dotfiles/tasks/security.yml

42 lines
821 B
YAML
Raw Normal View History

- name: Install security-related packages
kewlfft.aur.aur:
2019-03-14 21:34:29 +00:00
name: "{{ item }}"
become: true
become_user: aur_builder
loop:
2021-12-20 19:16:51 +00:00
- bitwarden
- bitwarden-cli
- firejail
2021-04-19 12:01:30 +01:00
- mullvad-vpn-bin
2023-07-29 19:37:49 +01:00
- veracrypt
- wireguard-tools
2020-05-14 16:44:24 +01:00
- yubikey-personalization-gui
2019-03-14 21:34:29 +00:00
2020-04-04 21:19:05 +01:00
- name: Create .ssh directory
file:
state: directory
path: "{{ home }}/.ssh"
owner: "{{ user }}"
mode: 0700
2019-05-25 16:50:09 +01:00
- name: Install assh config
copy:
2019-03-14 21:34:29 +00:00
src: ./files/assh.yml
2019-05-25 00:21:47 +01:00
dest: "{{ home }}/.ssh/assh.yml"
mode: 0644
owner: "{{ user }}"
2021-02-23 18:23:47 +00:00
- name: Create private directory
file:
state: directory
recurse: true
path: "{{ home }}/Private"
owner: "{{ user }}"
mode: 0700
- name: Install faillock config
copy:
src: ./files/faillock.conf
dest: /etc/security/faillock.conf
mode: 0644