From 7731617ff5ffc64ebe8e52f0b945aa59ba88c7c4 Mon Sep 17 00:00:00 2001
From: Ricard Illa <ricard@trkkn.com>
Date: Tue, 10 Jan 2023 10:57:01 +0100
Subject: [PATCH] suricata ro mounts

---
 deploy.yml | 2 +-
 hosts.yml  | 5 ++---
 2 files changed, 3 insertions(+), 4 deletions(-)

diff --git a/deploy.yml b/deploy.yml
index a2ccb10..d6442f6 100644
--- a/deploy.yml
+++ b/deploy.yml
@@ -198,7 +198,7 @@
     # todo: use less hardcoding
     - name: make a more permanent lbu backup
       copy:
-        src: "{{ lbu_backupdir }}/{{ ansible_hostname }}.apkovl.tar.gz.aes-256-cbc"
+        src: "/media/mmcblk0p2/{{ ansible_hostname }}.apkovl.tar.gz.aes-256-cbc"
         dest: "/mnt/backups/lbu/{{ ansible_hostname }}.apkovl.tar.gz.aes-256-cbc.{{ ansible_date_time.iso8601 }}"
         remote_src: true
 
diff --git a/hosts.yml b/hosts.yml
index 6a78fe1..7b83a63 100644
--- a/hosts.yml
+++ b/hosts.yml
@@ -36,7 +36,6 @@ all:
 
       lbu_encrypt: true
       lbu_media: mmcblk0p2
-      lbu_backupdir: /media/mmcblk0p2
 
       apk_cache_dir: /media/mmcblk0p2/cache
 
@@ -60,7 +59,7 @@ all:
         - src: "/dev/mmcblk0p1"
           path: "/media/mmcblk0p1"
           fstype: "vfat"
-          opts: "noauto,defaults"
+          opts: "noauto,defaults,ro"
           passno: "0"
 
         - src: "/media/mmcblk0p1/boot"
@@ -72,7 +71,7 @@ all:
         - src: "/dev/mmcblk0p2"
           path: "/media/mmcblk0p2"
           fstype: "ext4"
-          opts: "defaults"
+          opts: "defaults,ro"
           passno: "0"
 
         - src: "/dev/mapper/disk0"