mustard/ansible-playbooks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

/etc debugging

Browse source
This commit is contained in:
mustard 2025-02-28 00:02:40 +01:00
parent b9d10d2258
commit dd5110811e
1 changed files with 22 additions and 22 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
roles/qubes-f41-gnome/tasks/main.yaml
View file

@ -39,13 +39,13 @@
- name: Harden SSH, add kernel blacklist and hardening
ansible.builtin.copy:
src: '..{{ item }}'
dest: '{{ item }}'
src: '{{ item }}'
dest: '/{{ item }}'
mode: '0644'
loop:
- '/etc/ssh/ssh_config.d/10-custom.conf'
- '/etc/modprobe.d/workstation-blacklist.conf'
- '/etc/sysctl.d/99-workstation.conf'
- 'etc/ssh/ssh_config.d/10-custom.conf'
- 'etc/modprobe.d/workstation-blacklist.conf'
- 'etc/sysctl.d/99-workstation.conf'
- name: Reload sysctl
@ -69,34 +69,34 @@
- name: Copy dconf files + xdg-desktop-portals fix + Network manager
ansible.builtin.copy:
src: '..{{ item }}'
dest: '{{ item }}'
src: '{{ item }}'
dest: '/{{ item }}'
mode: '0644'
loop:
- '/etc/security/limits.d/30-disable-coredump.conf'
- '/etc/systemd/coredump.conf.d/disable.conf'
- '/etc/dconf/db/local.d/locks/automount-disable'
- '/etc/dconf/db/local.d/locks/privacy'
- '/etc/dconf/db/local.d/adw-gtk3-dark'
- '/etc/dconf/db/local.d/automount-disable'
- '/etc/dconf/db/local.d/prefer-dark'
- '/etc/dconf/db/local.d/privacy'
- '/etc/xdg-desktop-portal/portals.conf'
- '/etc/systemd/system/NetworkManager.service.d/99-brace.conf'
- 'etc/security/limits.d/30-disable-coredump.conf'
- 'etc/systemd/coredump.conf.d/disable.conf'
- 'etc/dconf/db/local.d/locks/automount-disable'
- 'etc/dconf/db/local.d/locks/privacy'
- 'etc/dconf/db/local.d/adw-gtk3-dark'
- 'etc/dconf/db/local.d/automount-disable'
- 'etc/dconf/db/local.d/prefer-dark'
- 'etc/dconf/db/local.d/privacy'
- 'etc/xdg-desktop-portal/portals.conf'
- 'etc/systemd/system/NetworkManager.service.d/99-brace.conf'
- name: Update dconf
shell: sudo dconf update
- name: Setup ZRAM, flatpak updater and environment variables to disable GJS, WebkitGTK JIT, and fix GNOME env variable
ansible.builtin.copy:
src: '..{{ item }}'
src: '{{ item }}'
dest: '{{ item }}'
mode: '0600'
loop:
- '/etc/systemd/zram-generator.conf'
- '/etc/systemd/user/update-user-flatpaks.service'
- '/etc/systemd/user/update-user-flatpaks.timer'
- '/etc/environment'
- 'etc/systemd/zram-generator.conf'
- 'etc/systemd/user/update-user-flatpaks.service'
- 'etc/systemd/user/update-user-flatpaks.timer'
- 'etc/environment'
- name: Upgrade all packages
ansible.builtin.dnf5: