aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/run_onchange_after_deploy-firefox.sh.tmpl
diff options
context:
space:
mode:
authorLibravatar sommerfeld <sommerfeld@sommerfeld.dev>2026-06-19 17:57:23 +0100
committerLibravatar sommerfeld <sommerfeld@sommerfeld.dev>2026-06-19 17:57:23 +0100
commitcf5a2f46f0167c8495d28de5b1364c8bc460b6d0 (patch)
tree9c46279f71aab9757abef8af927a75b198690bf3 /run_onchange_after_deploy-firefox.sh.tmpl
parent259a3b989513f47f6cc5d36eaaf9e5fbef9b4d9a (diff)
downloaddotfiles-cf5a2f46f0167c8495d28de5b1364c8bc460b6d0.tar.gz
dotfiles-cf5a2f46f0167c8495d28de5b1364c8bc460b6d0.tar.bz2
dotfiles-cf5a2f46f0167c8495d28de5b1364c8bc460b6d0.zip
Migrate VM dotfiles to chezmoiHEADmaster
Move VM dotfile deployment out of Home Manager and into chezmoi with a machineRole guard. Add VM recipes for applying chezmoi state and restarting the Nix GnuPG agent. Make host-only hooks no-op on the VM and render container storage per role.
Diffstat (limited to 'run_onchange_after_deploy-firefox.sh.tmpl')
-rwxr-xr-xrun_onchange_after_deploy-firefox.sh.tmpl8
1 files changed, 8 insertions, 0 deletions
diff --git a/run_onchange_after_deploy-firefox.sh.tmpl b/run_onchange_after_deploy-firefox.sh.tmpl
index c9e49be..a9c3a1d 100755
--- a/run_onchange_after_deploy-firefox.sh.tmpl
+++ b/run_onchange_after_deploy-firefox.sh.tmpl
@@ -1,3 +1,5 @@
+{{- $machineRole := default "host" (index . "machineRole") -}}
+{{- if eq $machineRole "host" -}}
#!/usr/bin/env dash
# Deploy Firefox/LibreWolf hardening and custom CSS.
# chezmoi re-runs this script whenever any file under firefox/ or the nix
@@ -36,3 +38,9 @@ find firefox -type f | while IFS= read -r src; do
mkdir -p "$(dirname "$dest")"
cp --remove-destination "$src" "$dest"
done
+{{- else -}}
+#!/usr/bin/env dash
+# Firefox/LibreWolf hardening is host-only.
+set -eu
+exit 0
+{{- end }}