dotfiles/tasks/security.yml
Jake Howard 79395ac589
Remove a bunch of old config to make way for KDE
Some of it might need restoring, but will work that out once I know what KDE doesn't do itself.
2023-09-23 15:18:49 +01:00

40 lines
805 B
YAML

- name: Install security-related packages
kewlfft.aur.aur:
name: "{{ item }}"
become: true
become_user: aur_builder
loop:
- bitwarden
- bitwarden-cli
- firejail
- mullvad-vpn-bin
- wireguard-tools
- yubikey-personalization-gui
- name: Create .ssh directory
file:
state: directory
path: "{{ home }}/.ssh"
owner: "{{ user }}"
mode: 0700
- name: Install assh config
copy:
src: ./files/assh.yml
dest: "{{ home }}/.ssh/assh.yml"
mode: 0644
owner: "{{ user }}"
- name: Create private directory
file:
state: directory
recurse: true
path: "{{ home }}/Private"
owner: "{{ user }}"
mode: 0700
- name: Install faillock config
copy:
src: ./files/faillock.conf
dest: /etc/security/faillock.conf
mode: 0644