dotfiles/tasks/security.yml

- name: Install security-related packages
  kewlfft.aur.aur:
    name: "{{ item }}"
  become: true
  become_user: aur_builder
  loop:
    - bitwarden
    - bitwarden-cli
    - firejail
    - mullvad-vpn-bin
    - wireguard-tools
    - yubikey-personalization-gui

- name: Create .ssh directory
  file:
    state: directory
    path: "{{ home }}/.ssh"
    owner: "{{ user }}"
    mode: 0700

- name: Install assh config
  copy:
    src: ./files/assh.yml
    dest: "{{ home }}/.ssh/assh.yml"
    mode: 0644
    owner: "{{ user }}"

- name: Create private directory
  file:
    state: directory
    recurse: true
    path: "{{ home }}/Private"
    owner: "{{ user }}"
    mode: 0700

- name: Install faillock config
  copy:
    src: ./files/faillock.conf
    dest: /etc/security/faillock.conf
    mode: 0644
Update pyyaml to 1.21.0 Also standardize on quotes. Unfortunatley it doesn't quite work yet 2020-03-30 19:36:05 +01:00			`- name: Install security-related packages`
Switch to `kewlfft.aur` collection See https://github.com/kewlfft/ansible-aur/pull/58 for more info. Signed-off-by: Maxwell G <gotmax@e.email> 2021-11-07 00:45:19 +00:00			`kewlfft.aur.aur:`
Extract tasks into more atomic files 2019-03-14 21:34:29 +00:00			`name: "{{ item }}"`
			`become: true`
			`become_user: aur_builder`
Replace `with_items` for `loop` It's the new way, apparently 2019-12-09 21:09:00 +00:00			`loop:`
Install bitwarden-cli 2021-12-20 19:16:51 +00:00			`- bitwarden`
			`- bitwarden-cli`
Give in and install zoom But use it through firejail. Doesn't have cam support yet, but I can fix that later 2020-06-12 10:19:03 +01:00			`- firejail`
Install mullvad VPN client 2021-04-19 12:01:30 +01:00			`- mullvad-vpn-bin`
Remove yet more unnecessary quotes around values Fixed in https://github.com/adrienverge/yamllint/issues/242 2020-04-15 08:50:11 +01:00			`- wireguard-tools`
Install yubikey personalization tool 2020-05-14 16:44:24 +01:00			`- yubikey-personalization-gui`
Extract tasks into more atomic files 2019-03-14 21:34:29 +00:00
Restrict (and create) .ssh directory 2020-04-04 21:19:05 +01:00			`- name: Create .ssh directory`
			`file:`
			`state: directory`
			`path: "{{ home }}/.ssh"`
			`owner: "{{ user }}"`
			`mode: 0700`

Add names to tasks 2019-05-25 16:50:09 +01:00			`- name: Install assh config`
			`copy:`
Extract tasks into more atomic files 2019-03-14 21:34:29 +00:00			`src: ./files/assh.yml`
Install opensnitch 2019-05-25 00:21:47 +01:00			`dest: "{{ home }}/.ssh/assh.yml"`
			`mode: 0644`
			`owner: "{{ user }}"`
Install keepassxc in correct file 2021-02-23 18:23:47 +00:00
			`- name: Create private directory`
			`file:`
			`state: directory`
			`recurse: true`
			`path: "{{ home }}/Private"`
			`owner: "{{ user }}"`
			`mode: 0700`
Lock user for 10 minutes after 10 attempts 2023-08-12 19:47:23 +01:00
			`- name: Install faillock config`
			`copy:`
			`src: ./files/faillock.conf`
			`dest: /etc/security/faillock.conf`
			`mode: 0644`