qusal/salt/sys-net/install-proxy.sls
Ben Grande a564b3a703
feat: add TCP proxy for remote hosts
Ideally, it would be a Qrexec socket service, but it doesn't handle DNS,
only accepting IPs. The dev qube is now non-networked and network,
especially to remote git repositories can be acquired via the proxy that
is going to be installed in every netvm.
2024-06-13 18:01:08 +02:00

33 lines
696 B
Plaintext

{#
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
SPDX-License-Identifier: AGPL-3.0-or-later
#}
{% if grains['nodename'] != 'dom0' -%}
include:
- utils.tools.common.update
"{{ slsdotpath }}-proxy-installed":
pkg.installed:
- require:
- sls: utils.tools.common.update
- install_recommends: False
- skip_suggestions: True
- pkgs:
- socat
"{{ slsdotpath }}-proxy-rpc":
file.recurse:
- require:
- pkg: "{{ slsdotpath }}-proxy-installed"
- name: /etc/qubes-rpc/
- source: salt://{{ slsdotpath }}/files/server/rpc
- user: root
- group: root
- file_mode: '0755'
- dir_mode: '0755'
{% endif %}