157 Commits

Author SHA1 Message Date
Ben Grande
16a4b06e45
doc: inform how to reduce bitcoind memory usage signed_tag_for_16a4b06e 2024-02-22 21:59:43 +01:00
Ben Grande
d7d9c29593
fix: remove hardcoded fedora versions from cacher signed_tag_for_d7d9c295 2024-02-22 21:58:14 +01:00
Ben Grande
1e26989322
fix: allow apt-cacher-ng cronjob to run signed_tag_for_1e269893 2024-02-22 21:57:51 +01:00
Ben Grande
230a133033
fix: update apt-cacher-ng mirror list signed_tag_for_230a1330 2024-02-22 21:57:26 +01:00
Ben Grande
5546d8032c
doc: remove outdated ssh agent server instructions signed_tag_for_5546d803 2024-02-20 00:31:43 +01:00
Ben Grande
3e20674adb
feat: add OpenTofu signed_tag_for_3e20674a 2024-02-19 23:36:54 +01:00
Ben Grande
1843237936
fix: update dotfiles module signed_tag_for_18432379 2024-02-18 21:26:06 +01:00
Ben Grande
55f375defc
fix: update dotfiles module signed_tag_for_55f375de 2024-02-18 17:09:05 +01:00
Ben Grande
8c1804580b
fix: less menu items for bitcoin qubes signed_tag_for_8c180458 2024-02-18 17:08:30 +01:00
Ben Grande
f1eec65e67
fix: better electrum GUI resolution and tabs signed_tag_for_f1eec65e 2024-02-18 17:08:09 +01:00
Ben Grande
6ccfe194ee
fix: electrum install zbar and protobuf signed_tag_for_6ccfe194 2024-02-18 17:05:30 +01:00
Ben Grande
be13c50807
fix: add missing dependency for qvm-connect-tcp
The target of qubes.ConnectTCP has 'socat' because it is a dependency of
qubes-core-agent-networking. In case the target has not networking
packages, this needs to be taken care by the formula that creates the
target, not from the client itself.
signed_tag_for_be13c508
2024-02-17 12:03:45 +01:00
Ben Grande
4a0768c499
ci: update actions release signed_tag_for_4a0768c4 2024-02-17 00:13:41 +01:00
Ben Grande
b8e2f88203
feat: Bitcoin Core and Electrum servers and wallet signed_tag_for_b8e2f882 2024-02-17 00:07:33 +01:00
Ben Grande
0c32b6a317
feat: update template to fedora-39 signed_tag_for_0c32b6a3 2024-02-16 23:31:57 +01:00
Ben Grande
f9af24edb6
refactor: distinct whonix formulas
Separating the Gateway and the Workstation formula makes it easier to
use the clone-template macro as well as only run the necessary states.
signed_tag_for_f9af24ed
2024-02-08 23:58:59 +01:00
Ben Grande
3c2cc674ef
fix: update dotfiles module signed_tag_for_3c2cc674 2024-02-04 19:51:11 +01:00
Ben Grande
3d3bcf03e2
fix: create directories when necessary signed_tag_for_3d3bcf03 2024-02-04 19:48:12 +01:00
Ben Grande
e5c8fb2a11
fix: vm kernel only applies to developers
Fixes: https://github.com/ben-grande/qusal/issues/3
signed_tag_for_e5c8fb2a
2024-02-03 20:58:28 +01:00
Ben Grande
dc54635350
fix: whonix template with high memory and backup signed_tag_for_dc546353 2024-02-02 10:28:19 +01:00
Ben Grande
9ee9b048e3
fix: move custom kicksecure settings to dev state
Fixes: https://github.com/ben-grande/qusal/issues/12
Fixes: https://github.com/ben-grande/qusal/issues/14
Fixes: https://github.com/ben-grande/qusal/issues/15
signed_tag_for_9ee9b048
2024-02-02 10:05:46 +01:00
Ben Grande
4b87d937df
fix: less intrusive kicksecure default install
- Do not remove sources.list;
- Move broken packages to separate state;
- Rename to developers state and explain it breaks boot;
- Remove settings that are already the default;
- Remove configuration that is deprecated and
- Remove deprecated packages;

Fixes: https://github.com/ben-grande/qusal/issues/4
Fixes: https://github.com/ben-grande/qusal/issues/5
Fixes: https://github.com/ben-grande/qusal/issues/6
Fixes: https://github.com/ben-grande/qusal/issues/7
Fixes: https://github.com/ben-grande/qusal/issues/9
Fixes: https://github.com/ben-grande/qusal/issues/11
Fixes: https://github.com/ben-grande/qusal/issues/13
signed_tag_for_4b87d937
2024-02-01 17:40:26 +01:00
Ben Grande
e35c9fbf4b
feat: electrum bitcoin wallet signed_tag_for_e35c9fbf 2024-01-31 16:53:04 +01:00
Ben Grande
4b8abdedfa
fix: do not include mirage firewall in backup signed_tag_for_4b8abded 2024-01-31 15:50:35 +01:00
Ben Grande
c6179b9348
feat: install available sequoia-pgp tools signed_tag_for_c6179b93 2024-01-31 14:51:17 +01:00
Ben Grande
9de8b2b335
fix: thunar requires xfce helpers to find terminal signed_tag_for_9de8b2b3 2024-01-31 14:42:17 +01:00
Ben Grande
41c48d96e7
feat: add torrent client to fetcher signed_tag_for_41c48d96 2024-01-30 19:32:05 +01:00
Ben Grande
50fa78263a
chore: copyright update signed_tag_for_50fa7826 2024-01-29 16:49:54 +01:00
Ben Grande
2d0460cb07
chore: move port forward to dom0 formula
The script can be used with sys-cacher, sys-pihole, sys-syncthing,
sys-ssh and many services you'd want to forward, make it reusable.
signed_tag_for_2d0460cb
2024-01-29 12:11:51 +01:00
Ben Grande
b22dd08bd1
fix: port forward validate values from DomUs signed_tag_for_b22dd08b 2024-01-29 12:06:33 +01:00
Ben Grande
8606e24018
doc: typo in mirage firewall usage signed_tag_for_8606e240 2024-01-28 23:28:00 +01:00
Ben Grande
faa22b2821
fix: fail early when qubes.VMShell is unsupported
Happens with Mirage Unikernel, as it doesn't have a proper shell.

Fixes: https://github.com/ben-grande/qusal/issues/1
signed_tag_for_faa22b28
2024-01-28 23:25:03 +01:00
Ben Grande
ccee2094c2
ci: lint pull request signed_tag_for_ccee2094 2024-01-28 23:13:24 +01:00
Ben Grande
6bfb3756c3
fix: port forwarder missing short options usage signed_tag_for_6bfb3756 2024-01-27 17:05:56 +01:00
Ben Grande
c6dbccfe24
fix: mail qrexec policy missing disp in name signed_tag_for_c6dbccfe 2024-01-27 11:38:28 +01:00
Ben Grande
ca2e150a31
feat: add qubes img and pdf converter media qubes signed_tag_for_ca2e150a 2024-01-26 22:49:18 +01:00
Ben Grande
1886600015
feat: initial split-mail setup
Split-mail allows to separate the receving, reading/composing and
sending of mails to separate qubes, while having the reading/composing
qube offline and a manual step necessary to authorize mails to be sent
form the sender qube.
signed_tag_for_18866000
2024-01-26 22:46:36 +01:00
Ben Grande
6028a2d8e3
fix: add file browser to reader
We are already trusting many applications to display files, adding a
file browser is a huge usability improvement in this case.
signed_tag_for_6028a2d8
2024-01-23 13:27:15 +01:00
Ben Grande
2fabf8a6ec
doc: project signature verification in dom0 signed_tag_for_2fabf8a6 2024-01-22 18:49:17 +01:00
Ben Grande
5afa96ea51
fix: cleanup audio home directory signed_tag_for_5afa96ea 2024-01-22 18:42:54 +01:00
Ben Grande
78af3900d0
doc: separate documents per use case
The main README is very large, by placing the documents in a separate
directory, we allow the user to choose explicitly what they read, giving
a better reading experience and allows a deeper understanding of the
project.
signed_tag_for_78af3900
2024-01-22 18:38:04 +01:00
Ben Grande
b657206f15
fix: add whonix dvm signed_tag_for_b657206f 2024-01-22 10:56:31 +01:00
Ben Grande
6adc6caef9
fix: update dotfiles module signed_tag_for_6adc6cae 2024-01-21 23:40:55 +01:00
Ben Grande
0e99d51d12
feat: whonix setup independent from OEM
Depending on OEM will conflict the state IDs because they are the name
of the qubes being created. As not much changes are needed and we
customize much more, stop depending on upstream.
signed_tag_for_0e99d51d
2024-01-21 23:04:41 +01:00
Ben Grande
f5362587f1
fix: client install the ssh-agent client packages
The client should install the agent client packages and not the
opposite. The way it was, it would not be possible to include the agent
client packages to the ssh client, as it would create a recursive loop.
signed_tag_for_f5362587
2024-01-21 22:04:34 +01:00
Ben Grande
c0b6c4cf20
fix: invert builder memory and vcpus signed_tag_for_c0b6c4cf 2024-01-20 19:51:45 +01:00
Ben Grande
02ae9e2593
feat: remove audiovm setting when unnecessary
Decrease audio attack surface to qubes that will never need to use it.
signed_tag_for_02ae9e25
2024-01-20 19:34:39 +01:00
Ben Grande
78333dd92a
doc: bluetooth system tray signed_tag_for_78333dd9 2024-01-19 12:16:34 +01:00
Ben Grande
2e5127649a
feat: seamless audio integration with bluetooth signed_tag_for_2e512764 2024-01-19 11:18:37 +01:00
Ben Grande
76b2dbb58f
feat: pavucontrol in sys-audio
The mixer provided by the program volumeicon is okay, it shows only one
input and one output. Pavucontrol correctly detects the different inputs
and output of each audio client, you can have deeper control of the
client volume.
signed_tag_for_76b2dbb5
2024-01-19 10:14:22 +01:00