutt
Existing users should uninstall mutt-sidebar.

Be aware that the sidebar config is slightly different in neomutt
http://www.neomutt.org/feature/sidebar/
2016-05-05 18:48:21 -07:00
Pig Monkey
dfe131add7 add trusted network 2016-05-05 18:47:04 -07:00
Pig Monkey
e322307d04 install downgrade 2016-04-30 09:17:45 -07:00
Pig Monkey
3a1a8cb50b increase amount of inotify watchers for git-annex assistant
annex all the things
2016-04-28 15:21:51 -07:00
Pig Monkey
16f55667c5 install microcode updates on intel CPUs
Ansible reports the CPUs on the x260 as being "GenuineIntel". I don't
know if other Intel-based machines (like Macbooks) return some other
value.
2016-04-17 11:24:46 -07:00
Pig Monkey
c1c153d50b move grub handler to its own role 2016-04-17 11:17:02 -07:00
Pig Monkey
7757d1eb49 ddrescue 2016-04-15 20:11:10 -07:00
Pig Monkey
c29f7c22df add play script for mpv + youtube-dl integration
I recommend binding play to a key via sxhkd. Enjoy streaming video from
anywhere, without allowing all the javascripts in your browser.
2016-04-15 17:56:41 -07:00
Pig Monkey
5db68aed28 enable fingerprint auth for i3lock 2016-04-11 19:15:10 -07:00
Pig Monkey
010fb9950e use thinkpad fingerprint reader for sudo 2016-04-09 19:06:39 -07:00
Pig Monkey
5961c59408 flatten thinkpad role 2016-04-09 11:15:32 -07:00
Pig Monkey
6e9fb44175 remove thinkpad fan controls
This project doesn't seem to be coming back.
2016-04-09 11:12:02 -07:00
Pig Monkey
99a0ad176a add vdirsyncer to mailsync script 2016-04-09 11:06:20 -07:00
Pig Monkey
ba6709a96c note mailsync timer change 2016-04-09 10:58:09 -07:00
Pig Monkey
79e33f2fd6 change sync time to 5 min 2016-04-09 10:46:32 -07:00
Pig Monkey
033ba2fbd0 replace sleep lock script with a systemd unit
Existing users should delete the old script.

    # rm /usr/lib/systemd/system-sleep/lock.sh
2016-04-08 20:47:32 -07:00
Pig Monkey
5177a67809 fix skylake lid close freeze
Disabling Intel pstate is only necessary on Skylake machines with the
current kernel. The bug is fixed in 4.6RC2, so this is only temporary.
2016-04-08 20:25:34 -07:00
Pig Monkey
82f173b82d yubikey-personalization-gui is now in official repos 2016-04-08 11:39:38 -07:00
Pig Monkey
fa05d7eaf6 verify existence of /media 2016-04-08 11:37:57 -07:00
Pig Monkey
38901827f0 install hdparm
This is installed later for TLP, but we need it available at this point
too.
2016-04-08 11:37:15 -07:00
Pig Monkey
fbc0fe9b67 install imv 2016-04-08 11:37:06 -07:00
Pig Monkey
8a80f1e180 allow sandboxed mpv access to ssl certs
This is needed for streaming.
2016-04-06 21:00:55 -07:00
Pig Monkey
940a1627a2 leave mpd firejail whitelisting up to the user 2016-04-06 19:56:38 -07:00
Pig Monkey
3be2f733fe install VA-API 2016-04-06 19:54:03 -07:00
Pig Monkey
04baac296c update trusted networks 2016-04-06 12:02:50 -07:00
Pig Monkey
ce390833bf allow mpv access to /etc/fonts 2016-04-03 17:23:27 -07:00
Pig Monkey
110b96a24b update firewarden 2016-04-03 15:44:13 -07:00
Pig Monkey
29d6709ede use symlink invocation for zathura firejail
Existing users will need to remove the old script first.

    # rm /usr/local/bin/zathura
2016-04-03 15:41:24 -07:00
Pig Monkey
937d315641 add trusted network 2016-04-02 16:27:51 -07:00
Pig Monkey
ad75e63ee9 fix virtualenv_command 2016-04-02 14:56:32 -07:00
Pig Monkey
0a6499a40b remove redundant dependency 2016-04-02 14:27:28 -07:00
Pig Monkey
ab04cfc8d5 only start git-annex if autostart file exists
The service will fail otherwise.
2016-04-02 14:19:11 -07:00
Pig Monkey
42050cfe83 do not verify pgp key for tor browser
This is lame, but on a fresh install the user will not have the key in
their keyring. We could add it, but doing that blindly seems even worse
than just skipping it. This way the user will at least get an error
whenever they try to upgrade the package, which will prompt them to
acquire and verify the key manually.
2016-04-02 13:42:17 -07:00
Pig Monkey
96bf3c69c5 update ad hosts 2016-04-02 13:35:18 -07:00
Pig Monkey
cf8e7269fd include root hints 2016-04-02 13:32:08 -07:00
Pig Monkey
b37ec44b46 add weechat firejail profile 2016-04-02 10:54:22 -07:00
Pig Monkey
5187c982aa automatically include firejail profiles 2016-04-02 10:28:48 -07:00
Pig Monkey
96a523aa54 add zathura firejail profile 2016-04-02 10:18:40 -07:00
Pig Monkey
61ff65254b use private-etc in mpv firejail profile 2016-04-02 10:18:12 -07:00
Pig Monkey
be9c3a479a add chromium firejail profile 2016-04-02 10:17:16 -07:00
Pig Monkey
162275436c update mpd firejail profile 2016-03-31 20:58:40 -07:00
Pig Monkey
ed0a08d049 blacklist spark program files 2016-03-31 20:53:59 -07:00
Pig Monkey
f2485a2781 simplify firejail profiles with our own generic profile 2016-03-31 20:42:23 -07:00
Pig Monkey
f5e6e6b373 jail ncmpcpp 2016-03-31 20:28:07 -07:00
Pig Monkey
b6bcff0265 jail mpd
Ansible doesn't seem to have a way to interact with systemd user
instances. All the prep is done, but the user still needs to manually
enable and start the mpd user service.

    $ systemd --user enable mpd.service
    $ systemd --user start mpd.service

Alternatively, the user could include mpd in their shell profile,
xinitrc, or just call it whenever they want it to run. We jail mpd in
/usr/local/bin, just like everything else.

    $ mpd
2016-03-31 20:17:39 -07:00
Pig Monkey
08442f2701 jail mpv 2016-03-31 18:17:32 -07:00
Pig Monkey
e046ad7253 remove unnecessary profile entry 2016-03-31 18:16:27 -07:00
Pig Monkey
a8d303b5a5 jail pianobar 2016-03-31 18:16:11 -07:00