Pig Monkey
75fbc07fd8
replace AUR packages for git-annex and pandoc
...
These both have a bunch of haskell dependencies, but now that git-annex
is available in Community enough of the dependencies are shared between
them that it seems worthwhile to do this. Fewer AUR packages is more
better.
2016-01-20 19:33:01 -08:00
Pig Monkey
70e0d28703
move trusted network framework to submodule
2016-01-20 19:23:13 -08:00
Pig Monkey
7a6d602dcb
add localhost to resolvconf
2016-01-20 18:03:11 -08:00
Pig Monkey
07570a6ec2
add network diagnostic tools
2016-01-20 17:42:10 -08:00
Pig Monkey
90190826e1
enable trim timer
2016-01-20 17:41:45 -08:00
Pig Monkey
13d82bbffe
removel lynx
2016-01-20 16:08:01 -08:00
Pig Monkey
4445662a97
Merge branch 'master' into grsec
2016-01-19 22:33:20 -08:00
Pig Monkey
e6c517b441
use a systemd timer for paccache cleanup
...
Since cron is not installed by default, we shouldn't depend on it. Users
should have the choice of running a cron-free system without any
decrease in functionality.
paccache service and timer units stolen from:
https://github.com/kylemanna/systemd-utils
2016-01-19 22:31:47 -08:00
Pig Monkey
473ede805a
Merge branch 'master' into grsec
2016-01-19 21:37:20 -08:00
Pig Monkey
114c5f6fe6
add ssh role
2016-01-19 21:36:21 -08:00
Pig Monkey
74fb1637fa
create dotfiles role
2016-01-19 21:31:27 -08:00
Pig Monkey
da34230035
remove debug tags
2016-01-19 20:17:16 -08:00
Pig Monkey
af9ad49da6
build vbox kernel modules on grsec
2016-01-19 20:16:38 -08:00
Pig Monkey
fa4c446a35
install checksec
2016-01-19 19:39:22 -08:00
Pig Monkey
03779250b5
install paxtest
2016-01-19 19:35:49 -08:00
Pig Monkey
4023aee253
rebuilt grub config after installing grsec
2016-01-19 19:35:38 -08:00
Pig Monkey
d23a7d67a5
install grsec and pax
2016-01-19 17:47:04 -08:00
Pig Monkey
1b3b03f484
collapse macbook role
2016-01-18 22:28:02 -08:00
Pig Monkey
e16243e913
create slim role
2016-01-18 22:26:50 -08:00
Pig Monkey
841ba28471
properly set firejail dependent roles
2016-01-18 22:21:07 -08:00
Pig Monkey
fc55b99bb5
remove development role
...
It doesn't seem needed for these 3 packages (none of which are really
related).
2016-01-18 22:18:17 -08:00
Pig Monkey
2efc60b353
do not install ruby-compass
...
I decided I'd rather just install this as a gem
2016-01-18 22:16:53 -08:00
Pig Monkey
d473e6cbdc
collapse archive role
2016-01-18 22:12:08 -08:00
Pig Monkey
0b40158e2c
create tarsnap role
2016-01-18 22:09:41 -08:00
Pig Monkey
7b65fecfc2
create networkmanager role
2016-01-18 22:04:33 -08:00
Pig Monkey
dd7b034c37
move pdsh out of include
2016-01-18 21:54:12 -08:00
Pig Monkey
77d2944c9f
refactor trusted network framework
...
Previously, services would be killed anytime an interface was
deactivated, even if another interface was still connected to a trusted
network. Now we check all active connections against the trusted list
and take the appropriate action.
It's also more modular, and allows the user to more easily
activate/deactive services directly without stopping/starting networking
if for some reason the dispatcher didn't run correctly.
2016-01-18 19:01:05 -08:00
Pig Monkey
cbcbde3242
hostname is optional
...
Setting the hostname is part of the pre-ansible install instructions, so
it is really only useful here to change the hostname. Changing the
hostname probably doesn't happen often and is simple enough without
ansible, so meh.
2016-01-15 19:26:02 -08:00
Pig Monkey
21661fee54
use a calendar schedule for tarsnapper timer
...
This is basically equivalent to cron's @hourly, but the `Persistant`
option will cause it to run immediately if the last start time was
missed.
2016-01-15 19:23:12 -08:00
Pig Monkey
22c0cc6441
add boot delay back to mailsync timer
...
Without this, it appears that the timer will never do its initial
execution.
2016-01-15 19:14:01 -08:00
Pig Monkey
a128e48306
use networkmanager dispatcher for bitlbee
2016-01-15 19:12:55 -08:00
Pig Monkey
f276c4cdd4
match complete lines in trusted_networks file
2016-01-14 21:51:30 -08:00
Pig Monkey
d02b3e1f1a
apparently dashes in yaml vars breaks stuff
2016-01-14 21:44:01 -08:00
Pig Monkey
698c5cf830
add git-annex network dispatchers
2016-01-14 21:35:35 -08:00
Pig Monkey
b31ec015cd
add git-annex systemd service
2016-01-14 21:11:30 -08:00
Pig Monkey
e239726eef
user bin is no longer required
2016-01-14 19:58:06 -08:00
Pig Monkey
823b73c91e
fix task names
2016-01-14 19:57:38 -08:00
Pig Monkey
d0154ca5c3
remove mailsync boot delay
...
This isn't needed when we can just specify that the service runs after
network.target.
2016-01-14 19:53:12 -08:00
Pig Monkey
948e3de457
remove unecessary space
2016-01-14 19:51:40 -08:00
Pig Monkey
eb338e915d
add tarsnap docs
2016-01-14 19:50:53 -08:00
Pig Monkey
0ed5d3c50a
add tarsnapper service, timer and dispatcher
2016-01-14 19:33:21 -08:00
Pig Monkey
146adbd5b9
add a basic tarsnapper config
...
Users can use the include dir to add the jobs they really care about.
2016-01-14 18:22:18 -08:00
Pig Monkey
73cd0be82f
install tarsnapper
...
the other one
2016-01-14 18:15:13 -08:00
Pig Monkey
cce5af058a
install vdirsyncer/khal/khard to system level virtualenv
2016-01-14 18:12:58 -08:00
Pig Monkey
aff07b170e
create a directory for system level virtualenvs
2016-01-14 18:08:08 -08:00
Pig Monkey
3456556165
move virtualenv to its own role
...
we use this for some system packages, so it isn't really a python dev
specific thing
2016-01-14 18:01:54 -08:00
Pig Monkey
0b62437c1b
properly kill jailed unbound
...
/run/unbound.pid will hold the PID of unbound inside of the jail
(usually something like 2), which is not useful for systemd. It will try
to kill that PID and fail (eventually timing out).
Editing /usr/lib/systemd/system/unbound.service is super lame and should
never be done, but I can't figure out how to clear the PIDFile line just
by editing our unit override.
2016-01-14 17:23:52 -08:00
Pig Monkey
58643e2d6f
only sync mail on trusted networks
2016-01-13 18:35:23 -08:00
Pig Monkey
9e5f9b87e6
mac spoofing
2016-01-13 17:53:13 -08:00
Pig Monkey
8f707c9d6f
install pdfgrep
2016-01-13 15:55:04 -08:00
