Pig Monkey
8da136c5db
set max size for systemd journal
...
My /var/log/journal was 2.9GB. I'm not sure what a good limit is, but it
certainly is less than that...
2016-12-17 19:15:25 -08:00
Pig Monkey
f2ae6451e8
fix mpd unit target
...
The multi-user target does not exist for user services.
2016-12-17 18:49:02 -08:00
Pig Monkey
f06e42b088
install magic-wormhole
2016-12-17 18:48:55 -08:00
Pig Monkey
c3b44f0b1e
install gimp-plugin-gmic
2016-12-11 21:53:55 -08:00
Pig Monkey
938e8d27ff
provide mpd user service
...
The Arch package used to provide this. Now it doesn't.
To use this, you'd just enable and start it as your user.
$ systemctl --user enable mpd.service
$ systemctl --user start mpd.service
Existing users can remove the override we used to install, since that is
now redundant.
# rm -r /etc/systemd/user/mpd.service.d
2016-12-11 21:48:52 -08:00
Pig Monkey
74de6fb893
install gtk3-print-backends
...
This is now needed for printers to appear in GTK3 dialogs.
2016-12-09 13:05:34 -08:00
Pig Monkey
da7f2877f5
allow tor access to /dev
...
Without this, Tor has started complaining about not being able to access
/dev/zero (despite Firejail making it available). Somebody should write
a real profile for this at some point...
2016-12-07 15:58:38 -08:00
Pig Monkey
a09ac3b4f8
start tor jail as root, then drop
...
An update at some point in the past week or two caused tor to break when
it was launched within Firejail as the tor user. Instead we launch the
jail as root and then have Tor drop privileges. I'm not sure why this is
necessary.
2016-12-07 15:54:18 -08:00
Pig Monkey
f341430642
update cryptshot
2016-12-07 15:54:08 -08:00
Pig Monkey
b097dcba29
replace old backup drives
2016-11-28 21:01:08 -08:00
Pig Monkey
de2c2df416
pass verbose flag to rsync
2016-11-24 15:19:34 -08:00
Pig Monkey
7e8bcc206e
update cryptshot
2016-11-24 13:41:44 -08:00
Pig Monkey
3e9e43b9eb
use a single script/service/timer
2016-11-24 13:39:42 -08:00
Pig Monkey
fc8496e145
only run cryptshot tasks when configured
2016-11-24 12:37:33 -08:00
Pig Monkey
53e59cac5a
create cryptshot services and timers
2016-11-24 12:36:24 -08:00
Pig Monkey
3ce490a5c6
create script to execute cryptshot intervals
2016-11-24 12:16:38 -08:00
Pig Monkey
bddf12d0b8
generate cryptshot configs
2016-11-24 12:01:03 -08:00
Pig Monkey
58b13b6432
update playbook role
2016-11-24 11:00:29 -08:00
Pig Monkey
195faef569
rename backup role
2016-11-24 10:58:54 -08:00
Pig Monkey
c91617cca0
move borg tasks to own role
2016-11-24 10:58:00 -08:00
Pig Monkey
ec0580b535
remove redundant tags
2016-11-22 17:10:15 -08:00
Pig Monkey
652257afc7
update firewarden
2016-11-22 17:09:17 -08:00
Pig Monkey
8030db08d6
update cryptshot
2016-11-20 16:03:23 -08:00
Pig Monkey
efd022df5d
install cryptshot
2016-11-20 15:49:17 -08:00
Pig Monkey
2d23353c8f
add cryptshot repo
2016-11-20 15:48:09 -08:00
Pig Monkey
9ee7a46c0e
add trusted network
2016-11-20 15:31:43 -08:00
Pig Monkey
ee88b821d6
borg is now in community
2016-11-20 15:31:34 -08:00
Pig Monkey
4beeaa269d
install backitup
2016-11-20 15:30:32 -08:00
Pig Monkey
74ccb2a581
add backitup repo
2016-11-20 15:28:23 -08:00
Pig Monkey
020ad14a39
verify that mimeapps.list exists
...
I'm not sure where this should actually be, but I think it's safe to do
after i3 is installed.
2016-11-13 20:33:47 -08:00
Pig Monkey
ce935e2f2d
do not overwrite mimeapps.list
2016-11-13 20:28:06 -08:00
Pig Monkey
4ddac42fe7
set default pdf application
2016-11-13 20:27:36 -08:00
Pig Monkey
3d3e5b3b37
update nmtrust
2016-11-10 18:46:28 -08:00
Pig Monkey
6e923a2ed4
update mpd firejail profile
...
The seccomp filter that is now in Firejail's generic profile was causing
issues.
2016-11-10 18:45:32 -08:00
Pig Monkey
65bb35386a
install taskopen
2016-11-07 19:54:19 -08:00
Pig Monkey
0a16ab7a88
disable more in the mutt jail
...
Granted we need to whitelist most of it, since the blacklist is mostly
mail/calendar/contact stuff.
2016-11-07 19:23:39 -08:00
Pig Monkey
ac7bfb15be
make the firejail blacklist configurable
2016-11-07 19:18:26 -08:00
Pig Monkey
163baf8f34
blacklist another ledger location
...
I should just make a config option for this stuff...
2016-11-07 17:40:05 -08:00
Pig Monkey
62daf964dd
disable msmtpq connectivity test
...
Netcat (and ping) are not available in the mutt jail, so calling msmtpq
(from mailsync.sh) from within that jail throws an error. But
mailsync.sh does its own connectivity testing, so we don't actually need
this!
When offline, mail will still be queued. When online, mail will still be
sent.
2016-11-07 17:37:07 -08:00
Pig Monkey
69d638f4ab
allow msmtprc access in mutt jail
...
I have a PR for this upstream, but until then...
2016-11-07 17:33:24 -08:00
Pig Monkey
5c0de5ce5c
jail gimp
2016-11-05 16:43:32 -07:00
Pig Monkey
fcea7efef0
use firejail default zathura profile
2016-11-05 16:37:58 -07:00
Pig Monkey
d90be1937f
install timewarrior
2016-11-05 13:09:00 -07:00
Pig Monkey
61d9ac80cc
support taskwarrior syncing
...
mailsync.sh probably ought to be renamed. It syncs more than mail.
2016-11-05 10:58:00 -07:00
Pig Monkey
1762d8b5c0
update firewarden
2016-11-01 20:39:50 -07:00
Pig Monkey
822ed3f85e
install texlive-core
...
pandoc pdf output
2016-10-31 09:34:33 -07:00
Pig Monkey
e7096f6bfd
update libreoffice firejail config
...
Use Firejail's default for libreoffice, plus a few extra things.
2016-09-29 10:23:03 -07:00
Pig Monkey
0836148db9
chromium-pepper-flash is now pepper-flash
2016-09-22 20:35:47 -07:00
Pig Monkey
58ace3aa97
disable bluetooth
2016-09-15 18:48:41 -07:00
Pig Monkey
32a82f3ae0
remove megarole dependency
2016-09-11 13:17:42 -07:00