qusal/salt/sys-pihole/configure-browser.sls
Ben Grande 9c280689d8
refactor: prefer systemd sockets over socat
- Document preferred method for socket use depending on use case;
- Fix Github web-flow key;
- Standardize naming of services;
- Use sys-ssh in ansible formula;
- Start services conditionally with Qubes Service and evaluated by
  systemd ConditionPathExists= instead of installing on a per qube basis
  with rc.local scripts;
- Change Qusal services to "qusal-" prefix instead of "qubes-" prefix.

Fixes: https://github.com/ben-grande/qusal/issues/80
Fixes: https://github.com/ben-grande/qusal/issues/79
2024-06-25 22:16:26 +02:00

39 lines
1.0 KiB
Plaintext

{#
SPDX-FileCopyrightText: 2022 - 2023 unman <unman@thirdeyesecurity.org>
SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
SPDX-License-Identifier: AGPL-3.0-or-later
#}
{% if grains['nodename'] != 'dom0' %}
"{{ slsdotpath }}-browser-rc.local":
file.managed:
- name: /rw/config/rc.local.d/50-sys-pihole.rc
- source: salt://{{ slsdotpath }}/files/browser/rc.local.d/50-sys-pihole.rc
- mode: '0755'
- user: root
- group: root
- makedirs: True
"{{ slsdotpath }}-browser-systemd-services":
file.recurse:
- name: /rw/config/systemd/
- source: salt://{{ slsdotpath }}/files/browser/systemd/
- dir_mode: '0755'
- file_mode: '0644'
- user: root
- group: root
- makedirs: True
"{{ slsdotpath }}-browser-desktop-application":
file.managed:
- name: /home/user/.local/share/applications/pihole-browser.desktop
- source: salt://{{ slsdotpath }}/files/browser/pihole-browser.desktop
- mode: '0644'
- user: user
- group: user
- makedirs: True
{% endif -%}