Pig Monkey
79e33f2fd6
change sync time to 5 min
2016-04-09 10:46:32 -07:00
Pig Monkey
033ba2fbd0
replace sleep lock script with a systemd unit
...
Existing users should delete the old script.
# rm /usr/lib/systemd/system-sleep/lock.sh
2016-04-08 20:47:32 -07:00
Pig Monkey
5177a67809
fix skylake lid close freeze
...
Disabling Intel pstate is only necessary on Skylake machines with the
current kernel. The bug is fixed in 4.6RC2, so this is only temporary.
2016-04-08 20:25:34 -07:00
Pig Monkey
82f173b82d
yubikey-personalization-gui is now in official repos
2016-04-08 11:39:38 -07:00
Pig Monkey
fa05d7eaf6
verify existence of /media
2016-04-08 11:37:57 -07:00
Pig Monkey
38901827f0
install hdparm
...
This is installed later for TLP, but we need it available at this point
too.
2016-04-08 11:37:15 -07:00
Pig Monkey
fbc0fe9b67
install imv
2016-04-08 11:37:06 -07:00
Pig Monkey
8a80f1e180
allow sandboxed mpv access to ssl certs
...
This is needed for streaming.
2016-04-06 21:00:55 -07:00
Pig Monkey
940a1627a2
leave mpd firejail whitelisting up to the user
2016-04-06 19:56:38 -07:00
Pig Monkey
3be2f733fe
install VA-API
2016-04-06 19:54:03 -07:00
Pig Monkey
04baac296c
update trusted networks
2016-04-06 12:02:50 -07:00
Pig Monkey
ce390833bf
allow mpv access to /etc/fonts
2016-04-03 17:23:27 -07:00
Pig Monkey
110b96a24b
update firewarden
2016-04-03 15:44:13 -07:00
Pig Monkey
29d6709ede
use symlink invocation for zathura firejail
...
Existing users will need to remove the old script first.
# rm /usr/local/bin/zathura
2016-04-03 15:41:24 -07:00
Pig Monkey
937d315641
add trusted network
2016-04-02 16:27:51 -07:00
Pig Monkey
ad75e63ee9
fix virtualenv_command
2016-04-02 14:56:32 -07:00
Pig Monkey
0a6499a40b
remove redundant dependency
2016-04-02 14:27:28 -07:00
Pig Monkey
ab04cfc8d5
only start git-annex if autostart file exists
...
The service will fail otherwise.
2016-04-02 14:19:11 -07:00
Pig Monkey
42050cfe83
do not verify pgp key for tor browser
...
This is lame, but on a fresh install the user will not have the key in
their keyring. We could add it, but doing that blindly seems even worse
than just skipping it. This way the user will at least get an error
whenever they try to upgrade the package, which will prompt them to
acquire and verify the key manually.
2016-04-02 13:42:17 -07:00
Pig Monkey
96bf3c69c5
update ad hosts
2016-04-02 13:35:18 -07:00
Pig Monkey
cf8e7269fd
include root hints
2016-04-02 13:32:08 -07:00
Pig Monkey
b37ec44b46
add weechat firejail profile
2016-04-02 10:54:22 -07:00
Pig Monkey
5187c982aa
automatically include firejail profiles
2016-04-02 10:28:48 -07:00
Pig Monkey
96a523aa54
add zathura firejail profile
2016-04-02 10:18:40 -07:00
Pig Monkey
61ff65254b
use private-etc in mpv firejail profile
2016-04-02 10:18:12 -07:00
Pig Monkey
be9c3a479a
add chromium firejail profile
2016-04-02 10:17:16 -07:00
Pig Monkey
162275436c
update mpd firejail profile
2016-03-31 20:58:40 -07:00
Pig Monkey
ed0a08d049
blacklist spark program files
2016-03-31 20:53:59 -07:00
Pig Monkey
f2485a2781
simplify firejail profiles with our own generic profile
2016-03-31 20:42:23 -07:00
Pig Monkey
f5e6e6b373
jail ncmpcpp
2016-03-31 20:28:07 -07:00
Pig Monkey
b6bcff0265
jail mpd
...
Ansible doesn't seem to have a way to interact with systemd user
instances. All the prep is done, but the user still needs to manually
enable and start the mpd user service.
$ systemd --user enable mpd.service
$ systemd --user start mpd.service
Alternatively, the user could include mpd in their shell profile,
xinitrc, or just call it whenever they want it to run. We jail mpd in
/usr/local/bin, just like everything else.
$ mpd
2016-03-31 20:17:39 -07:00
Pig Monkey
08442f2701
jail mpv
2016-03-31 18:17:32 -07:00
Pig Monkey
e046ad7253
remove unnecessary profile entry
2016-03-31 18:16:27 -07:00
Pig Monkey
a8d303b5a5
jail pianobar
2016-03-31 18:16:11 -07:00
Pig Monkey
dd7d5cf206
install cli53
...
I don't know if this is the best way to handle building go packages.
Basically the idea is to treat GOPATH like python virtualenvs. A
different one for each thing we install. I'm open to other ideas (or
just moving the root to someplace other than /usr/local/go).
2016-03-31 11:17:33 -07:00
Pig Monkey
d71a93d610
lock down calibre
2016-03-29 20:42:19 -07:00
Pig Monkey
fa4bf737fc
add firejail rtorrent profile
2016-03-29 20:21:37 -07:00
Pig Monkey
206f9a0de0
include custom firejail profiles
2016-03-29 19:43:09 -07:00
Pig Monkey
f918691e1c
jail libreoffice
...
Useful with firewarden and a profile like this:
6aef951a65/config/firejail/libreoffice.profile
2016-03-29 17:44:41 -07:00
Pig Monkey
106713f402
flatten browser role
2016-03-25 20:27:21 -07:00
Pig Monkey
6dd81939b2
add tor browser
2016-03-20 18:22:03 -07:00
Pig Monkey
6b1d61afbf
jail calibre
2016-03-20 17:37:56 -07:00
Pig Monkey
b4c70afa3b
always adjust screen brightness on lock
2016-03-20 13:16:54 -07:00
Peter Hogg
0e0ba1fa68
Merge pull request #24 from brett/lyrics
...
add beautifulsoup4 for beets lyrics plugins
2016-03-06 15:23:40 -08:00
Peter Hogg
e6e7445b70
Merge pull request #23 from jshuping/hashicorp
...
role for the hashicorp tool suite
2016-02-29 18:50:09 -08:00
Pig Monkey
c01e34150a
replace pmount with udisk/udiskie
...
udiskie can integrate with pass for LUKS passphrases, ie:
c87c293a78/config/udiskie/config.yml (L5)
2016-02-29 17:56:01 -08:00
Brett Eisenberg
836a1e5cab
add beautifulsoup4 for beets lyrics plugins
2016-02-29 08:47:40 -08:00
Pig Monkey
cbd2025ba7
add showme script for sat images
...
Mostly stolen from:
https://github.com/mapbox/mapbox-cli-py/blob/master/examples/static_maps.md
In i3, float the window for maximum awesome.
for_window [title="^showme$"] floating enable
Set your $MAPBOX_ACCESS_TOKEN in your shell. Then:
$ showme seattle
$ showme "1600 pennsylvania ave nw 20006" 18
2016-02-26 17:51:59 -08:00
Pig Monkey
13e8222d8f
add mapbox-cli
...
With a free API token you can do all kinds of cool stuff:
https://github.com/mapbox/mapbox-cli-py/#usage
2016-02-26 17:44:11 -08:00
Pig Monkey
78a51525af
notify the specified user on low battery
2016-02-20 13:19:17 -08:00
