Commit graph

130 commits

Author SHA1 Message Date
281b95d824
chore: move out system roles
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 21:19:42 +02:00
6a732703f7
chore: move out yubikey roles
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 21:15:31 +02:00
cfc02949d6
chore: move out the OS-specific roles
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 21:15:31 +02:00
c7293cd6ea
chore: move out the server roles
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 21:15:31 +02:00
0283426127
chore: move out the base roles
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 21:07:20 +02:00
bc2d4a291e
chore(wg): factor out the wireguard role
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 19:53:09 +02:00
f0d4f84ec7
feat(user/yubikey): implement setup for Yubikey auth
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 15:02:51 +02:00
28531a4f07
feat(system/yubikey): implement PAM auth for Yubikey OTP
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 15:02:18 +02:00
918f7c8fbf
feat(system/cockpit): implement Cockpit role
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 15:01:52 +02:00
1380efe400
feat(server/nginx): implement nginx role
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 15:00:55 +02:00
34798fd196
feat(server/cups): implement CUPS role
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:58:28 +02:00
d5137bc5fb
docs(user/tmpfiles): document variables
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:57:21 +02:00
d6bcb2b018
fix(ssh): maxwell → mountainside
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:56:59 +02:00
8f28841fef
fix(shell/zsh): use variables in the zshrc
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:56:34 +02:00
42aeacb47b
fix(secrets/bw): use correct variables
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:56:07 +02:00
749be7227e
fix(system/wg-admin): use variables
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:55:29 +02:00
741f570235
fix(system/sshd): use HashiCorp Vault address from variable
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:53:42 +02:00
c116552ab8
docs(system/sshd): document variables
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:53:30 +02:00
d5e843f088
docs(system/flatpak): document variable
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:53:12 +02:00
8e97008f4d
fix(server/ddns): use variables instead of hardcoded values
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-12 14:51:18 +02:00
4d84398657
feat(server/ddns): implement DDNS support using inadyn
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-10 16:45:45 +02:00
90bac3a306
feat(server/certbot): add support for certbot
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-10 16:43:18 +02:00
282d61d808
fix(system/base): some systems may not have unzip
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-10 16:40:29 +02:00
f78364e2a8
feat(server/base): create a directory for potential secrets
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-10 16:40:05 +02:00
fc34091749
fix(system/sshd): handle firewall
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-10 15:16:47 +02:00
3e261ce668
fix(system/sshd): notify SELinux about the port change
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-10 15:02:17 +02:00
2c9fc903f4
feat(user/zsh): use kdialog instead of yad
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-07 17:46:23 +02:00
3c4950bcd0
feat(user/zsh): install eza and bat
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-07 17:45:54 +02:00
11b52ab87d
fix(user/vscode): install .desktop in correct location
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-07 17:44:42 +02:00
6701783d72
feat(user/kitty): add color schemes
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-07 17:44:00 +02:00
5a7214989b
feat(user/kitty): update configs
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-07 17:42:59 +02:00
7eac7d1cef
feat(user/vscode): update config
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-07 17:41:53 +02:00
933c3dae34
feat(user/zsh): install zoxide
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 21:59:11 +02:00
2d8f1f7f36
fix(user/bw): directories must be executable
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 21:58:39 +02:00
7d98bdbea2
fix(user/fonts): switch to rsync
Use rsync for uploading the fonts as it's much faster the builtin.copy

Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 21:58:10 +02:00
7d311ad5b3
fix(user/neovim): switch to kickstart
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 21:57:47 +02:00
1a481b7686
fix: improve SUSE detection
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 21:56:44 +02:00
73090a0db1
feat(user/ssh): install vssh script
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 13:21:55 +02:00
0f7de0b35a
feat(user/zsh): adjust aliases
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 13:18:39 +02:00
6028605f82
feat(user/zsh): fix autosuggest highlighting
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 13:18:05 +02:00
ab9d42c684
fix(user/zsh): yeet useless parts of PATH
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 13:17:03 +02:00
888a816c5f
fix: do not hardcode user in the config files
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 13:16:14 +02:00
49a034d6d7
feat(user/git): allow signing with SSH key
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-07-01 11:11:17 +02:00
f4f6169fa5
fix(user/tmpfiles): need ‹+x› over directories
It's a temporary »directory«, thus it needs an exec permission flag…

Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-06-04 14:25:00 +02:00
7c20e9c509
feat(user/tmpfiles): create role for user's tmpdir
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-06-03 21:59:43 +02:00
548fe9fa95
fix(user/ssh): update the config
- add sourcehut git
- add codeberg
- remove FIT BUT

Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-05-07 13:46:52 +02:00
219da943b9
fix(user/shell/zsh): update zshrc
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-05-07 13:46:15 +02:00
8f7968a020
fix(user/shell/zsh): update the starship config
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-05-07 13:45:20 +02:00
1ead7b5d0b
style(user/secrets/hcv): adjust debug comment
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-05-07 13:40:56 +02:00
1866b1e4c4
fix(user/secrets/bw): use environment variables
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-05-07 13:34:27 +02:00
01adcb99d4
feat(user/git): add syntax theme for delta
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-05-07 13:14:38 +02:00
dcc13e1558
fix(idiom): prefix variables with rule path
Signed-off-by: Matej Focko <me@mfocko.xyz>
2024-05-06 23:52:05 +02:00
c83836b900
feat(wg-admin): add playbooks for wg-admin clients
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-10-01 17:02:49 +02:00
5f99af32cf
feat(git): add git-delta
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-10-01 11:48:13 +02:00
d61dcf3c00
fix(vscode): use absolute path to the script
Needed when using `become: true`, otherwise it defaults to the root's
home directory.

Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-16 23:09:06 +02:00
272700e6e2
fix(system/el): use explicit EL9 Copr chroot
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-16 23:08:35 +02:00
47f0553dd4
feat(user/gpg): create a GPG role
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-16 23:08:02 +02:00
7505e307fb
feat: introduce GitLab login variable
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-16 23:07:20 +02:00
e5b555c577
fix(flatpak): install flatpak system-wide
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-16 23:06:50 +02:00
28710d9632
fix(terminals/alacritty): allow mf's Copr and install
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-15 18:22:55 +02:00
e4f00dc77c
fix(system/base): fix openSUSE upgrades
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-09 15:23:08 +02:00
3f09655707
feat(editors/helix): add support for Helix
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-09 15:19:45 +02:00
db826b8fdc
fix(terminals/kitty): add missing schemes and update config
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-09-06 14:34:43 +02:00
51a4b071e9
fix(secrets/hcv): remove invalid ‹creates›
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-09-06 13:31:40 +02:00
0e6dd1af63
fix(user/secrets/hcv): add tags and missing privilege escalation
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-06 13:10:48 +02:00
5d8334c7f5
fix: remove duplicate after reorg
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-09-06 11:45:56 +02:00
a1235a25b4
fix(user/secrets/hcv): include vssh script
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-09-06 11:42:26 +02:00
6f29e49597
feat(user/secrets/hcv): add HC Vault task
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-09-06 11:25:37 +02:00
27876a9d7e
fix: don't use deprecated modules
also don't believe everything that ansible says while it runs

Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-09-05 15:43:33 +02:00
221185076f
chore(user/ssh): add FIT and change ports on private
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-09-05 09:51:39 +02:00
89b2ac114e
fix(user/editors/vscode): update the config
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-02 17:18:17 +02:00
7e769b7906
fix(user/editors/vscode): tag as install
Signed-off-by: Matej Focko <mfocko@redhat.com>
2023-09-02 17:17:05 +02:00
0d359aa19f
fix: don't nest vars to improve UX
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-31 11:52:00 +02:00
eb6d77de65
roles(user/fonts): upload fonts
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-30 17:03:59 +02:00
657f0e30ea
roles(system/el): create a role for EL distros
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-30 15:42:27 +02:00
16d977227c
feat: make ansible tags more granular
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-30 15:42:27 +02:00
2d4cc595e8
roles(system/sshd): create SSH server config
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-30 15:42:27 +02:00
b4a1a63982
roles(system/podman): create podman configuration
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-30 15:42:27 +02:00
23d24dc342
roles(user/bw): create a Bitwarden CLI role
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-30 15:42:27 +02:00
01225fd44d
chore: rework directory structure
Signed-off-by: Matej Focko <me@mfocko.xyz>
2023-08-30 15:42:26 +02:00