Housekeeping.

Better spec files for pihole, reader, and syncthing.

Proposals

@@ -0,0 +1,36 @@
+NordVPN
+protonVPN
+wireguard VPN ( not only Mullvad)
+
+Nextcloud server
+Split firefox
+Librewolf
+
+==================================
+dom0 theme,icon,font applied to all qubes:
+
+1) copy ~/.gtkrc-2.0 and ~/.config/gtk-3.0/settings.ini from dom0 to /etc/skel of all templates
+2) apply my DPI choice to /etc/X11/Xresources/x11-common Xft.dpi
+3) copy the respective theme, icon set and font from dom0 into all tempaltes
+4) shut down all qubes and templates
+5) make each qube "refresh" the files in their ~/ with the ones from /etc/skel
+
+... this takes a while and is not fully automated. I also haven't figured out yet how to programmatically adjust
++qubes that run a settings daemon. I only have one of those and just run gnome-tweaks
+==================================
+
+Signal messenger
+Syncthing
+NAS-syncing qube
+Android qube
+
+split-gpg
+
+QUBES OS Installer Options wishlist
+==================================
+Session - deb.oxen.io
+sublime-text
+
+AppIMage examples-
+Tutanota
+Session

pihole.spec

@@ -1,5 +1,5 @@
 Name:           3isec-qubes-pihole
-Version:  	    1.0
+Version:  	    1.1
 Release:        1%{?dist}
 Summary:        Creates Pi-hole server for Qubes
 
@@ -34,6 +34,11 @@ The default Admin Webpage login password is UpSNQsy4
 You should change this on first use, by running:
 `pihole -a -p`
 
+Removing this package will only remove the salt files from /srv/salt.
+It will NOT remove the sys-pihole qube.
+It will NOT change Qubes networking.
+You will have to make any changes as you wish.
+
 %install
 rm -rf %{buildroot}
 mkdir -p %{buildroot}/srv/salt
@@ -54,5 +59,8 @@ fi
 
 
 %changelog
+* Fri Sep 9 2022 unman <unman@thirdeyesecurity.org>
+- Include dom0-update,so full replacement for sys-firewall.
+
 * Fri Aug 5 2022 unman <unman@thirdeyesecurity.org>
 - First Build

reader.spec

@@ -0,0 +1,38 @@
+Name:           3isec-qubes-reader
+Version:        0.1
+Release:        1%{?dist}
+Summary:        Prepares useful software in Qubes
+
+License:        GPLv3+
+SOURCE0:        reader
+
+%description
+This package creates a minimal template configured with a range of useful software.
+The template is set as the default template and as template for the Debian disposable template.
+
+Removing this package does NOT revert these changes.
+It only removes the salt files.
+You must manually create another template and set it as the default using qubes-global-settings, and qubes-template-manager
+
+
+%install
+rm -rf %{buildroot}
+mkdir -p %{buildroot}/srv/salt
+cp -rv %{SOURCE0}/  %{buildroot}/srv/salt
+
+%files
+%defattr(-,root,root,-)
+/srv/salt/reader/*
+
+%post
+if [ $1 -eq 1 ]; then
+  qubesctl state.apply reader.clone
+  qubesctl --skip-dom0 --targets=template-reader state.apply reader.install
+fi
+
+%preun
+
+
+%changelog
+* Fri Sep 09 2022 unman <unman@thirdeyesecurity.org>
+- First Build

syncthing.spec

@@ -1,5 +1,5 @@
 Name:       3isec-qubes-syncthing
-Version:    0.1
+Version:    1.0
 Release:    1%{?dist}
 Summary:    Syncthing in Qubes
 
@@ -73,5 +73,9 @@ fi
 %postun
 
 %changelog
+* Fri Sep  9 2022 unman <unman@thirdeyesecurity.org>
+- Better handling of open ports
+- Clean up on package removal
+- Fix typos in repo definition
 * Mon Aug 29 2022 unman <unman@thirdeyesecurity.org>
 - First Build