Install opensnitch

files/opensnitch.json

@@ -0,0 +1,5 @@
+{
+	"default_timeout": 60,
+	"default_action": "allow",
+	"default_duration": "until restart"
+}

tasks/autostart.yml

@@ -35,3 +35,4 @@
   with_items:
     - 'flameshot'
     - 'libinput-gestures'
+    - 'opensnitch_ui'

tasks/packages.yml

@@ -3,6 +3,7 @@
       - '1EDDE2CDFC025D17F6DA9EC0ADAE6AD28A8F901A'  # Sublime Text
       - 'EF6E286DDA85EA2A4BA7DE684E2C6E8793298290'  # Tor Browser
       - '9D5F1C051D146843CDA4858BDE64825E7CBC0D51'  # ArchStrike
+      - '748231EBCBD808A14F5E85D28C004C2F93481F6B'  # Opensnitch
 
 - name: "Get installed pacman keys"
   shell: "pacman-key --list-keys"

tasks/security.yml

@@ -9,9 +9,16 @@
     - 'qomui'
     - 'wireguard-arch'
     - 'wireguard-tools'
+    - 'opensnitch-git'
 
 - copy:
     src: ./files/assh.yml
-    dest: "{{ home}}/.ssh/assh.yml"
+    dest: "{{ home }}/.ssh/assh.yml"
+    mode: 0644
+    owner: "{{ user }}"
+
+- copy:
+    src: ./files/opensnitch.json
+    dest: "{{ home }}/.opensnitch/ui-config.json"
     mode: 0644
     owner: "{{ user }}"