qusal/salt/sys-cacher/install.sls
Ben Grande 9c280689d8
refactor: prefer systemd sockets over socat
- Document preferred method for socket use depending on use case;
- Fix Github web-flow key;
- Standardize naming of services;
- Use sys-ssh in ansible formula;
- Start services conditionally with Qubes Service and evaluated by
  systemd ConditionPathExists= instead of installing on a per qube basis
  with rc.local scripts;
- Change Qusal services to "qusal-" prefix instead of "qubes-" prefix.

Fixes: https://github.com/ben-grande/qusal/issues/80
Fixes: https://github.com/ben-grande/qusal/issues/79
2024-06-25 22:16:26 +02:00

107 lines
2.8 KiB
Plaintext

{#
SPDX-FileCopyrightText: 2023 - 2024 Benjamin Grande M. S. <ben.grande.b@gmail.com>
SPDX-License-Identifier: AGPL-3.0-or-later
#}
{% if grains['nodename'] != 'dom0' -%}
include:
- utils.tools.common.update
"{{ slsdotpath }}-allow-testing-repository":
file.uncomment:
- name: /etc/apt/sources.list.d/qubes-r4.list
- regex: ^deb\s.*qubes-os.org.*-testing
- backup: False
"{{ slsdotpath }}-installed":
pkg.installed:
- require:
- sls: utils.tools.common.update
- install_recommends: False
- skip_suggestions: True
- pkgs:
- qubes-core-agent-networking
- qubes-app-shutdown-idle
- ca-certificates
- anacron
- apt-cacher-ng
"{{ slsdotpath }}-unmask-apt-cacher-ng":
service.unmasked:
- name: apt-cacher-ng
- runtime: False
"{{ slsdotpath }}-enable-apt-cacher-ng":
service.enabled:
- name: apt-cacher-ng
"{{ slsdotpath }}-create-qubes-cacher-config-dir":
file.directory:
- name: /etc/qusal-apt-cacher-ng
- mode: '0755'
"{{ slsdotpath }}-copy-package-config-to-qubes-cacher-config":
cmd.run:
- name: cp -rp /etc/apt-cacher-ng/* /etc/qusal-apt-cacher-ng
"{{ slsdotpath }}-systemd-service":
file.managed:
- name: /usr/lib/systemd/system/apt-cacher-ng.service.d/50_qusal.conf
- source: salt://{{ slsdotpath }}/files/server/systemd/apt-cacher-ng.service.d/50_qusal.conf
- user: root
- group: root
- mode: '0644'
- makedirs: True
"{{ slsdotpath }}-update-deb_mirrors.gz":
cmd.run:
- name: cp /usr/lib/apt-cacher-ng/deb_mirrors.gz /etc/qusal-apt-cacher-ng/deb_mirrors.gz
- runas: root
"{{ slsdotpath }}-update-conf":
file.recurse:
- name: /etc/qusal-apt-cacher-ng/
- source: salt://{{ slsdotpath }}/files/server/conf/
- file_mode: "0644"
- group: root
- user: root
"{{ slsdotpath }}-lib-qubes-bind-dirs":
file.managed:
- name: /usr/lib/qubes-bind-dirs.d/50-sys-cacher.conf
- source: salt://{{ slsdotpath }}/files/server/lib-qubes-bind-dirs.d/50-sys-cacher.conf
- mode: '0644'
- user: root
- group: root
"{{ slsdotpath }}-desktop-application-browser":
file.managed:
- name: /usr/share/applications/cacher-browser.desktop
- source: salt://{{ slsdotpath }}/files/server/cacher-browser.desktop
- mode: '0644'
- user: root
- group: root
- makedirs: True
"{{ slsdotpath }}-desktop-application-open-general":
file.managed:
- name: /usr/share/applications/cacher-browser-general.desktop
- source: salt://{{ slsdotpath }}/files/server/cacher-browser-general.desktop
- mode: '0644'
- user: root
- group: root
- makedirs: True
"{{ slsdotpath }}-etc-mimeapps.list":
file.managed:
- name: /etc/xdg/mimeapps.list
- source: salt://{{ slsdotpath }}/files/server/mimeapps.list
- mode: '0644'
- user: root
- group: root
- makedirs: True
{% endif -%}