Commit graph

404 commits

Author SHA1 Message Date
Pig Monkey
8da136c5db set max size for systemd journal
My /var/log/journal was 2.9GB. I'm not sure what a good limit is, but it
certainly is less than that...
2016-12-17 19:15:25 -08:00
Pig Monkey
f2ae6451e8 fix mpd unit target
The multi-user target does not exist for user services.
2016-12-17 18:49:02 -08:00
Pig Monkey
f06e42b088 install magic-wormhole 2016-12-17 18:48:55 -08:00
Pig Monkey
c3b44f0b1e install gimp-plugin-gmic 2016-12-11 21:53:55 -08:00
Pig Monkey
938e8d27ff provide mpd user service
The Arch package used to provide this. Now it doesn't.

To use this, you'd just enable and start it as your user.

    $ systemctl --user enable mpd.service
    $ systemctl --user start mpd.service

Existing users can remove the override we used to install, since that is
now redundant.

    # rm -r /etc/systemd/user/mpd.service.d
2016-12-11 21:48:52 -08:00
Pig Monkey
74de6fb893 install gtk3-print-backends
This is now needed for printers to appear in GTK3 dialogs.
2016-12-09 13:05:34 -08:00
Pig Monkey
da7f2877f5 allow tor access to /dev
Without this, Tor has started complaining about not being able to access
/dev/zero (despite Firejail making it available). Somebody should write
a real profile for this at some point...
2016-12-07 15:58:38 -08:00
Pig Monkey
a09ac3b4f8 start tor jail as root, then drop
An update at some point in the past week or two caused tor to break when
it was launched within Firejail as the tor user. Instead we launch the
jail as root and then have Tor drop privileges. I'm not sure why this is
necessary.
2016-12-07 15:54:18 -08:00
Pig Monkey
f341430642 update cryptshot 2016-12-07 15:54:08 -08:00
Pig Monkey
b097dcba29 replace old backup drives 2016-11-28 21:01:08 -08:00
Pig Monkey
de2c2df416 pass verbose flag to rsync 2016-11-24 15:19:34 -08:00
Pig Monkey
7e8bcc206e update cryptshot 2016-11-24 13:41:44 -08:00
Pig Monkey
3e9e43b9eb use a single script/service/timer 2016-11-24 13:39:42 -08:00
Pig Monkey
fc8496e145 only run cryptshot tasks when configured 2016-11-24 12:37:33 -08:00
Pig Monkey
53e59cac5a create cryptshot services and timers 2016-11-24 12:36:24 -08:00
Pig Monkey
3ce490a5c6 create script to execute cryptshot intervals 2016-11-24 12:16:38 -08:00
Pig Monkey
bddf12d0b8 generate cryptshot configs 2016-11-24 12:01:03 -08:00
Pig Monkey
58b13b6432 update playbook role 2016-11-24 11:00:29 -08:00
Pig Monkey
195faef569 rename backup role 2016-11-24 10:58:54 -08:00
Pig Monkey
c91617cca0 move borg tasks to own role 2016-11-24 10:58:00 -08:00
Pig Monkey
ec0580b535 remove redundant tags 2016-11-22 17:10:15 -08:00
Pig Monkey
652257afc7 update firewarden 2016-11-22 17:09:17 -08:00
Pig Monkey
8030db08d6 update cryptshot 2016-11-20 16:03:23 -08:00
Pig Monkey
efd022df5d install cryptshot 2016-11-20 15:49:17 -08:00
Pig Monkey
2d23353c8f add cryptshot repo 2016-11-20 15:48:09 -08:00
Pig Monkey
9ee7a46c0e add trusted network 2016-11-20 15:31:43 -08:00
Pig Monkey
ee88b821d6 borg is now in community 2016-11-20 15:31:34 -08:00
Pig Monkey
4beeaa269d install backitup 2016-11-20 15:30:32 -08:00
Pig Monkey
74ccb2a581 add backitup repo 2016-11-20 15:28:23 -08:00
Pig Monkey
020ad14a39 verify that mimeapps.list exists
I'm not sure where this should actually be, but I think it's safe to do
after i3 is installed.
2016-11-13 20:33:47 -08:00
Pig Monkey
ce935e2f2d do not overwrite mimeapps.list 2016-11-13 20:28:06 -08:00
Pig Monkey
4ddac42fe7 set default pdf application 2016-11-13 20:27:36 -08:00
Pig Monkey
3d3e5b3b37 update nmtrust 2016-11-10 18:46:28 -08:00
Pig Monkey
6e923a2ed4 update mpd firejail profile
The seccomp filter that is now in Firejail's generic profile was causing
issues.
2016-11-10 18:45:32 -08:00
Pig Monkey
65bb35386a install taskopen 2016-11-07 19:54:19 -08:00
Pig Monkey
0a16ab7a88 disable more in the mutt jail
Granted we need to whitelist most of it, since the blacklist is mostly
mail/calendar/contact stuff.
2016-11-07 19:23:39 -08:00
Pig Monkey
ac7bfb15be make the firejail blacklist configurable 2016-11-07 19:18:26 -08:00
Pig Monkey
163baf8f34 blacklist another ledger location
I should just make a config option for this stuff...
2016-11-07 17:40:05 -08:00
Pig Monkey
62daf964dd disable msmtpq connectivity test
Netcat (and ping) are not available in the mutt jail, so calling msmtpq
(from mailsync.sh) from within that jail throws an error. But
mailsync.sh does its own connectivity testing, so we don't actually need
this!

When offline, mail will still be queued. When online, mail will still be
sent.
2016-11-07 17:37:07 -08:00
Pig Monkey
69d638f4ab allow msmtprc access in mutt jail
I have a PR for this upstream, but until then...
2016-11-07 17:33:24 -08:00
Pig Monkey
5c0de5ce5c jail gimp 2016-11-05 16:43:32 -07:00
Pig Monkey
fcea7efef0 use firejail default zathura profile 2016-11-05 16:37:58 -07:00
Pig Monkey
d90be1937f install timewarrior 2016-11-05 13:09:00 -07:00
Pig Monkey
61d9ac80cc support taskwarrior syncing
mailsync.sh probably ought to be renamed. It syncs more than mail.
2016-11-05 10:58:00 -07:00
Pig Monkey
1762d8b5c0 update firewarden 2016-11-01 20:39:50 -07:00
Pig Monkey
822ed3f85e install texlive-core
pandoc pdf output
2016-10-31 09:34:33 -07:00
Pig Monkey
e7096f6bfd update libreoffice firejail config
Use Firejail's default for libreoffice, plus a few extra things.
2016-09-29 10:23:03 -07:00
Pig Monkey
0836148db9 chromium-pepper-flash is now pepper-flash 2016-09-22 20:35:47 -07:00
Pig Monkey
58ace3aa97 disable bluetooth 2016-09-15 18:48:41 -07:00
Pig Monkey
32a82f3ae0 remove megarole dependency 2016-09-11 13:17:42 -07:00