search

apatel762 / home-infra

A repository containing all of the setup for my home infra (e.g. my laptop & soon, my server)
GNU Affero General Public License v3.0
0 stars 0 forks source link

Automate installation of VPN secrets #81

Closed apatel762 closed 1 year ago

apatel762 commented 2 years ago

would give an opportunity to play around with SELinux a little

basically, the VPN secrets should be stored somewhere in this repo (encrypted by Ansible Vault)

we would then copy them over to the folder that they are supposed to be in (if not already there) and then re-label the folder

the ~/Documents/Secrets/VPN folder (and everything inside it) should be labelled as home_cert_t

the difficult bit would be to then see if I could integrate this with the NetworkManager applet somehow (so that I wouldn't have to go and manually setup the VPN connection after running the playbook)

apatel762 commented 2 years ago

the difficult bit would be to then see if I could integrate this with the NetworkManager applet somehow (so that I wouldn't have to go and manually setup the VPN connection after running the playbook)

since Silverblue is based on ostree you can actually diff the current /etc folder with the default (kind of like a git diff):

sudo ostree admin config-diff | grep NetworkManager

turns out, the NetworkManager system connections are all stored in files, so theoretically I could just copy the settings over and it should pick up the VPN settings just like that

apatel762 commented 1 year ago

not needed; i'm using app for VPN connections now