Add support for proxy networks & cleanup playbook vars

playbooks/1password.yaml

@@ -1,4 +1,6 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - 1password

playbooks/Linux.yaml

@@ -2,10 +2,8 @@
 - import_playbook: LinuxCLI.yaml
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
-  vars:
+  vars_files:
-    github_auth_headers: >-
+    - vars/environment.yaml
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
   roles:
     - role: firefox
     - role: kitty

playbooks/LinuxCLI.yaml

@@ -1,14 +1,14 @@
 ---
 - hosts: localhost
-  vars:
+  vars_files:
-    github_auth_headers: >-
+    - vars/environment.yaml
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
   roles:
     - role: rpmfusion
       when: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: gdb
     - role: podman

playbooks/UnixCLI.yaml

@@ -1,9 +1,7 @@
 ---
 - hosts: localhost
-  vars:
+  vars_files:
-    github_auth_headers: >-
+    - vars/environment.yaml
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
   roles:
     - role: sudo
       when: ansible_user_id != "root"

playbooks/UnixGUI.yaml

@@ -1,9 +1,7 @@
 ---
 - hosts: localhost
-  vars:
+  vars_files:
-    github_auth_headers: >-
+    - vars/environment.yaml
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
   roles:
     - role: flatpak
       when: ansible_os_family != "Darwin"

playbooks/WSL.yaml

@@ -1,9 +1,7 @@
 ---
 - import_playbook: LinuxCLI.yaml
 - hosts: localhost
-  vars:
+  vars_files:
-    github_auth_headers: >-
+    - vars/environment.yaml
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
   roles:
     - role: wsl

playbooks/Windows.yaml

@@ -1,9 +1,7 @@
 ---
 - hosts: windows
-  vars:
+  vars_files:
-    github_auth_headers: >-
+    - vars/environment.yaml
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
   roles:
     - role: python
     - role: git

playbooks/macOS.yaml

@@ -1,14 +1,14 @@
 ---
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: system-info
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
-  vars:
+  vars_files:
-    github_auth_headers: >-
+    - vars/environment.yaml
-      {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-          if lookup('env', 'GITHUB_TOKEN') else {} }}
   roles:
     - role: mas
 

playbooks/vars/environment.yaml

@@ -0,0 +1,15 @@
+---
+# GitHub may rate limit unauthenticated API requests, this is more likely when
+# behind a network proxy. Set the GITHUB_TOKEN environment variable to
+# authenticate any GitHub API requests executed while playing roles.
+github_auth_headers: >-
+  {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
+      if lookup('env', 'GITHUB_TOKEN') else {} }}
+
+# When working behind a network proxy, set the http_proxy and https_proxy
+# environment variables. These will be passed through to uses of the `get_url`
+# module when playing roles.
+proxy_environment: >-
+  {{ { 'http_proxy': lookup('env', 'http_proxy'),
+       'https_proxy': lookup('env', 'https_proxy') }
+      if lookup('env', 'http_proxy') and lookup('env', 'https_proxy') else {} }}

roles/1password/tasks/Debian.yaml

@@ -16,6 +16,7 @@
   get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: set compatible architecture
   when: ansible_machine == 'x86_64'

roles/1password/tasks/Windows.yaml

@@ -16,6 +16,7 @@
   win_get_url:
     url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
     dest: '{{installer_exe}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer
   when: not app_stat.stat.exists
@@ -68,6 +69,7 @@
   win_get_url:
     url: '{{latest.downloads.Windows.amd64}}'
     dest: '{{cli_zip}}'
+  environment: '{{proxy_environment}}'
 
 - name: unzip op zip archive
   when: cli_installed_version is not defined or cli_installed_version != latest.version

roles/bat/tasks/deb.yaml

@@ -51,6 +51,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{bat_deb}}'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: installed_version is not defined or installed_version != latest_version

roles/firefox/tasks/Ubuntu.yaml

@@ -17,6 +17,7 @@
   get_url:
     url: https://packages.mozilla.org/apt/repo-signing-key.gpg
     dest: /etc/apt/keyrings/packages.mozilla.org.asc
+  environment: '{{proxy_environment}}'
 
 - name: add mozilla apt repo
   become: true

roles/fonts/tasks/Linux.yaml

@@ -37,6 +37,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+  environment: '{{proxy_environment}}'
 
 - name: install Caskaydia Cove Nerd Font
   when: needs_installed

roles/gh/tasks/Debian.yaml

@@ -15,6 +15,7 @@
     url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
     dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
     mode: 0644
+  environment: '{{proxy_environment}}'
 
 - name: add apt repository list
   become: true

roles/gh/tasks/RedHat.yaml

@@ -4,6 +4,7 @@
   get_url:
     url: https://cli.github.com/packages/rpm/gh-cli.repo
     dest: /etc/yum.repos.d/gh-cli.repo
+  environment: '{{proxy_environment}}'
 
 - name: install dnf package
   become: true

roles/git/tasks/Windows-installer.yaml

@@ -19,6 +19,7 @@
   win_get_url:
     url: '{{git_asset.browser_download_url}}'
     dest: '{{git_installer_path}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer command
   win_command:

roles/gitea/tasks/Linux.yaml

@@ -40,6 +40,7 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{tea_package_exe}}'
     mode: '0755'
+  environment: '{{proxy_environment}}'
 
 - name: install package
   when: install_required

roles/glab/tasks/Debian.yaml

@@ -48,6 +48,7 @@
   get_url:
     url: '{{asset.url}}'
     dest: '{{tempdir.path}}/glab.deb'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: glab_version is not defined or glab_version != latest_version

roles/jp/tasks/Darwin.yaml

@@ -40,3 +40,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{jp_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/jp/tasks/RedHat.yaml

@@ -50,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/jp'
     mode: '0755'
+  environment: '{{proxy_environment}}'

roles/llvm/tasks/Ubuntu.yaml

@@ -57,6 +57,7 @@
   get_url:
     url: https://apt.llvm.org/llvm-snapshot.gpg.key
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: add upstream deb repository
   become: true

roles/neovim/tasks/Debian.yaml

@@ -79,6 +79,7 @@
   get_url:
     url: '{{asset[0].browser_download_url}}'
     dest: '{{package_path}}'
+  environment: '{{proxy_environment}}'
 
 - name: extract package archive
   when: install_required

roles/nodejs/tasks/Debian.yaml

@@ -13,6 +13,7 @@
   get_url:
     url: 'https://nodejs.org/dist/{{latest.json[0].version}}/node-{{latest.json[0].version}}-linux-x64.tar.gz'
     dest: ~/.local/src/node/node.tar.gz
+  environment: '{{proxy_environment}}'
 
 - name: extract downloaded package
   unarchive:

roles/tmux/tasks/Darwin.yaml

@@ -18,6 +18,7 @@
   get_url:
     url: https://gist.githubusercontent.com/nicm/ea9cf3c93f22e0246ec858122d9abea1/raw/37ae29fc86e88b48dbc8a674478ad3e7a009f357/tmux-256color
     dest: ~/tmux-256color
+  environment: '{{proxy_environment}}'
 
 - name: compile terminal info
   when: terminfo_exists.rc == 1

roles/ulauncher/tasks/Debian.yaml

@@ -7,6 +7,7 @@
     dest: '{{ulauncher_keyring_path}}'
     mode: '0644'
     force: true
+  environment: '{{proxy_environment}}'
 
 - name: add apt sources list
   when: ansible_distribution == 'Debian'

roles/webcatalog/tasks/Linux.yaml

@@ -28,6 +28,7 @@
     url: 'https://cdn-2.webcatalog.io/webcatalog/{{appimage}}'
     dest: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     mode: '0755'
+  environment: '{{proxy_environment}}'
 
 - name: create directories
   file:

roles/xremap/tasks/main.yaml

@@ -63,6 +63,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{install_dir}}/xremap.zip'
+  environment: '{{proxy_environment}}'
 
 - name: extract release archive
   when: needs_installed

roles/yq/tasks/Debian.yaml

@@ -36,3 +36,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{yq_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/yq/tasks/RedHat.yaml

@@ -50,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/yq'
     mode: '0755'
+  environment: '{{proxy_environment}}'