mirror of
https://github.com/ben-grande/qusal.git
synced 2025-02-22 07:49:47 -05:00
a564b3a703
Ideally, it would be a Qrexec socket service, but it doesn't handle DNS, only accepting IPs. The dev qube is now non-networked and network, especially to remote git repositories can be acquired via the proxy that is going to be installed in every netvm.
38 lines
739 B
Plaintext
38 lines
739 B
Plaintext
{#
|
|
SPDX-FileCopyrightText: 2022 unman <unman@thirdeyesecurity.org>
|
|
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
|
|
|
|
SPDX-License-Identifier: AGPL-3.0-or-later
|
|
#}
|
|
|
|
{% if grains['nodename'] != 'dom0' -%}
|
|
|
|
include:
|
|
- utils.tools.common.update
|
|
- sys-net.install-proxy
|
|
|
|
{#
|
|
"{{ slsdotpath }}-qvpn-group":
|
|
group.present:
|
|
- name: qvpn
|
|
- system: True
|
|
#}
|
|
|
|
"{{ slsdotpath }}-installed":
|
|
pkg.installed:
|
|
- require:
|
|
- sls: utils.tools.common.update
|
|
- install_recommends: False
|
|
- skip_suggestions: True
|
|
- pkgs:
|
|
- qubes-core-agent-networking
|
|
- ca-certificates
|
|
- iproute2
|
|
- resolvconf
|
|
- wireguard
|
|
- unzip
|
|
- curl
|
|
- man-db
|
|
|
|
{% endif -%}
|