97 Commits

Author SHA1 Message Date
Ben Grande
9772b2140d
fix: strict split-gpg2 service
Split-gpg V1 allowed for querying public keys, but as split-gpg2 is
running as an agent, public keys are not queried. Allowing connection to
the server to query only public parts of the key exposes the server more
than needed to the client.

All clients now have to hold the public key they need locally in order
to do GPG operations.
signed_tag_for_9772b214
2023-12-28 11:47:41 +01:00
Ben Grande
47f927f88a
fix: wrong source paths signed_tag_for_47f927f8 2023-12-27 23:45:06 +01:00
Ben Grande
ad01d374af
fix: update minimum Qubes version to 4.2 signed_tag_for_ad01d374 2023-12-27 20:13:33 +01:00
Ben Grande
7cb1d4b605
fix: update dotfiles module signed_tag_for_7cb1d4b6 2023-12-27 20:05:41 +01:00
Ben Grande
c6a0dcc8de
fix: modify package names to match Qubes 4.2 signed_tag_for_c6a0dcc8 2023-12-27 20:00:15 +01:00
Ben Grande
83f7584596
fix: regain pci script not managed signed_tag_for_83f75845 2023-12-27 19:58:01 +01:00
Ben Grande
c6bbf095e9
fix: port forwarder script with custom rc signed_tag_for_c6bbf095 2023-12-26 20:15:57 +01:00
Ben Grande
09f65ddcfe
fix: browser cli install tool switches to fetcher signed_tag_for_09f65ddc 2023-12-26 19:53:59 +01:00
Ben Grande
a622960296
refactor: pihole nft rules for Qubes 4.2 signed_tag_for_a6229602 2023-12-26 19:50:31 +01:00
Ben Grande
6eb63057ec
fix: pihole lighttpd link signed_tag_for_6eb63057 2023-12-24 21:23:29 +01:00
Ben Grande
7e93d5aa04
feat: clockvm also present in sys-pihole signed_tag_for_7e93d5aa 2023-12-23 21:05:24 +01:00
Ben Grande
a663616583
feat: move clockvm out of sys-net to sys-firewall signed_tag_for_a6636165 2023-12-21 23:38:39 +01:00
Ben Grande
f161fbf49f
fix: dom0 qrexec call target qube signed_tag_for_f161fbf4 2023-12-21 22:38:32 +01:00
Ben Grande
b6c5298cb9
refactor: git Qrexec helper with drop-in commands
Drop-in scripts can complement the remote-helper ability.
Basic trace of the communication of git with the helper.
signed_tag_for_b6c5298c
2023-12-21 15:38:16 +01:00
Ben Grande
f8e21e9ee2
fix: update dotfiles module signed_tag_for_f8e21e9e 2023-12-21 15:09:52 +01:00
Ben Grande
db3aaf71d0
fix: add missing appmenus sync signed_tag_for_db3aaf71 2023-12-21 00:10:03 +01:00
Ben Grande
ad04ab410f
fix: whonix top missing template update signed_tag_for_ad04ab41 2023-12-20 21:28:36 +01:00
Ben Grande
11ee1c75f0
fix: ssh top files missing list type matcher signed_tag_for_11ee1c75 2023-12-20 21:27:42 +01:00
Ben Grande
e10b3178b3
fix: remove repeated pkg in mutt signed_tag_for_e10b3178 2023-12-20 21:26:33 +01:00
Ben Grande
5669daa641
chore: inline dev install documentation signed_tag_for_5669daa6 2023-12-20 21:26:13 +01:00
Ben Grande
4b176a58c3
fix: sync reader appmenus signed_tag_for_4b176a58 2023-12-20 21:24:43 +01:00
Ben Grande
45c2ec6f70
feat: provide development environment for dom0 signed_tag_for_45c2ec6f 2023-12-20 17:17:05 +01:00
Ben Grande
ace759011e
fix: nft shebang and table names signed_tag_for_ace75901 2023-12-20 16:49:58 +01:00
Ben Grande
aeb009bc0a
fix: cacher client installation indentation signed_tag_for_aeb009bc 2023-12-20 16:47:35 +01:00
Ben Grande
5213c1d081
fix: better output for cacher tag assignment signed_tag_for_5213c1d0 2023-12-20 11:43:54 +01:00
Ben Grande
f72c51c877
refactor: reorder states to avoid race condition signed_tag_for_f72c51c8 2023-12-19 23:06:37 +01:00
Ben Grande
9d62d91835
refactor: move appended states to drop-in rc.local signed_tag_for_9d62d918 2023-12-19 22:50:59 +01:00
Ben Grande
186faf2fba
refactor: organize pihole directory structure signed_tag_for_186faf2f 2023-12-19 21:55:45 +01:00
Ben Grande
305df51eac
fix: skip client setup on cacher initialization
Installing sys-cacher does not require that all templates change.
signed_tag_for_305df51e
2023-12-19 21:12:07 +01:00
Ben Grande
e6a085efff
fix: qubes-update superseded by qubes-vm-update signed_tag_for_e6a085ef 2023-12-19 14:44:33 +01:00
Ben Grande
d34c127a39
fix: salt syntax with missing characters signed_tag_for_d34c127a 2023-12-19 13:02:04 +01:00
Ben Grande
88311cfb54
fix: whonix naming without abbreviations signed_tag_for_88311cfb 2023-12-19 13:00:57 +01:00
Ben Grande
46176c80b1
fix: template name must specify version signed_tag_for_46176c80 2023-12-19 12:59:52 +01:00
Ben Grande
9e371cdbff
feat: usb client signed_tag_for_9e371cdb 2023-12-18 15:31:27 +00:00
Ben Grande
c03f18385f
feat: fetcher signed_tag_for_c03f1838 2023-12-18 15:31:19 +00:00
Ben Grande
45dd1b712d
doc: top method must not skip dom0 signed_tag_for_45dd1b71 2023-12-18 15:25:55 +00:00
Ben Grande
98bbe57c7a
fix: udpate dotfiles module signed_tag_for_98bbe57c 2023-11-21 23:56:52 +00:00
Ben Grande
551eca2cf4
fix: stop modifying distribution package files
Avoids breaking package updates.
signed_tag_for_551eca2c
2023-11-21 23:55:16 +00:00
Ben Grande
5e53ed259f
fix: unstrusted input marking and sanitization signed_tag_for_5e53ed25 2023-11-21 14:57:47 +00:00
Ben Grande
6314658c23
fix: mode ansible linter to correct project signed_tag_for_6314658c 2023-11-20 19:25:52 +00:00
Ben Grande
fa5a025ce1
fix: update dotfiles module signed_tag_for_fa5a025c 2023-11-20 12:23:48 +00:00
Ben Grande
2803611f30
fix: add required package to sync clockvm time signed_tag_for_2803611f 2023-11-20 12:21:37 +00:00
Ben Grande
11da3acc90
fix: cacher shuting down on long running updates signed_tag_for_11da3acc 2023-11-14 07:13:54 +00:00
Ben Grande
26f243da94
chore: Fix unman copyright contact signed_tag_for_26f243da 2023-11-13 18:18:06 +00:00
Ben Grande
743d319e85
fix: issue template confused with comments signed_tag_for_743d319e 2023-11-13 17:58:20 +00:00
Ben Grande
b29ffd6fac
chore: fix github label name signed_tag_for_b29ffd6f 2023-11-13 14:39:34 +00:00
Ben Grande
f6ac229306
refactor: initial commit signed_tag_for_f6ac2293 2023-11-13 14:33:28 +00:00