Pig Monkey
75fbc07fd8
replace AUR packages for git-annex and pandoc
...
These both have a bunch of haskell dependencies, but now that git-annex
is available in Community enough of the dependencies are shared between
them that it seems worthwhile to do this. Fewer AUR packages is more
better.
2016-01-20 19:33:01 -08:00
Pig Monkey
70e0d28703
move trusted network framework to submodule
2016-01-20 19:23:13 -08:00
Pig Monkey
7a6d602dcb
add localhost to resolvconf
2016-01-20 18:03:11 -08:00
Pig Monkey
07570a6ec2
add network diagnostic tools
2016-01-20 17:42:10 -08:00
Pig Monkey
90190826e1
enable trim timer
2016-01-20 17:41:45 -08:00
Pig Monkey
13d82bbffe
removel lynx
2016-01-20 16:08:01 -08:00
Pig Monkey
4445662a97
Merge branch 'master' into grsec
2016-01-19 22:33:20 -08:00
Pig Monkey
e6c517b441
use a systemd timer for paccache cleanup
...
Since cron is not installed by default, we shouldn't depend on it. Users
should have the choice of running a cron-free system without any
decrease in functionality.
paccache service and timer units stolen from:
https://github.com/kylemanna/systemd-utils
2016-01-19 22:31:47 -08:00
Pig Monkey
473ede805a
Merge branch 'master' into grsec
2016-01-19 21:37:20 -08:00
Pig Monkey
114c5f6fe6
add ssh role
2016-01-19 21:36:21 -08:00
Pig Monkey
74fb1637fa
create dotfiles role
2016-01-19 21:31:27 -08:00
Pig Monkey
da34230035
remove debug tags
2016-01-19 20:17:16 -08:00
Pig Monkey
af9ad49da6
build vbox kernel modules on grsec
2016-01-19 20:16:38 -08:00
Pig Monkey
fa4c446a35
install checksec
2016-01-19 19:39:22 -08:00
Pig Monkey
03779250b5
install paxtest
2016-01-19 19:35:49 -08:00
Pig Monkey
4023aee253
rebuilt grub config after installing grsec
2016-01-19 19:35:38 -08:00
Pig Monkey
d23a7d67a5
install grsec and pax
2016-01-19 17:47:04 -08:00
Pig Monkey
1b3b03f484
collapse macbook role
2016-01-18 22:28:02 -08:00
Pig Monkey
e16243e913
create slim role
2016-01-18 22:26:50 -08:00
Pig Monkey
841ba28471
properly set firejail dependent roles
2016-01-18 22:21:07 -08:00
Pig Monkey
fc55b99bb5
remove development role
...
It doesn't seem needed for these 3 packages (none of which are really
related).
2016-01-18 22:18:17 -08:00
Pig Monkey
2efc60b353
do not install ruby-compass
...
I decided I'd rather just install this as a gem
2016-01-18 22:16:53 -08:00
Pig Monkey
d473e6cbdc
collapse archive role
2016-01-18 22:12:08 -08:00
Pig Monkey
0b40158e2c
create tarsnap role
2016-01-18 22:09:41 -08:00
Pig Monkey
7b65fecfc2
create networkmanager role
2016-01-18 22:04:33 -08:00
Pig Monkey
dd7b034c37
move pdsh out of include
2016-01-18 21:54:12 -08:00
Pig Monkey
29f9ddb3f4
add missing comma
2016-01-18 19:07:47 -08:00
Pig Monkey
77d2944c9f
refactor trusted network framework
...
Previously, services would be killed anytime an interface was
deactivated, even if another interface was still connected to a trusted
network. Now we check all active connections against the trusted list
and take the appropriate action.
It's also more modular, and allows the user to more easily
activate/deactive services directly without stopping/starting networking
if for some reason the dispatcher didn't run correctly.
2016-01-18 19:01:05 -08:00
Pig Monkey
cbcbde3242
hostname is optional
...
Setting the hostname is part of the pre-ansible install instructions, so
it is really only useful here to change the hostname. Changing the
hostname probably doesn't happen often and is simple enough without
ansible, so meh.
2016-01-15 19:26:02 -08:00
Pig Monkey
21661fee54
use a calendar schedule for tarsnapper timer
...
This is basically equivalent to cron's @hourly, but the `Persistant`
option will cause it to run immediately if the last start time was
missed.
2016-01-15 19:23:12 -08:00
Pig Monkey
22c0cc6441
add boot delay back to mailsync timer
...
Without this, it appears that the timer will never do its initial
execution.
2016-01-15 19:14:01 -08:00
Pig Monkey
a128e48306
use networkmanager dispatcher for bitlbee
2016-01-15 19:12:55 -08:00
Pig Monkey
f276c4cdd4
match complete lines in trusted_networks file
2016-01-14 21:51:30 -08:00
Pig Monkey
d02b3e1f1a
apparently dashes in yaml vars breaks stuff
2016-01-14 21:44:01 -08:00
Pig Monkey
698c5cf830
add git-annex network dispatchers
2016-01-14 21:35:35 -08:00
Pig Monkey
b31ec015cd
add git-annex systemd service
2016-01-14 21:11:30 -08:00
Pig Monkey
8d3089a1db
reference tarsnap in the trusted network section
2016-01-14 20:03:19 -08:00
Pig Monkey
e239726eef
user bin is no longer required
2016-01-14 19:58:06 -08:00
Pig Monkey
823b73c91e
fix task names
2016-01-14 19:57:38 -08:00
Pig Monkey
d0154ca5c3
remove mailsync boot delay
...
This isn't needed when we can just specify that the service runs after
network.target.
2016-01-14 19:53:12 -08:00
Pig Monkey
948e3de457
remove unecessary space
2016-01-14 19:51:40 -08:00
Pig Monkey
eb338e915d
add tarsnap docs
2016-01-14 19:50:53 -08:00
Pig Monkey
0ed5d3c50a
add tarsnapper service, timer and dispatcher
2016-01-14 19:33:21 -08:00
Pig Monkey
146adbd5b9
add a basic tarsnapper config
...
Users can use the include dir to add the jobs they really care about.
2016-01-14 18:22:18 -08:00
Pig Monkey
73cd0be82f
install tarsnapper
...
the other one
2016-01-14 18:15:13 -08:00
Pig Monkey
cce5af058a
install vdirsyncer/khal/khard to system level virtualenv
2016-01-14 18:12:58 -08:00
Pig Monkey
aff07b170e
create a directory for system level virtualenvs
2016-01-14 18:08:08 -08:00
Pig Monkey
3456556165
move virtualenv to its own role
...
we use this for some system packages, so it isn't really a python dev
specific thing
2016-01-14 18:01:54 -08:00
Pig Monkey
608d0b5253
s/sudo/become
2016-01-14 17:47:41 -08:00
Pig Monkey
e5af6c2dff
specify ansible library dir
...
`./library` is included by default. In Ansible pre-2.0 it would go
through recursively so being this explicit was not necessary.
2016-01-14 17:29:39 -08:00
