Sign commits true

Jenkinsfile

@@ -0,0 +1,11 @@
+pipeline {
+    agent any
+
+    stages {
+        stage('lint') {
+            steps {
+            	sh 'ansible-lint dotfiles.yml'
+            }
+        }
+    }
+}

group_vars/all.yaml

@@ -1,6 +1,3 @@
 home: '{{ "~" | expanduser }}'
 dotfiles_dir: '{{home}}/src/dotfiles'
 files_dir: '{{dotfiles_dir}}/roles/dotfiles/files'
-git_mail: 'mail@johannes-rothe.de'
-git_name: 'Johannes Rothe'
-diff_tool: 'vimdiff'

roles/dotfiles/files/fish/config.fish

@@ -7,4 +7,4 @@ if status --is-login
   end
 end
 
-eval (keychain --eval --agents ssh --agents gpg 82CD152AAAE9CAF77EACB29E73F092605AF3286C)
+eval (keychain --eval --agents ssh,gpg 82CD152AAAE9CAF77EACB29E73F092605AF3286C)

roles/dotfiles/files/gitconfig

@@ -8,3 +8,5 @@
 	st = status
 	co = checkout
 	br = branch
+[commit]
+	gpgsign = true

roles/dotfiles/files/gpg-agent.conf

@@ -1,2 +1 @@
 default-cache-ttl 10800
-maximum-cache-ttl 10800

roles/dotfiles/tasks/main.yml

@@ -37,12 +37,14 @@
   file:
     path: '{{ home }}/tmp/dotfiles_backup'
     state: directory
+    mode: 0700
 
 - name: Backup stuff
   copy:
     src: '{{ item }}'
     dest: '{{ home }}/tmp/dotfiles_backup'
     remote_src: True  # copy the folder from the host instead of ansible
+    mode: 0600
   ignore_errors: yes
   loop:
     # dirs (without trailing '/' copies the whole dir)
@@ -61,6 +63,7 @@
   file:
     path: '{{ item }}'
     state: directory
+    mode: 0700
   loop:
     - '{{ home }}/.config/i3/'
     - '{{ home }}/.config/i3status/'