Commit graph

168 commits

Author SHA1 Message Date
Pig Monkey
72a1065cfe install MAT 2016-01-24 19:39:21 -08:00
Pig Monkey
7b97c088db remove vbox module build
This doesn't actually fix the grsec problem, and will fail if running in
the vanilla kernel during the grsec install process.
2016-01-23 11:03:10 -08:00
Pig Monkey
9972a8ba6c install sshuttle 2016-01-21 21:28:36 -08:00
Pig Monkey
be6565c68b split vm role into virtualbox and vagrant 2016-01-21 19:27:31 -08:00
Pig Monkey
736254ddc9 rename network role 2016-01-21 19:23:03 -08:00
Pig Monkey
9e2c800f65 add macchiato role 2016-01-21 19:19:13 -08:00
Pig Monkey
23088a9a82 add iptables roll 2016-01-21 19:16:26 -08:00
Pig Monkey
b80feb22f9 remove unused git-annex dispatchers 2016-01-21 18:07:11 -08:00
Pig Monkey
e0b0d5ed27 upgrade nmtrust and change git-annex trust behaviour 2016-01-21 18:05:26 -08:00
Pig Monkey
7285bc50f5 install formd 2016-01-21 17:46:39 -08:00
Pig Monkey
6bddfddb19 update README to reflect nmtrust changes 2016-01-20 19:47:29 -08:00
Pig Monkey
75fbc07fd8 replace AUR packages for git-annex and pandoc
These both have a bunch of haskell dependencies, but now that git-annex
is available in Community enough of the dependencies are shared between
them that it seems worthwhile to do this. Fewer AUR packages is more
better.
2016-01-20 19:33:01 -08:00
Pig Monkey
70e0d28703 move trusted network framework to submodule 2016-01-20 19:23:13 -08:00
Pig Monkey
7a6d602dcb add localhost to resolvconf 2016-01-20 18:03:11 -08:00
Pig Monkey
07570a6ec2 add network diagnostic tools 2016-01-20 17:42:10 -08:00
Pig Monkey
90190826e1 enable trim timer 2016-01-20 17:41:45 -08:00
Pig Monkey
13d82bbffe removel lynx 2016-01-20 16:08:01 -08:00
Pig Monkey
4445662a97 Merge branch 'master' into grsec 2016-01-19 22:33:20 -08:00
Pig Monkey
e6c517b441 use a systemd timer for paccache cleanup
Since cron is not installed by default, we shouldn't depend on it. Users
should have the choice of running a cron-free system without any
decrease in functionality.

paccache service and timer units stolen from:
https://github.com/kylemanna/systemd-utils
2016-01-19 22:31:47 -08:00
Pig Monkey
473ede805a Merge branch 'master' into grsec 2016-01-19 21:37:20 -08:00
Pig Monkey
114c5f6fe6 add ssh role 2016-01-19 21:36:21 -08:00
Pig Monkey
74fb1637fa create dotfiles role 2016-01-19 21:31:27 -08:00
Pig Monkey
da34230035 remove debug tags 2016-01-19 20:17:16 -08:00
Pig Monkey
af9ad49da6 build vbox kernel modules on grsec 2016-01-19 20:16:38 -08:00
Pig Monkey
fa4c446a35 install checksec 2016-01-19 19:39:22 -08:00
Pig Monkey
03779250b5 install paxtest 2016-01-19 19:35:49 -08:00
Pig Monkey
4023aee253 rebuilt grub config after installing grsec 2016-01-19 19:35:38 -08:00
Pig Monkey
d23a7d67a5 install grsec and pax 2016-01-19 17:47:04 -08:00
Pig Monkey
1b3b03f484 collapse macbook role 2016-01-18 22:28:02 -08:00
Pig Monkey
e16243e913 create slim role 2016-01-18 22:26:50 -08:00
Pig Monkey
841ba28471 properly set firejail dependent roles 2016-01-18 22:21:07 -08:00
Pig Monkey
fc55b99bb5 remove development role
It doesn't seem needed for these 3 packages (none of which are really
related).
2016-01-18 22:18:17 -08:00
Pig Monkey
2efc60b353 do not install ruby-compass
I decided I'd rather just install this as a gem
2016-01-18 22:16:53 -08:00
Pig Monkey
d473e6cbdc collapse archive role 2016-01-18 22:12:08 -08:00
Pig Monkey
0b40158e2c create tarsnap role 2016-01-18 22:09:41 -08:00
Pig Monkey
7b65fecfc2 create networkmanager role 2016-01-18 22:04:33 -08:00
Pig Monkey
dd7b034c37 move pdsh out of include 2016-01-18 21:54:12 -08:00
Pig Monkey
29f9ddb3f4 add missing comma 2016-01-18 19:07:47 -08:00
Pig Monkey
77d2944c9f refactor trusted network framework
Previously, services would be killed anytime an interface was
deactivated, even if another interface was still connected to a trusted
network. Now we check all active connections against the trusted list
and take the appropriate action.

It's also more modular, and allows the user to more easily
activate/deactive services directly without stopping/starting networking
if for some reason the dispatcher didn't run correctly.
2016-01-18 19:01:05 -08:00
Pig Monkey
cbcbde3242 hostname is optional
Setting the hostname is part of the pre-ansible install instructions, so
it is really only useful here to change the hostname. Changing the
hostname probably doesn't happen often and is simple enough without
ansible, so meh.
2016-01-15 19:26:02 -08:00
Pig Monkey
21661fee54 use a calendar schedule for tarsnapper timer
This is basically equivalent to cron's @hourly, but the `Persistant`
option will cause it to run immediately if the last start time was
missed.
2016-01-15 19:23:12 -08:00
Pig Monkey
22c0cc6441 add boot delay back to mailsync timer
Without this, it appears that the timer will never do its initial
execution.
2016-01-15 19:14:01 -08:00
Pig Monkey
a128e48306 use networkmanager dispatcher for bitlbee 2016-01-15 19:12:55 -08:00
Pig Monkey
f276c4cdd4 match complete lines in trusted_networks file 2016-01-14 21:51:30 -08:00
Pig Monkey
d02b3e1f1a apparently dashes in yaml vars breaks stuff 2016-01-14 21:44:01 -08:00
Pig Monkey
698c5cf830 add git-annex network dispatchers 2016-01-14 21:35:35 -08:00
Pig Monkey
b31ec015cd add git-annex systemd service 2016-01-14 21:11:30 -08:00
Pig Monkey
8d3089a1db reference tarsnap in the trusted network section 2016-01-14 20:03:19 -08:00
Pig Monkey
e239726eef user bin is no longer required 2016-01-14 19:58:06 -08:00
Pig Monkey
823b73c91e fix task names 2016-01-14 19:57:38 -08:00