15 Commits

Author SHA1 Message Date
Ben Grande
02ae9e2593
feat: remove audiovm setting when unnecessary
Decrease audio attack surface to qubes that will never need to use it.
2024-01-20 19:34:39 +01:00
Ben Grande
302460b458
fix: prefer qvm-features for uniformity 2024-01-09 18:48:29 +01:00
Ben Grande
fc37e1b05b
fix: make sys-pihole fully replace sys-firewall 2024-01-05 20:28:27 +01:00
Ben Grande
e8a21ef5a4
feat: allow sys-pihole to use pi-hole for queries 2024-01-05 17:45:04 +01:00
Ben Grande
6bf6da56fb
feat: passwordless pihole admin interface
- Passwordless as it doesn't compromise security;
- Firewall blocks access to the interface in case the pihole is exposed
  to the internet;
- setupVars.conf needs to be 644 for non root commands to the pihole
  script to work, so the WEB_PASSWORD can be read as normal user,
  restricting root on pihole does not make sense, as it can modify the
  network setting via pihole web interface.
2024-01-05 16:32:42 +01:00
Ben Grande
5d00c764bc
refactor: import armored gpg keys instead of db 2024-01-03 21:40:05 +01:00
Ben Grande
a622960296
refactor: pihole nft rules for Qubes 4.2 2023-12-26 19:50:31 +01:00
Ben Grande
6eb63057ec
fix: pihole lighttpd link 2023-12-24 21:23:29 +01:00
Ben Grande
7e93d5aa04
feat: clockvm also present in sys-pihole 2023-12-23 21:05:24 +01:00
Ben Grande
ace759011e
fix: nft shebang and table names 2023-12-20 16:49:58 +01:00
Ben Grande
f72c51c877
refactor: reorder states to avoid race condition 2023-12-19 23:06:37 +01:00
Ben Grande
9d62d91835
refactor: move appended states to drop-in rc.local 2023-12-19 22:50:59 +01:00
Ben Grande
186faf2fba
refactor: organize pihole directory structure 2023-12-19 21:55:45 +01:00
Ben Grande
26f243da94
chore: Fix unman copyright contact 2023-11-13 18:18:06 +00:00
Ben Grande
f6ac229306
refactor: initial commit 2023-11-13 14:33:28 +00:00