Pig Monkey
72a1065cfe
install MAT
2016-01-24 19:39:21 -08:00
Pig Monkey
7b97c088db
remove vbox module build
...
This doesn't actually fix the grsec problem, and will fail if running in
the vanilla kernel during the grsec install process.
2016-01-23 11:03:10 -08:00
Pig Monkey
9972a8ba6c
install sshuttle
2016-01-21 21:28:36 -08:00
Pig Monkey
be6565c68b
split vm role into virtualbox and vagrant
2016-01-21 19:27:31 -08:00
Pig Monkey
736254ddc9
rename network role
2016-01-21 19:23:03 -08:00
Pig Monkey
9e2c800f65
add macchiato role
2016-01-21 19:19:13 -08:00
Pig Monkey
23088a9a82
add iptables roll
2016-01-21 19:16:26 -08:00
Pig Monkey
b80feb22f9
remove unused git-annex dispatchers
2016-01-21 18:07:11 -08:00
Pig Monkey
e0b0d5ed27
upgrade nmtrust and change git-annex trust behaviour
2016-01-21 18:05:26 -08:00
Pig Monkey
7285bc50f5
install formd
2016-01-21 17:46:39 -08:00
Pig Monkey
6bddfddb19
update README to reflect nmtrust changes
2016-01-20 19:47:29 -08:00
Pig Monkey
75fbc07fd8
replace AUR packages for git-annex and pandoc
...
These both have a bunch of haskell dependencies, but now that git-annex
is available in Community enough of the dependencies are shared between
them that it seems worthwhile to do this. Fewer AUR packages is more
better.
2016-01-20 19:33:01 -08:00
Pig Monkey
70e0d28703
move trusted network framework to submodule
2016-01-20 19:23:13 -08:00
Pig Monkey
7a6d602dcb
add localhost to resolvconf
2016-01-20 18:03:11 -08:00
Pig Monkey
07570a6ec2
add network diagnostic tools
2016-01-20 17:42:10 -08:00
Pig Monkey
90190826e1
enable trim timer
2016-01-20 17:41:45 -08:00
Pig Monkey
13d82bbffe
removel lynx
2016-01-20 16:08:01 -08:00
Pig Monkey
4445662a97
Merge branch 'master' into grsec
2016-01-19 22:33:20 -08:00
Pig Monkey
e6c517b441
use a systemd timer for paccache cleanup
...
Since cron is not installed by default, we shouldn't depend on it. Users
should have the choice of running a cron-free system without any
decrease in functionality.
paccache service and timer units stolen from:
https://github.com/kylemanna/systemd-utils
2016-01-19 22:31:47 -08:00
Pig Monkey
473ede805a
Merge branch 'master' into grsec
2016-01-19 21:37:20 -08:00
Pig Monkey
114c5f6fe6
add ssh role
2016-01-19 21:36:21 -08:00
Pig Monkey
74fb1637fa
create dotfiles role
2016-01-19 21:31:27 -08:00
Pig Monkey
da34230035
remove debug tags
2016-01-19 20:17:16 -08:00
Pig Monkey
af9ad49da6
build vbox kernel modules on grsec
2016-01-19 20:16:38 -08:00
Pig Monkey
fa4c446a35
install checksec
2016-01-19 19:39:22 -08:00
Pig Monkey
03779250b5
install paxtest
2016-01-19 19:35:49 -08:00
Pig Monkey
4023aee253
rebuilt grub config after installing grsec
2016-01-19 19:35:38 -08:00
Pig Monkey
d23a7d67a5
install grsec and pax
2016-01-19 17:47:04 -08:00
Pig Monkey
1b3b03f484
collapse macbook role
2016-01-18 22:28:02 -08:00
Pig Monkey
e16243e913
create slim role
2016-01-18 22:26:50 -08:00
Pig Monkey
841ba28471
properly set firejail dependent roles
2016-01-18 22:21:07 -08:00
Pig Monkey
fc55b99bb5
remove development role
...
It doesn't seem needed for these 3 packages (none of which are really
related).
2016-01-18 22:18:17 -08:00
Pig Monkey
2efc60b353
do not install ruby-compass
...
I decided I'd rather just install this as a gem
2016-01-18 22:16:53 -08:00
Pig Monkey
d473e6cbdc
collapse archive role
2016-01-18 22:12:08 -08:00
Pig Monkey
0b40158e2c
create tarsnap role
2016-01-18 22:09:41 -08:00
Pig Monkey
7b65fecfc2
create networkmanager role
2016-01-18 22:04:33 -08:00
Pig Monkey
dd7b034c37
move pdsh out of include
2016-01-18 21:54:12 -08:00
Pig Monkey
29f9ddb3f4
add missing comma
2016-01-18 19:07:47 -08:00
Pig Monkey
77d2944c9f
refactor trusted network framework
...
Previously, services would be killed anytime an interface was
deactivated, even if another interface was still connected to a trusted
network. Now we check all active connections against the trusted list
and take the appropriate action.
It's also more modular, and allows the user to more easily
activate/deactive services directly without stopping/starting networking
if for some reason the dispatcher didn't run correctly.
2016-01-18 19:01:05 -08:00
Pig Monkey
cbcbde3242
hostname is optional
...
Setting the hostname is part of the pre-ansible install instructions, so
it is really only useful here to change the hostname. Changing the
hostname probably doesn't happen often and is simple enough without
ansible, so meh.
2016-01-15 19:26:02 -08:00
Pig Monkey
21661fee54
use a calendar schedule for tarsnapper timer
...
This is basically equivalent to cron's @hourly, but the `Persistant`
option will cause it to run immediately if the last start time was
missed.
2016-01-15 19:23:12 -08:00
Pig Monkey
22c0cc6441
add boot delay back to mailsync timer
...
Without this, it appears that the timer will never do its initial
execution.
2016-01-15 19:14:01 -08:00
Pig Monkey
a128e48306
use networkmanager dispatcher for bitlbee
2016-01-15 19:12:55 -08:00
Pig Monkey
f276c4cdd4
match complete lines in trusted_networks file
2016-01-14 21:51:30 -08:00
Pig Monkey
d02b3e1f1a
apparently dashes in yaml vars breaks stuff
2016-01-14 21:44:01 -08:00
Pig Monkey
698c5cf830
add git-annex network dispatchers
2016-01-14 21:35:35 -08:00
Pig Monkey
b31ec015cd
add git-annex systemd service
2016-01-14 21:11:30 -08:00
Pig Monkey
8d3089a1db
reference tarsnap in the trusted network section
2016-01-14 20:03:19 -08:00
Pig Monkey
e239726eef
user bin is no longer required
2016-01-14 19:58:06 -08:00
Pig Monkey
823b73c91e
fix task names
2016-01-14 19:57:38 -08:00