mirror of
https://github.com/ben-grande/qusal.git
synced 2024-10-01 02:35:49 -04:00
b52e4b1b63
Split-gpg V1 allowed for querying public keys, but as split-gpg2 is running as an agent, public keys are not queried. Allowing connection to the server to query only public parts of the key exposes the server more than needed to the client. All clients now have to hold the public key they need locally in order to do GPG operations.
76 lines
1.5 KiB
Plaintext
76 lines
1.5 KiB
Plaintext
{#
|
|
SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#}
|
|
|
|
{%- from "qvm/template.jinja" import load -%}
|
|
|
|
include:
|
|
- .clone
|
|
|
|
{% load_yaml as defaults -%}
|
|
name: dvm-{{ slsdotpath }}
|
|
force: True
|
|
require:
|
|
- sls: {{ slsdotpath }}.clone
|
|
present:
|
|
- template: tpl-{{ slsdotpath }}
|
|
- label: red
|
|
prefs:
|
|
- template: tpl-{{ slsdotpath }}
|
|
- label: red
|
|
- vcpus: 2
|
|
- memory: 400
|
|
- maxmem: 2000
|
|
- autostart: False
|
|
- template_for_dispvms: True
|
|
- include_in_backups: False
|
|
features:
|
|
- enable:
|
|
- appmenus-dispvm
|
|
- disable:
|
|
- service.cups
|
|
- service.cups-browsed
|
|
{%- endload %}
|
|
{{ load(defaults) }}
|
|
|
|
{% load_yaml as defaults -%}
|
|
name: {{ slsdotpath }}
|
|
force: True
|
|
require:
|
|
- sls: {{ slsdotpath }}.clone
|
|
present:
|
|
- template: tpl-{{ slsdotpath }}
|
|
- label: gray
|
|
prefs:
|
|
- template: tpl-{{ slsdotpath }}
|
|
- label: gray
|
|
- memory: 800
|
|
- maxmem: 8000
|
|
- vcpus: 4
|
|
- default_dispvm: dvm-{{ slsdotpath }}
|
|
features:
|
|
- enable:
|
|
- service.split-gpg2-client
|
|
- disable:
|
|
- service.cups
|
|
- service.cups-browsed
|
|
{%- endload %}
|
|
{{ load(defaults) }}
|
|
|
|
"{{ slsdotpath }}-extend-private-volume":
|
|
cmd.run:
|
|
- name: qvm-volume extend {{ slsdotpath }}:private 30Gi
|
|
- require:
|
|
- qvm: {{ slsdotpath }}
|
|
|
|
"dvm-{{ slsdotpath }}-extend-private-volume":
|
|
cmd.run:
|
|
- name: qvm-volume extend dvm-{{ slsdotpath }}:private 30Gi
|
|
- require:
|
|
- qvm: dvm-{{ slsdotpath }}
|
|
|
|
{% from 'utils/macros/policy.sls' import policy_set with context -%}
|
|
{{ policy_set(sls_path, '70') }}
|