5 Commits

Author	SHA1	Message	Date
Ben Grande	9c280689d8	refactor: prefer systemd sockets over socat ... - Document preferred method for socket use depending on use case; - Fix Github web-flow key; - Standardize naming of services; - Use sys-ssh in ansible formula; - Start services conditionally with Qubes Service and evaluated by systemd ConditionPathExists= instead of installing on a per qube basis with rc.local scripts; - Change Qusal services to "qusal-" prefix instead of "qubes-" prefix. Fixes: https://github.com/ben-grande/qusal/issues/80 Fixes: https://github.com/ben-grande/qusal/issues/79	2024-06-25 22:16:26 +02:00
Ben Grande	6efcc1da77	chore: copyright update	2024-01-29 16:49:54 +01:00
Ben Grande	422b01e0f6	feat: remove audiovm setting when unnecessary ... Decrease audio attack surface to qubes that will never need to use it.	2024-01-20 19:34:39 +01:00
Ben Grande	b52e4b1b63	fix: strict split-gpg2 service ... Split-gpg V1 allowed for querying public keys, but as split-gpg2 is running as an agent, public keys are not queried. Allowing connection to the server to query only public parts of the key exposes the server more than needed to the client. All clients now have to hold the public key they need locally in order to do GPG operations.	2023-12-28 11:47:41 +01:00
Ben Grande	5eebd789ed	refactor: initial commit	2023-11-13 14:33:28 +00:00