From 145668c3dd67c5271eddcb62d1e7843487d768a7 Mon Sep 17 00:00:00 2001
From: Cullum Smith <cullum@sacredheartsc.com>
Date: Tue, 15 Oct 2024 23:35:53 -0400
Subject: huge amount of fixes

---
 vars/hostclass/cups_server                |  3 +++
 vars/hostclass/desktop                    | 45 +++++++++++++++++++++++++++++++
 vars/hostclass/invidious_server           |  3 +++
 vars/hostclass/laptop                     |  1 +
 vars/hostclass/nfs_server                 |  3 +++
 vars/hostclass/pkg_repository             |  2 +-
 vars/hostclass/radius_server              |  3 +++
 vars/hostclass/roadwarrior_laptop         |  4 ---
 vars/hostclass/roadwarrior_laptop/desktop |  1 +
 vars/hostclass/roadwarrior_laptop/vars    |  6 +++++
 vars/hostclass/unifi_controller           |  8 ++++++
 11 files changed, 74 insertions(+), 5 deletions(-)
 create mode 100644 vars/hostclass/cups_server
 create mode 100644 vars/hostclass/desktop
 create mode 100644 vars/hostclass/invidious_server
 create mode 120000 vars/hostclass/laptop
 create mode 100644 vars/hostclass/nfs_server
 create mode 100644 vars/hostclass/radius_server
 delete mode 100644 vars/hostclass/roadwarrior_laptop
 create mode 120000 vars/hostclass/roadwarrior_laptop/desktop
 create mode 100644 vars/hostclass/roadwarrior_laptop/vars
 create mode 100644 vars/hostclass/unifi_controller

(limited to 'vars/hostclass')

diff --git a/vars/hostclass/cups_server b/vars/hostclass/cups_server
new file mode 100644
index 0000000..9c2915a
--- /dev/null
+++ b/vars/hostclass/cups_server
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+allowed_tcp_ports="ssh http https ipp"
diff --git a/vars/hostclass/desktop b/vars/hostclass/desktop
new file mode 100644
index 0000000..fe6f4bc
--- /dev/null
+++ b/vars/hostclass/desktop
@@ -0,0 +1,45 @@
+#!/bin/sh
+
+desktop_common_packages="
+bind-tools
+chromium
+eclipse
+firefox
+git
+gnupg
+krb5
+libreoffice
+libva-intel-media-driver
+password-store
+py${python_version}-pip
+signal-desktop
+stow
+terminus-font
+terminus-ttf
+tmux
+tree
+wireguard-tools
+xorg"
+
+desktop_kde_packages='
+dino
+gajim
+juk
+k3b
+kde5
+kid3-qt6
+kmix
+konversation
+sddm'
+
+desktop_i3_packages='
+compton
+dunst
+dmenu
+i3
+i3lock
+i3status
+profanity
+xfontsel
+xidle
+xterm'
diff --git a/vars/hostclass/invidious_server b/vars/hostclass/invidious_server
new file mode 100644
index 0000000..5ae7588
--- /dev/null
+++ b/vars/hostclass/invidious_server
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+allowed_tcp_ports="ssh http https"
diff --git a/vars/hostclass/laptop b/vars/hostclass/laptop
new file mode 120000
index 0000000..8714ca2
--- /dev/null
+++ b/vars/hostclass/laptop
@@ -0,0 +1 @@
+desktop
\ No newline at end of file
diff --git a/vars/hostclass/nfs_server b/vars/hostclass/nfs_server
new file mode 100644
index 0000000..2957aec
--- /dev/null
+++ b/vars/hostclass/nfs_server
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+allowed_tcp_ports='ssh nfsd'
diff --git a/vars/hostclass/pkg_repository b/vars/hostclass/pkg_repository
index 4752685..e60a0c4 100644
--- a/vars/hostclass/pkg_repository
+++ b/vars/hostclass/pkg_repository
@@ -1,4 +1,4 @@
 #!/bin/sh
 
-allowed_tcp_ports='ssh http'
+allowed_tcp_ports='ssh http https'
 nginx_redirect=false
diff --git a/vars/hostclass/radius_server b/vars/hostclass/radius_server
new file mode 100644
index 0000000..1354ecd
--- /dev/null
+++ b/vars/hostclass/radius_server
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+allowed_udp_ports="radius"
diff --git a/vars/hostclass/roadwarrior_laptop b/vars/hostclass/roadwarrior_laptop
deleted file mode 100644
index 45bade8..0000000
--- a/vars/hostclass/roadwarrior_laptop
+++ /dev/null
@@ -1,4 +0,0 @@
-#!/bin/sh
-resolvers=$bootstrap_resolvers
-pf_skip_interfaces=wg
-see_other_uids=1
diff --git a/vars/hostclass/roadwarrior_laptop/desktop b/vars/hostclass/roadwarrior_laptop/desktop
new file mode 120000
index 0000000..2c7c348
--- /dev/null
+++ b/vars/hostclass/roadwarrior_laptop/desktop
@@ -0,0 +1 @@
+../desktop
\ No newline at end of file
diff --git a/vars/hostclass/roadwarrior_laptop/vars b/vars/hostclass/roadwarrior_laptop/vars
new file mode 100644
index 0000000..712d724
--- /dev/null
+++ b/vars/hostclass/roadwarrior_laptop/vars
@@ -0,0 +1,6 @@
+#!/bin/sh
+
+resolvers=$bootstrap_resolvers
+pf_skip_interfaces=wg
+see_other_uids=1
+enable_idm=false
diff --git a/vars/hostclass/unifi_controller b/vars/hostclass/unifi_controller
new file mode 100644
index 0000000..d937b0d
--- /dev/null
+++ b/vars/hostclass/unifi_controller
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+allowed_tcp_ports='ssh 6789 8080 8443 8843 8880'
+allowed_udp_ports='3478 10001'
+
+redirect_tcp_ports='
+https 8443
+http 8880'
-- 
cgit v1.2.3