ansible/arch_packages.yaml

@@ -229,6 +229,7 @@ common:
         url: https://www.kali.org/tools/binwalk/
       - name: aur/libtree
         desc: Inspect a binary and output of tree of system libraries
+
     fs:
       - lsof
       - name: ncdu
@@ -263,9 +264,6 @@ common:
     multimedia:
       audio:
         - opus-tools
-    communication:
-      - name: aur/sigtop-git
-        desc: Messages and attahcments backup program for Signal Desktop
 
   cli_frontends:
     forges:

ansible/workstation.yaml

@@ -311,17 +311,12 @@
         recurse: true
     - name: Setup long-term local secrets
       file:
-        path: "{{ home }}/.local/secrets"
-        state: directory
-        recurse: true
-    - name: Setup directory to contains local root CA
-      file:
-        path: "{{ home }}/.local/secrets/root_ca"
+        path: "{{ home }}/.hidden/local_secrets"
         state: directory
         recurse: true
     - name: Setup temporary secrets folder
       file:
-        path: "{{ home }}/.cache/secrets"
+        path: "{{ home }}/.cache/secrets/"
         state: directory
         recurse: true
     - name: Setup vaults dir gpg home

docs/directories.md

@@ -2,18 +2,16 @@
 
 Here are the path conventions we use to store files.
 
-- `~/workspace` - Store all code git clone being worked on
-- `~/.local/secrets` - Store general long-term clear secrets that are not protected by a password.
-- `~/.local/secrets/device` - Long-term secrets that are unique and specific to this device. (Eg. forge client token, LUKS key for external USB thumbdrive, Gotify client token)
-- `~/.local/secrets/root_ca` - Long-term local Root Certificate authorities private keys.
-- `~/.cache/secrets` - Cookie jar for temporary secrets (less that 1 month), can be regenerated quickly with a command.
-- `~/.vaults` - To store [Pass](https://www.passwordstore.org/) directories (a profile per directory). Secrets protected by encryption.
 - `~/junk` - Very temp files (experiments)
-- `~/triage` - Files to keep but to sort out later to others directories for long-term storage.
+- `~/triage` - Files to keep but to triage later to others directories for long-term storage
+- `~/workspace` - Store all code git clone being worked on
+- `~/.hidden/local_secrets` - Long-term secrets that are unique and specific to this device. (Eg. forge token, LUKS for external USB thumbdrive, gotify token)
+- `~/.cache/secrets` - Cookie jar for temporary secrets (less that 1 month), can be regenerated quickly with a command.
+- `~/.vaults` - To store [Pass](https://www.passwordstore.org/) directories (a profile per directory)
 - `~/medias` - Store long-term medias (like offline audio and videos)
 - `~/notebooks` - Store all monakhos notebooks
 - `~/quick` - Store transitive content and medias
     - `~/quick/notes`
     - `~/quick/screenshots`
-- `~/.apps` - Store manually installed linux apps and programs (AppImages or manually built binaries) (like a local /opt)
+- `~/.apps` - Store manually installed linux apps and programs (AppImages or manually built binaries)