Disable kitty role on macOS until OSC 52 bug is fixed

* Replace microsoft-remote-desktop with windows-app
* Remove deprecated tap homebrew/cask-fonts

.gitignore

@@ -1 +1,3 @@
 external
+playbooks/test.yaml
+__pycache__

ansible.cfg

@@ -0,0 +1,5 @@
+[defaults]
+collections_path = collections
+library = library
+roles_path = roles
+stdout_callback = yaml

library/gsettings.py

@@ -0,0 +1,146 @@
+# -*- coding: utf-8 -*-
+
+from typing import Tuple
+from ansible.module_utils.basic import AnsibleModule
+
+DOCUMENTATION = """
+module: gsettings
+author:
+    - Kenneth Benzie (Benie)
+short_description: Ansible module for the gsettings configuration tool
+options:
+    schema:
+        description:
+            - Schema ID of the settings to configure.
+        type: str
+    key:
+        description:
+            - Key of an individaul setting to configure.
+        type: str
+    value:
+        description:
+            - Value to configure the setting with.
+            - Mutually exclusive with reset.
+        type: str
+    reset:
+        description:
+            - Flag to reset the setting to the default value.
+            - Mutually exclusive with value.
+        type:
+        default: false
+"""
+
+EXAMPLES = """
+- name: get gnome color-scheme current value
+  gsettings:
+    schema: org.gnome.desktop.interface
+    key: color-scheme
+  register: color_scheme
+- debug: msg={{color_scheme.value}}
+
+- name: set gnome color-scheme to 'prefer-dark'
+  gsettings:
+    schema: org.gnome.desktop.interface
+    key: color-scheme
+    value: "'prefer-dark'"
+
+- name: reset gnome color-scheme to default value
+  gsettings:
+    schema: org.gnome.desktop.interface
+    key: color-scheme
+    reset: true
+"""
+
+RETURN = """
+value:
+    description: Value of the setting.
+    returned: Returned when there is a value.
+    type: str
+    sample: "'default'"
+stderr:
+    description: Error output from gsettings.
+    returned: Returned when there is an error.
+    type: str
+    sample: No such key “doesnt-exist”
+"""
+
+
+class GSettingsError(Exception):
+    def __init__(self, command, rc, stderr):
+        self.command = command
+        self.rc = (rc,)
+        self.stderr = stderr
+
+
+def gsettings_get(module: AnsibleModule) -> Tuple[bool, str]:
+    command = [
+        "gsettings",
+        "get",
+        module.params["schema"],
+        module.params["key"],
+    ]
+    rc, stdout, stderr = module.run_command(command)
+    if rc != 0:
+        raise GSettingsError(command, rc, stderr)
+    return False, stdout.rstrip()
+
+
+def gsettings_set(module: AnsibleModule) -> Tuple[bool, str]:
+    command = [
+        "gsettings",
+        "set",
+        module.params["schema"],
+        module.params["key"],
+        module.params["value"],
+    ]
+    _, before = gsettings_get(module)
+    rc, _, stderr = module.run_command(command)
+    if rc != 0:
+        raise GSettingsError(command, rc, stderr)
+    _, after = gsettings_get(module)
+    return before != after, after
+
+
+def gsettings_reset(module: AnsibleModule) -> Tuple[bool, str]:
+    command = [
+        "gsettings",
+        "reset",
+        module.params["schema"],
+        module.params["key"],
+    ]
+    _, before = gsettings_get(module)
+    rc, stdout, stderr = module.run_command(command)
+    if rc != 0:
+        raise GSettingsError(command, rc, stderr)
+    _, after = gsettings_get(module)
+    return before != after, after
+
+
+def main() -> None:
+    module = AnsibleModule(
+        argument_spec=dict(
+            schema=dict(type="str"),
+            key=dict(type="str"),
+            value=dict(type="str"),
+            reset=dict(type="bool", default=False),
+        ),
+        mutually_exclusive=[["value", "reset"]],
+        required_together=[["schema", "key"]],
+    )
+
+    try:
+        if module.params["value"]:
+            changed, value = gsettings_set(module)
+        elif module.params["reset"]:
+            changed, value = gsettings_reset(module)
+        else:
+            changed, value = gsettings_get(module)
+        module.exit_json(changed=changed, value=value)
+    except GSettingsError as error:
+        module.fail_json(
+            f"{error.command} failed ({error.rc}): {error.stderr}", stderr=error.stderr
+        )
+
+
+if __name__ == "__main__":
+    main()

library/win_git.ps1

@@ -0,0 +1,259 @@
+#!powershell
+
+#AnsibleRequires -CSharpUtil Ansible.Basic
+#AnsibleRequires -PowerShell Ansible.ModuleUtils.CommandUtil
+
+$module = [Ansible.Basic.AnsibleModule]::Create($args, @{
+    options = @{
+        dest = @{type = 'path'}
+        repo = @{required = $true; aliases = @('name')}
+        version = @{default = 'HEAD'; aliases = @('branch')}
+        remote = @{default = 'origin'}
+        recursive = @{default = $true; type = 'bool'}
+        executable = @{default = $null; type = 'path'}
+    }
+    supports_check_mode = $false
+})
+
+$dest = $module.Params.dest
+$repo = $module.Params.repo
+$version = $module.Params.version
+$remote = $module.Params.remote
+$git = $module.Params.executable
+if (!$git) {
+    $git = Get-ExecutablePath 'git'
+}
+
+# ================================= Utilities ==================================
+
+function Get-AbsolutePath {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    try {
+        $result = Resolve-Path $path
+    } catch {
+        return $_[0].TargetObject
+    }
+    return $result
+}
+
+function Get-GitDir {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    $git_dir = Join-Path $path '.git'
+    # Check if this .git is a file.
+    if ([System.IO.File]::Exists($git_dir)) {
+        # Extract the gitdir: path from the .git file.
+        $groups = Get-Content "$git_dir" | `
+            Select-String '(gitdir:) (.*)' | `
+            ForEach { $_.Matches[0].Groups[1..2] }
+        $ref_prefix = $groups[0]
+        $gitdir = $groups[1]
+        if ($ref_prefix -ne 'gitdir:') {
+            $module.FailJson('The .git file has invalid gitdir reference format.')
+        }
+        # Check if the repo path is absolute.
+        if ([System.IO.Path]::IsPathRooted($gitdir)) {
+            $git_dir = $gitdir
+        } else {
+            # Join with the input path to construct an absolute path.
+            $git_dir = Join-Path $path $gitdir
+        }
+        if (![System.IO.Directory]::Exists($git_dir)) {
+            throw "$git_dir is not a directory."
+        }
+    }
+    return $git_dir
+}
+
+function Test-GitLocalChanges {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" status --porcelain"
+    $result = Run-Command -command $command -working_directory $dest
+    $changes = $result.stdout.Split([System.Environment]::NewLine, `
+            [System.StringSplitOptions]::RemoveEmptyEntries) | `
+        Where-Object { -not $_.StartsWith('??') } | Measure-Object -Line
+    return $changes.Lines -gt 0
+}
+
+function Get-GitRemoteHeadBranch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $command = "`"$git`" symbolic-ref --short refs/remotes/$remote/HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Could not determine the default HEAD branch of remote: $remote" ` +
+                         "$result.stdout $result.stderr")
+    }
+    return $result.stdout.Trim().Replace("$remote/", '')
+}
+
+function Get-GitCurrentSha {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" rev-parse HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    return $result.stdout.Trim()
+}
+
+function Get-GitRemoteUrl {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $result = Run-Command -command "`"$git`" remote get-url $remote" -working_directory $dest
+    return $result.stdout.Trim()
+}
+
+function Invoke-GitClone {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $repo,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $dest_parent = Split-Path -Path $dest -Parent
+    if (!(Test-Path $dest_parent)) {
+        New-Item -Path $dest_parent -ItemType Directory
+    }
+    $command = "`"$git`" clone --recursive --origin $remote $repo $dest"
+    if ($version -ne "HEAD") {
+        $command += " --branch $version"
+    }
+    $result = Run-Command -command $command -working_directory $cwd
+    if ($result.rc -ne 0) {
+        $module.FailJson($result.stderr)
+    }
+}
+
+function Invoke-GitCheckout {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    if ($version -eq "HEAD") {
+        $branch = Get-GitRemoteHeadBranch $dest $remote
+    } else {
+        $branch = $version
+    }
+    $result = Run-Command -command "`"$git`" checkout $branch" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to checkout version '$version'`n" + $result.stderr)
+    }
+}
+
+function Invoke-GitFetch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $command = "`"$git`" fetch --tags $remote"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to download remote objects and refs:`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitPull {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $result = Run-Command -command "`"$git`" pull $remote $version" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to pull version '$version' from remote '$origin':`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitSubmoduleUpdate {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $result = Run-Command -command "`"$git`" submodule update --init" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to initialized/update submodules:`n" + $result.stderr)
+    }
+}
+
+function Invoke-GitRemoteSetUrl {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $url
+    )
+    $result = Run-Command -command "`"$git`" remote set-url $remote `"$url`"" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to set remote URL:`n" + $result.stderr)
+    }
+}
+
+# ================================ Start logic =================================
+
+if (!$dest) {
+    $module.FailJson('The destination directory must be specified.')
+}
+$dest = Get-AbsolutePath $dest
+$git_dir = Get-GitDir $dest
+$gitconfig = Join-Path $git_dir 'config'
+
+$module.Result.before = $null
+
+if (($dest -and ![System.IO.File]::Exists($gitconfig))) {
+    Invoke-GitClone $repo $remote $dest
+    Invoke-GitCheckout $dest $remote $version
+    $module.Result.changed = $true
+} else {
+    $module.Result.before = Get-GitCurrentSha $dest
+    if (Test-GitLocalChanges $dest) {
+        $module.FailJson('Local modifications exist in repository.')
+    }
+    $url = Get-GitRemoteUrl $dest $remote
+    if ($url -ne $repo) {
+        Invoke-GitRemoteSetUrl $dest $remote $repo
+    }
+    Invoke-GitFetch $dest $remote $version
+    Invoke-GitCheckout $dest $remote $version
+    Invoke-GitPull $dest $remote $version
+    $module.Result.after = Get-GitCurrentSha $dest
+    if ($module.Result.before -ne $module.Result.after) {
+        $module.Result.changed = $true
+    }
+}
+
+if ($recursive) {
+    Invoke-GitSubmoduleUpdate $dest
+}
+
+# Ensure the repository has the correct owner
+$userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+$idRef = [System.Security.Principal.NTAccount]::new($userName)
+Get-Item -Force $dest | foreach { `
+    $_ ; $_ | Get-ChildItem -Force -Recurse `
+} | foreach { `
+    $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `
+}
+
+$module.ExitJson()

library/win_git.py

@@ -0,0 +1,43 @@
+# -*- coding: utf-8 -*-
+
+# TODO: copyright
+
+DOCUMENTATION = '''
+---
+module: win_git
+author:
+    - "Kenneth Benzie (Benie)"
+short_description: Deploy software (or files) from git checkouts on Windows
+description:
+    - Manage git checkouts of repositories to deploy files or software on Windows.
+options:
+    data:
+        description:
+            - Alternate data to return instead of 'pong'.
+            - If this parameter is set to C(crash), the module will cause an
+              exception.
+        type: str
+        default: pong
+seealso:
+    - module: ansible.builtin.git
+'''
+
+EXAMPLES = r'''
+# Test connectivity to a windows host
+# ansible winserver -m ansible.windows.win_ping
+
+- name: Example from an Ansible Playbook
+  ansible.windows.win_ping:
+
+- name: Induce an exception to see what happens
+  ansible.windows.win_ping:
+    data: crash
+'''
+
+RETURN = r'''
+ping:
+    description: Value provided with the data parameter.
+    returned: success
+    type: str
+    sample: pong
+'''

library/win_winget.ps1

@@ -0,0 +1,99 @@
+#!powershell
+
+#AnsibleRequires -CSharpUtil Ansible.Basic
+#AnsibleRequires -PowerShell Ansible.ModuleUtils.CommandUtil
+
+$module = [Ansible.Basic.AnsibleModule]::Create($args, @{
+    options = @{
+        name = @{
+            type = "list"
+            elements = "str"
+            required = $true
+        }
+        state = @{
+            type = "str"
+            default = "present"
+            choices = ("absent", "latest", "present")
+        }
+    }
+    supports_check_mode = $false
+})
+
+$names = $module.Params.name
+$state = $module.Params.state
+$winget = Get-ExecutablePath "winget"
+$noPackageString = "No installed package found matching input criteria."
+
+if ($name -and $id) {
+    $module.FailJson("name `"$name`" and id `"$id`" must not both be provided")
+}
+
+function Test-Installed {
+    $command = "`"$winget`" list `"$name`""
+    $result = Run-Command -command $command
+    if ($result.rc -eq 0) {
+        return $true
+    }
+    return $false
+}
+
+function Test-UpgradeAvailable {
+    if (!(Test-Installed)) {
+        return $true
+    }
+    $command = "`"$winget`" list --upgrade-available `"$name`""
+    $result = Run-Command -command $command
+    if ($result.stdout.Contains($noPackageString)) {
+        return $false
+    }
+    return $true
+}
+
+foreach ($name in $names) {
+    switch ($state) {
+        "absent" {
+            if (Test-Installed) {
+                $command = "`"$winget`" uninstall `"$name`""
+                $result = Run-Command -command $command
+                if ($result.rc -ne 0) {
+                    $module.Result.rc = $result.rc
+                    $module.Result.stdout = $result.stdout
+                    $module.FailJson("Failed to uninstall package `"$name`"")
+                }
+                $module.Result.stdout = $result.stdout
+                $module.Result.changed = $true
+            }
+        }
+
+        "latest" {
+            if (Test-UpgradeAvailable) {
+                $command = "`"$winget`" install --accept-package-agreements --accept-source-agreements `"$name`""
+                $result = Run-Command -command $command
+                if ($result.rc -ne 0) {
+                    $module.Result.rc = $result.rc
+                    $module.Result.stdout = $result.stdout
+                    $module.FailJson("Failed to install package `"$name`"")
+                }
+                $module.Result.stdout = $result.stdout
+                $module.Result.changed = $true
+            }
+        }
+
+        "present" {
+            if (!(Test-Installed)) {
+                $command = "`"$winget`" install --accept-package-agreements --accept-source-agreements `"$name`""
+                $result = Run-Command -command $command
+                if ($result.rc -ne 0) {
+                    $module.Result.rc = $result.rc
+                    $module.Result.stdout = $result.stdout
+                    $module.FailJson("Failed to install package `"$name`"")
+                }
+                $module.Result.stdout = $result.stdout
+                $module.Result.changed = $true
+            }
+        }
+    }
+}
+
+$module.Result.rc = 0
+$module.ExitJson()

library/win_winget.py

@@ -0,0 +1,47 @@
+# -*- coding: utf-8 -*-
+
+DOCUMENTATION = '''
+module: win_winget
+author:
+  - "Kenneth Benzie (Benie)"
+short_desription: Manages packages with WinGet
+description:
+  - Magage packages using WinGet.
+options:
+  name:
+    description:
+      - Name of the package to manage.
+    type: list[str]
+  state:
+    description:
+      - Indicates the desired package state. V(latest) ensures that the latest
+        version is installed.
+    type: str
+    choices: [ absent, present, latest ]
+    default: present
+'''
+
+EXAMPLES = '''
+- name: Install Apple Music
+  win_winget:
+    name: Apple Music
+    state: present
+
+- name: Install latest version of Neovim Qt
+  win_winget:
+    name: neovim-qt
+    state: latest
+
+- name: Uninstall Microsoft OneDrive
+  win_winget:
+    id: Microsoft.OneDrive
+    state: absent
+'''
+
+RETURN = '''
+stdout:
+  description: Output from WinGet.
+  returned: Success, when needed.
+  type: str
+  sample: ''
+'''

playbooks/1password.yaml

@@ -0,0 +1,6 @@
+---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - 1password

playbooks/Linux.yaml

@@ -0,0 +1,15 @@
+---
+- import_playbook: LinuxCLI.yaml
+- import_playbook: UnixGUI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: firefox
+    - role: kitty
+    - role: cider
+    - role: ulauncher
+    - role: gnome-shell
+      when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+    - role: xremap
+      when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"

playbooks/LinuxCLI.yaml

@@ -0,0 +1,16 @@
+---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: rpmfusion
+      when: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: gdb
+    - role: podman
+    - role: system-info
+      when: disable_systemd is not defined

playbooks/UnixCLI.yaml

@@ -0,0 +1,38 @@
+---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: sudo
+      when: ansible_user_id != "root"
+    - role: python
+
+    - role: zsh
+      tags: unsafe
+    - role: neovim
+    - role: tmux
+      tags: unsafe
+
+    - role: ag
+    - role: bash
+    - role: bat
+    - role: curl
+    - role: editline
+    - role: fd
+    - role: fzf
+    - role: gh
+    - role: git
+    - role: glab
+    - role: htop
+    - role: jp
+    - role: jq
+    - role: readline
+    - role: ripgrep
+    - role: tidy
+    - role: tree
+    - role: watch
+    - role: wget
+    - role: yq
+
+    - role: llvm
+    - role: nodejs

playbooks/UnixGUI.yaml

@@ -0,0 +1,12 @@
+---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: flatpak
+      when: ansible_os_family != "Darwin"
+
+    - role: 1password
+    - role: ferdium
+    - role: fonts
+    - role: obsidian

playbooks/WSL.yaml

@@ -0,0 +1,7 @@
+---
+- import_playbook: LinuxCLI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: wsl

playbooks/Windows.yaml

@@ -0,0 +1,16 @@
+---
+- import_playbook: WindowsCLI.yaml
+- hosts: windows
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: 1password
+    - role: autohotkey
+    - role: apple-music
+    - role: ferdium
+    - role: firefox
+    - role: fonts
+    - role: obsidian
+    - role: powertoys
+    - role: windows-terminal
+    - role: wezterm

playbooks/WindowsCLI.yaml

@@ -0,0 +1,26 @@
+---
+- hosts: windows
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: scoop
+    - role: python
+    - role: git
+    - role: powershell
+    - role: neovim
+    - role: system-info
+
+    - role: ag
+    - role: bat
+    - role: curl
+    - role: fd
+    - role: fzf
+    - role: gh
+    - role: glab
+    - role: jq
+    - role: ripgrep
+    - role: tree
+    - role: yq
+
+    - role: llvm
+    - role: nodejs

playbooks/macOS.yaml

@@ -0,0 +1,23 @@
+---
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: system-info
+- import_playbook: UnixGUI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: mas
+
+    - role: hiddenbar
+    - role: iterm
+    # TODO: Reenable this once kitty OSC 52 bug is fixed
+    # - role: kitty
+    - role: magnet
+    - role: windows-app
+    - role: viscosity
+
+    - role: macos

playbooks/vars/environment.yaml

@@ -0,0 +1,15 @@
+---
+# GitHub may rate limit unauthenticated API requests, this is more likely when
+# behind a network proxy. Set the GITHUB_TOKEN environment variable to
+# authenticate any GitHub API requests executed while playing roles.
+github_auth_headers: >-
+  {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
+      if lookup('env', 'GITHUB_TOKEN') else {} }}
+
+# When working behind a network proxy, set the http_proxy and https_proxy
+# environment variables. These will be passed through to uses of the `get_url`
+# module when playing roles.
+proxy_environment: >-
+  {{ { 'http_proxy': lookup('env', 'http_proxy'),
+       'https_proxy': lookup('env', 'https_proxy') }
+      if lookup('env', 'http_proxy') and lookup('env', 'https_proxy') else {} }}

roles/1password/tasks/Darwin.yaml

@@ -1,5 +1,9 @@
 ---
 - name: install homebrew package
   homebrew_cask:
-    name: 1password
+    name:
+      - 1password
+      - 1password-cli
     state: latest
+
+- include_tasks: zsh-completion.yaml

roles/1password/tasks/Debian.yaml

@@ -1 +1,66 @@
-# TODO: https://support.1password.com/install-linux/#debian-or-ubuntu
+---
+- name: set keyring path
+  set_fact:
+    keyring: /etc/apt/keyrings/1password.asc
+    old_keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+
+- name: remove old keyring
+  become: true
+  file:
+    path: '{{old_keyring}}'
+    state: absent
+
+- name: add apt signing key
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  get_url:
+    url: https://downloads.1password.com/linux/keys/1password.asc
+    dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
+
+- name: set compatible architecture
+  when: ansible_machine == 'x86_64'
+  set_fact:
+    arch: amd64
+
+- assert:
+    that: arch is defined
+    fail_msg: 'Architecture not currently supported: {{ansible_machine}}'
+
+- name: add apt repository
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  copy:
+    content: >-
+      deb [arch={{arch}} signed-by={{keyring}}]
+      https://downloads.1password.com/linux/debian/{{arch}} stable main
+    dest: /etc/apt/sources.list.d/1password.list
+
+- name: apt update
+  become: true
+  apt:
+    update_cache: true
+
+- name: install gui package
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  apt:
+    name: 1password
+    state: latest
+
+- name: install cli package
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  apt:
+    name: 1password-cli
+    state: latest
+
+- name: create symlink to op.exe
+  when: '"WSL" in ansible_kernel'
+  file:
+    state: link
+    src: /mnt/c/Users/Benie/AppData/Local/1Password/cli/op.exe
+    dest: ~/.local/bin/op
+
+- include_tasks: linux-autostart.yaml
+- include_tasks: zsh-completion.yaml

roles/1password/tasks/RedHat.yaml

@@ -0,0 +1,24 @@
+---
+- name: add dnf repository key
+  become: true
+  rpm_key:
+    key: https://downloads.1password.com/linux/keys/1password.asc
+
+- name: add dnf repository
+  become: true
+  yum_repository:
+    name: 1password
+    description: 1Password Stable Channel
+    baseurl: https://downloads.1password.com/linux/rpm/stable/$basearch
+    enabled: true
+    gpgcheck: true
+    repo_gpgcheck: true
+    gpgkey: ['https://downloads.1password.com/linux/keys/1password.asc']
+
+- name: install dnf package
+  become: true
+  dnf:
+    name: 1password
+    state: latest
+
+- include_tasks: linux-autostart.yaml

roles/1password/tasks/Windows.yaml

@@ -1,12 +1,98 @@
 ---
-- name: install chocolatey package
-  win_chocolatey:
-    name:
-      - 1password
-    state: latest
+# NOTE: The 1Password chocolatey packages are not up to date.
+
+# GUI
+- set_fact:
+    app_exe: '{{ansible_env.LOCALAPPDATA}}/1Password/app/8/1Password.exe'
+    installer_exe: '{{ansible_env.TEMP}}/1PasswordSetup-latest.exe'
+
+- name: check if already installed
+  win_stat:
+    path: '{{app_exe}}'
+  register: app_stat
+
+- name: download latest installer
+  when: not app_stat.stat.exists
+  win_get_url:
+    url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
+    dest: '{{installer_exe}}'
+  environment: '{{proxy_environment}}'
+
+- name: run installer
+  when: not app_stat.stat.exists
+  win_command: '{{installer_exe}}'
+
+- name: remove installer
+  win_file:
+    path: '{{installer_exe}}'
+    state: absent
 
 - name: create start menu shortcut
   win_shortcut:
-    src: '{{ansible_env.LOCALAPPDATA}}/1Password/app/7/1Password.exe'
+    src: '{{app_exe}}'
     dest: '{{ansible_env.ProgramData}}/Microsoft/Windows/Start Menu/Programs/1Password.lnk'
-    icon: '{{ansible_env.LOCALAPPDATA}}/1Password/app/7/1Password.exe,0'
+    icon: '{{app_exe}},0'
+
+# CLI
+- set_fact:
+    cli_dir: '{{ansible_env.LOCALAPPDATA}}\1Password\cli'
+    cli_zip: '{{ansible_env.TEMP}}/op_windows_amd64.zip'
+- set_fact:
+    cli_exe: '{{cli_dir}}\op.exe'
+
+- name: check if op already installed
+  win_stat:
+    path: '{{cli_exe}}'
+  register: cli_stat
+
+- name: get installed op version
+  when: cli_stat.stat.exists == True
+  win_command: '{{cli_exe}} --version'
+  register: cli_version
+  changed_when: false
+
+- when: cli_stat.stat.exists == True
+  set_fact:
+    cli_installed_version: '{{cli_version.stdout.strip()}}'
+
+- name: get list of op releases
+  win_uri:
+    url: https://raw.githubusercontent.com/kbenzie/op-release-scraper/main/op-releases.json
+    return_content: true
+  register: releases
+
+- set_fact:
+    latest: '{{releases.json[0]}}'
+
+- name: download latest op zip archive
+  when: cli_installed_version is not defined or cli_installed_version != latest.version
+  win_get_url:
+    url: '{{latest.downloads.Windows.amd64}}'
+    dest: '{{cli_zip}}'
+  environment: '{{proxy_environment}}'
+
+- name: unzip op zip archive
+  when: cli_installed_version is not defined or cli_installed_version != latest.version
+  win_unzip:
+    src: '{{cli_zip}}'
+    dest: '{{cli_dir}}'
+
+- name: add op install directory to user PATH
+  win_path:
+    scope: user
+    name: Path
+    elements: '{{cli_dir}}'
+
+- name: get op powershell completion script
+  win_command:
+    argv:
+      - '{{ansible_env.LOCALAPPDATA}}/1Password/cli/op.exe'
+      - completion
+      - powershell
+  register: powershell_completion_script
+  changed_when: false
+
+- name: create op powershell completion file
+  win_copy:
+    content: '{{powershell_completion_script.stdout}}'
+    dest: '{{cli_dir}}/opProfile.psm1'

roles/1password/tasks/linux-autostart.yaml

@@ -0,0 +1,20 @@
+---
+- name: create ~/.config/autostart directory
+  file:
+    state: directory
+    path: ~/.config/autostart
+
+- name: create autostart desktop file
+  copy:
+    dest: '{{ansible_env.HOME}}/.config/autostart/1password.desktop'
+    content: |
+      [Desktop Entry]
+      Name=1Password
+      Exec=/opt/1Password/1password %U
+      Terminal=false
+      Type=Application
+      Icon=1password
+      StartupWMClass=1Password
+      Comment=Password manager and secure wallet
+      MimeType=x-scheme-handler/onepassword;x-scheme-handler/onepassword8;
+      Categories=Office;

roles/1password/tasks/zsh-completion.yaml

@@ -0,0 +1,15 @@
+---
+- name: get op zsh completion script
+  command: op completion zsh
+  register: zsh_completion_script
+  changed_when: false
+
+- name: create local zsh site functions directory
+  file:
+    state: directory
+    path: ~/.local/share/zsh/site-functions
+
+- name: create op zsh completion file
+  copy:
+    content: '{{zsh_completion_script.stdout}}'
+    dest: ~/.local/share/zsh/site-functions/_op

roles/ag/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: the_silver_searcher
+    state: latest

roles/ag/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: silversearcher-ag
+    state: latest

roles/ag/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: the_silver_searcher
+    state: latest

roles/ag/tasks/Windows.yaml

@@ -0,0 +1,10 @@
+---
+- name: remove chocolatey package
+  win_chocolatey:
+    name: ag
+    state: absent
+
+- name: install scoop package
+  community.windows.win_scoop:
+    name: ag
+    state: present

roles/ag/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/apple-music/tasks/main.yaml

@@ -0,0 +1,10 @@
+---
+- name: install Apple Music from Microsoft Store
+  win_winget:
+    name: Apple Music
+    state: latest
+
+- name: remove Cider from Chocolatey
+  win_chocolatey:
+    name: Cider
+    state: absent

roles/autohotkey/tasks/main.yaml

@@ -6,9 +6,50 @@
 
 - name: clone config repo
   win_git:
-    repo: git@code.infektor.net:config/AutoHotKey.git
-    dest: '{{ansible_env.LOCALAPPDATA}}/AutoHotKey'
-    branch: master
+    repo: git@git.infektor.net:config/AutoHotKey.git
+    dest: '{{autohotkey_repo_dir}}'
+    branch: main
 
-# TODO: - name: create scheduled task
-#         win_scheduled_task:
+- name: create scheduled task
+  win_scheduled_task:
+    path: Benie
+    name: macOS.ahk
+    state: present
+    enable: true
+    triggers:
+      - type: logon
+        enabled: true
+      - type: registration
+        enabled: true
+    actions:
+      - path: '{{autohotkey_repo_dir}}/macOS.ahk'
+    disallow_start_if_on_batteries: false
+    stop_if_going_on_batteries: false
+    execution_time_limit: PT0S
+    logon_type: interactive_token
+    multiple_instances: 3
+    run_level: highest
+    start_when_available: true
+    wake_to_run: false
+
+- name: create scheduled task
+  win_scheduled_task:
+    path: Benie
+    name: mouse.ahk
+    state: present
+    enable: true
+    triggers:
+      - type: logon
+        enabled: true
+      - type: registration
+        enabled: true
+    actions:
+      - path: '{{autohotkey_repo_dir}}/mouse.ahk'
+    disallow_start_if_on_batteries: false
+    stop_if_going_on_batteries: false
+    execution_time_limit: PT0S
+    logon_type: interactive_token
+    multiple_instances: 3
+    run_level: highest
+    start_when_available: true
+    wake_to_run: false

roles/autohotkey/vars/main.yaml

@@ -0,0 +1,2 @@
+---
+autohotkey_repo_dir: '{{ansible_env.LOCALAPPDATA}}/AutoHotKey'

roles/bash/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: create ~/.bashrc file
+  template:
+    src: templates/bashrc
+    dest: ~/.bashrc

roles/bash/templates/bashrc

@@ -0,0 +1,122 @@
+# If not running interactively, don't do anything
+case $- in
+    *i*) ;;
+      *) return;;
+esac
+
+# don't put duplicate lines or lines starting with space in the history.
+# See bash(1) for more options
+HISTCONTROL=ignoreboth
+
+# append to the history file, don't overwrite it
+shopt -s histappend
+
+# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
+HISTSIZE=1000
+HISTFILESIZE=2000
+
+# check the window size after each command and, if necessary,
+# update the values of LINES and COLUMNS.
+shopt -s checkwinsize
+
+# make less more friendly for non-text input files, see lesspipe(1)
+[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
+
+# enable color support of ls and also add handy aliases
+if [ -x /usr/bin/dircolors ]; then
+  test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
+  alias ls='ls --color=auto'
+  alias dir='dir --color=auto'
+  alias vdir='vdir --color=auto'
+  alias grep='grep --color=auto'
+  alias fgrep='fgrep --color=auto'
+  alias egrep='egrep --color=auto'
+fi
+
+if [ -f ~/.bash_aliases ]; then
+    . ~/.bash_aliases
+fi
+
+# enable programmable completion features (you don't need to enable
+# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
+# sources /etc/bash.bashrc).
+if ! shopt -oq posix; then
+  if [ -f /usr/share/bash-completion/bash_completion ]; then
+    . /usr/share/bash-completion/bash_completion
+  elif [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+  fi
+fi
+
+# Enable vi mode
+set -o vi
+
+function _prompt_first_line {
+  local exit_code=$?
+  if [ "$exit_code" = "0" ]; then
+    exit_code=
+  else
+    # If the last command failed, display its error code at the right
+    case $exit_code in
+      129) exit_code="SIGHUP"     ;;  # 128 + 1
+      130) exit_code="SIGINT"     ;;  # 128 + 2
+      131) exit_code="SIGQUIT"    ;;  # 128 + 3
+      132) exit_code="SIGILL"     ;;  # 128 + 4
+      133) exit_code="SIGTRAP"    ;;  # 128 + 5
+      134) exit_code="SIGABRT"    ;;  # 128 + 6
+      134) exit_code="SIGIOT"     ;;  # 128 + 6
+      135) exit_code="SIGBUS"     ;;  # 128 + 7
+      136) exit_code="SIGFPE"     ;;  # 128 + 8
+      137) exit_code="SIGKILL"    ;;  # 128 + 9
+      138) exit_code="SIGUSR1"    ;;  # 128 + 10
+      139) exit_code="SIGSEGV"    ;;  # 128 + 11
+      140) exit_code="SIGUSR2"    ;;  # 128 + 12
+      141) exit_code="SIGPIPE"    ;;  # 128 + 13
+      142) exit_code="SIGALRM"    ;;  # 128 + 14
+      143) exit_code="SIGTERM"    ;;  # 128 + 15
+      144) exit_code="SIGSTKFLT"  ;;  # 128 + 16
+      145) exit_code="SIGCHLD"    ;;  # 128 + 17
+      146) exit_code="SIGCONT"    ;;  # 128 + 18
+      147) exit_code="SIGSTOP"    ;;  # 128 + 19
+      148) exit_code="SIGTSTP"    ;;  # 128 + 20
+      149) exit_code="SIGTTIN"    ;;  # 128 + 21
+      150) exit_code="SIGTTOU"    ;;  # 128 + 22
+      151) exit_code="SIGURG"     ;;  # 128 + 23
+      152) exit_code="SIGXCPU"    ;;  # 128 + 24
+      153) exit_code="SIGXFSZ"    ;;  # 128 + 25
+      154) exit_code="SIGVTALRM"  ;;  # 128 + 26
+      155) exit_code="SIGPROF"    ;;  # 128 + 27
+      156) exit_code="SIGWINCH"   ;;  # 128 + 28
+      157) exit_code="SIGIO"      ;;  # 128 + 29
+      158) exit_code="SIGPWR"     ;;  # 128 + 30
+      159) exit_code="SIGSYS"     ;;  # 128 + 31
+    esac
+    exit_code=" \e[1m\e[31m$exit_code\e[0m"
+  fi
+  local time=$(date +%H:%M:%S)
+  local dir=$PWD
+  [[ "$dir" =~ ^"$HOME"(/|$) ]] && dir="~${dir#$HOME}"
+  # TODO: virtualenv
+  local grey="\e[38;5;244m"
+  local reset="\e[0m"
+  local blue="\e[38;5;37m"
+  echo -e "$grey$time$reset $blue$dir$reset$exit_code"
+}
+
+PROMPT_COMMAND=_prompt_first_line
+
+yellow="\001\e[38;5;3m\002"
+grey="\001\e[38;5;244m\002"
+reset="\001\e[0m\002"
+
+PS1="$yellow\u$reset@$grey\h$reset "
+
+# Setup environment variables
+export PATH=$HOME/.local/bin:$PATH
+if command -v nvim > /dev/null; then
+  export EDITOR=nvim
+elif command -v vim > /dev/null; then
+  export EDITOR=vim
+elif command -v vi > /dev/null; then
+  export EDITOR=vi
+fi

roles/bat/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: bat
+    state: latest

roles/bat/tasks/Debian.yaml

@@ -0,0 +1,12 @@
+---
+- set_fact:
+    use_github: '{{
+        ansible_distribution == "Ubuntu" and
+        ansible_distribution_version == "18.04"
+      }}'
+
+- when: use_github
+  include_tasks: deb.yaml
+
+- when: not use_github
+  include_tasks: apt.yaml

roles/bat/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: bat
+    state: latest

roles/bat/tasks/Windows.yaml

@@ -0,0 +1,10 @@
+---
+- name: remove chocolatey package
+  win_chocolatey:
+    name: Bat
+    state: absent
+
+- name: install scoop package
+  community.windows.win_scoop:
+    name: bat
+    state: present

roles/bat/tasks/apt.yaml

@@ -0,0 +1,13 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: bat
+    state: latest
+
+- name: update bat alternative
+  become: true
+  alternatives:
+    name: bat
+    path: /usr/bin/batcat
+    link: /usr/local/bin/bat

roles/bat/tasks/deb.yaml

@@ -0,0 +1,67 @@
+---
+- name: get latest github release
+  uri:
+    url: https://api.github.com/repos/sharkdp/bat/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    latest_version: '{{latest.json.tag_name[1:]}}'
+    bat_exe: '/usr/bin/bat'
+
+- name: check if already installed
+  stat:
+    path: '{{bat_exe}}'
+  register: bat_stat
+
+- name: get installed version
+  when: bat_stat.stat.exists == True
+  command: '{{bat_exe}} --version'
+  register: bat_version
+  changed_when: false
+
+- when: bat_stat.stat.exists == True
+  set_fact:
+    installed_version:
+      '{{bat_version.stdout.strip() | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- when: ansible_machine == "x86_64"
+  set_fact:
+    arch: amd64
+
+- assert:
+    that: arch is defined
+    fail_msg: 'Architecture not currently supported: {{ansible_machine}}'
+
+- set_fact:
+    assets: '{{latest.json.assets}}'
+    asset_query: '[?contains(name, `bat-musl_`)] | [?contains(name, `amd64.deb`)] | [0]'
+    pkg_dir: '{{ansible_env.HOME}}/.local/pkg/bat'
+- set_fact:
+    asset: '{{assets | to_json | from_json | json_query(asset_query)}}'
+    bat_deb: '{{pkg_dir}}/bat.deb'
+
+- name: create directory for deb file download
+  file:
+    state: directory
+    path: '{{pkg_dir}}'
+
+- name: download .deb file
+  when: installed_version is not defined or installed_version != latest_version
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{bat_deb}}'
+  environment: '{{proxy_environment}}'
+
+- name: install .deb file
+  when: installed_version is not defined or installed_version != latest_version
+  become: true
+  apt:
+    deb: '{{bat_deb}}'
+
+- name: remove .deb file
+  when: installed_version is not defined or installed_version != latest_version
+  file:
+    state: absent
+    path: '{{bat_deb}}'
+  changed_when: false

roles/bat/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/cider/tasks/main.yaml

@@ -0,0 +1,16 @@
+---
+- assert:
+    that: ansible_os_family != 'Darwin'
+
+- name: install chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: Cider
+    state: latest
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows'
+  become: true
+  flatpak:
+    name: sh.cider.Cider
+    state: latest

roles/curl/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: curl
+    state: latest

roles/curl/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: curl
+    state: latest

roles/curl/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: curl
+    state: latest

roles/curl/tasks/Windows.yaml

@@ -0,0 +1,10 @@
+---
+- name: remove chocolatey package
+  win_chocolatey:
+    name: curl
+    state: absent
+
+- name: install scoop package
+  community.windows.win_scoop:
+    name: curl
+    state: present

roles/curl/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/distrobox/files/_distrobox

@@ -0,0 +1,100 @@
+#compdef distrobox
+
+_distrobox() {
+  local context curcontext="$curcontext" state line ret=1
+  typeset -A opt_args
+
+  _arguments -C \
+    '(-h --help)'{-h,--help}'[show help]' \
+    '(-V --version)'{-V,--version}'[show version]' \
+    '1: :->command' \
+    '*:: :->arguments'
+
+  case $state in;
+    (command)
+      local commands;
+      commands=(
+        'create:create the distrobox'
+        'enter:enter the distrobox'
+        'export:application and service exporting'
+        'list:list containers'
+        'rm:remove containers'
+        'stop:stop containers'
+      )
+      _describe -t commands 'distrobox command' commands "$@" \
+        && ret=0 ;;
+
+    (arguments)
+      case $line[1] in
+        (create)
+          _arguments \
+            '(-h --help)'{-h,--help}'[show this message]' \
+            '(-v --verbose)'{-v,--verbose}'[show more verbosity]' \
+            '(-V --version)'{-V,--version}'[show version]' \
+            '(-i --image)'{-i,--image}'[image to use for the container]: :' \
+            '(-n --name)'{-n,--name}'[name for the distrobox]: :' \
+            '(-H --home)'{-H,--home}'[select a custom HOME directory for the container]: :' \
+            '*--volume[additional volumes to add to the container]: :_directories' \
+            '(-a --additional-flags)'{-a,--additional-flags}'[additional flags to pass to the container manager command]: :' \
+            '(-I --init)'{-I,--init}'[use init system (like systemd) inside the container]: :' \
+            '(-d --dry-run)'{-d,--dry-run}'[only print the container manager command generated]' \
+            && ret=0 ;;
+
+        (enter)
+          _arguments -S \
+            '(-h --help)'{-h,--help}'[show this message]' \
+            '(-v --verbose)'{-v,--verbose}'[show more verbosity]' \
+            '(-V --version)'{-V,--version}'[show version]' \
+            '(-n --name)'{-n,--name}'[name for the distrobox]: :' \
+            '(-T --no-tty)'{-T,--no-tty}'[do not instantiate a tty]' \
+            '(-a --additional-flags)'{-a,--additional-flags}'[additional flags to pass to the container manager command]: :' \
+            '(-d --dry-run)'{-d,--dry-run}'[only print the container manager command generated]' \
+            '(-e --)'{-e,--}'[end arguments execute the rest as command to execute at login]:*:' \
+            && ret=0 ;;
+
+        (export)
+          _arguments -S \
+            '(-h --help)'{-h,--help}'[show this message]' \
+            '(-v --verbose)'{-v,--verbose}'[show more verbosity]' \
+            '(-V --version)'{-V,--version}'[show version]' \
+            '(-a --app)'{-a,--app}'[name of the application to export]: :' \
+            '(-b --bin)'{-b,--bin}'[absolute path of the binary to export]: :' \
+            '(-s --service)'{-s,--service}'[name of the service to export]: :' \
+            '(-d --delete)'{-d,--delete}'[delete exported application or service]: :' \
+            '(-el --export-label)'{-el,--export-label}'[label to add to exported application name]: :' \
+            '(-ep --export-path)'{-ep,--export-path}'[path where to export the binary]: :' \
+            '(-ef --extra-flags)'{-ef,--export-flags}'[extra flags to add to the command]: :' \
+            '(-S --sudo)'{-S,--sudo}'[specify if the exported item should be run as sudo]' \
+            && ret=0 ;;
+
+        (list)
+          _arguments -S \
+            '(-h --help)'{-h,--help}'[show this message]' \
+            '(-v --verbose)'{-v,--verbose}'[show more verbosity]' \
+            '(-V --version)'{-V,--version}'[show version]' \
+            && ret=0 ;;
+
+        (rm)
+          _arguments -S \
+            '(-h --help)'{-h,--help}'[show this message]' \
+            '(-v --verbose)'{-v,--verbose}'[show more verbosity]' \
+            '(-V --version)'{-V,--version}'[show version]' \
+            '(-n --name)'{-n,--name}'[name for the distrobox]: :' \
+            '(-f --force)'{-f,--force}'[force deletion]' \
+            && ret=0 ;;
+
+        (stop)
+          _arguments -S \
+            '(-h --help)'{-h,--help}'[show this message]' \
+            '(-v --verbose)'{-v,--verbose}'[show more verbosity]' \
+            '(-V --version)'{-V,--version}'[show version]' \
+            '(-n --name)'{-n,--name}'[name for the distrobox]: :' \
+            '(-Y --yes)'{-Y,--yes}'[non-interactive, stop without asking]' \
+            && ret=0 ;;
+      esac ;;
+  esac
+
+  return $ret
+}
+
+_distrobox "$@"

roles/distrobox/tasks/main.yaml

@@ -0,0 +1,15 @@
+---
+- name: install apt package
+  when: ansible_distribution == "Debian" and
+        ansible_distribution_version == "unstable"
+  become: true
+  apt:
+    name: distrobox
+    state: latest
+
+- name: install distrobox zsh completions
+  when: ansible_distribution == "Debian" and
+        ansible_distribution_version == "unstable"
+  copy:
+    src: _distrobox
+    dest: '{{ansible_env.HOME}}/.local/share/zsh/site-functions/_distrobox'

roles/editline/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: create .editrc config file
+  template:
+    src: editrc
+    dest: '{{ansible_env.HOME}}/.editrc'

roles/editline/templates/editrc

@@ -0,0 +1,3 @@
+# Enable vi mode
+lldb:bind -v
+lldb:bind ^I lldb_complete

roles/fd/tasks/main.yaml

@@ -0,0 +1,32 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: fd-find
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: fd-find
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: fd
+    state: latest
+
+- name: remove chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: fd
+    state: absent
+
+- name: install scoop package
+  when: ansible_os_family == 'Windows'
+  community.windows.win_scoop:
+    name: fd
+    state: present

roles/ferdium/tasks/Windows.yaml

@@ -0,0 +1,14 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: ferdium
+    state: latest
+
+- set_fact:
+    ferdium_exe: 'C:/Program Files/Ferdium/Ferdium.exe'
+
+- name: create start menu shortcut
+  win_shortcut:
+    src: '{{ferdium_exe}}'
+    dest: '{{ansible_env.ProgramData}}/Microsoft/Windows/Start Menu/Programs/Ferdium.lnk'
+    icon: '{{ferdium_exe}},0'

roles/ferdium/tasks/main.yaml

@@ -0,0 +1,17 @@
+---
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew_cask:
+    name: ferdium
+    state: latest
+
+- when: ansible_os_family == 'Windows'
+  include_tasks: Windows.yaml
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows' and
+        ansible_os_family != 'Darwin'
+  become: true
+  flatpak:
+    name: org.ferdium.Ferdium
+    state: latest

roles/firefox/tasks/Ubuntu.yaml

@@ -0,0 +1,52 @@
+---
+- name: remove snap package
+  become: true
+  snap:
+    name: firefox
+    state: absent
+
+- name: create keyrings directory
+  become: true
+  file:
+    path: /etc/apt/keyrings
+    mode: '755'
+    state: directory
+
+- name: install mozilla repo keyring
+  become: true
+  get_url:
+    url: https://packages.mozilla.org/apt/repo-signing-key.gpg
+    dest: /etc/apt/keyrings/packages.mozilla.org.asc
+  environment: '{{proxy_environment}}'
+
+- name: add mozilla apt repo
+  become: true
+  copy:
+    content: >-
+      deb [signed-by=/etc/apt/keyrings/packages.mozilla.org.asc]
+      https://packages.mozilla.org/apt mozilla main
+    dest: /etc/apt/sources.list.d/mozilla.list
+
+- name: pin mozilla package
+  become: true
+  copy:
+    content: |
+      Package: *
+      Pin: origin packages.mozilla.org
+      Pin-Priority: 1000
+    dest: /etc/apt/preferences.d/mozilla
+
+- name: install mozilla package
+  become: true
+  apt:
+    name: firefox
+    state: latest
+    allow_downgrade: true
+    update_cache: true
+
+- name: install gnome shell integration
+  when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+  become: true
+  apt:
+    name: chrome-gnome-shell
+    state: latest

roles/firefox/tasks/Windows.yaml

@@ -0,0 +1,14 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: firefox
+    package_params: >-
+      /l:en-GB
+      /NoDesktopShortcut
+      /NoAutoUpdate
+    state: latest
+
+# - TODO: create extensions directory
+#   file:
+#     path: '{{ansible_env.ProgramFiles}}/Mozilla Firefox/distribution/extensions'
+#     state: directory

roles/firefox/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- include_tasks: Windows.yaml
+  when: ansible_os_family == 'Windows'
+- include_tasks: Ubuntu.yaml
+  when: ansible_distribution == 'Ubuntu'

roles/flatpak/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: add flathub repository remote
+  become: true
+  flatpak_remote:
+    name: flathub
+    state: present
+    flatpakrepo_url: https://dl.flathub.org/repo/flathub.flatpakrepo

roles/fonts/handlers/main.yaml

@@ -0,0 +1,3 @@
+---
+- name: refresh font cache
+  command: fc-cache

roles/fonts/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install Caskaydia Cove Nerd Font
+  homebrew_cask:
+    name: font-caskaydia-cove-nerd-font
+    state: latest

roles/fonts/tasks/Linux.yaml

@@ -0,0 +1,58 @@
+---
+- name: stat version file
+  stat:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_file
+
+- name: slurp version
+  when: version_file.stat.exists
+  slurp:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_slurp
+
+- when: version_file.stat.exists
+  set_fact:
+    version: '{{version_slurp.content | b64decode}}'
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/ryanoasis/nerd-fonts/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    needs_installed:
+      '{{ not version_file.stat.exists or version.strip() != latest.json.tag_name }}'
+    asset: '{{ latest.json.assets | to_json | from_json |
+      json_query("[?contains(name, `CascadiaCode.zip`)] | [0]") }}'
+
+- name: create user fonts directory
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts'
+    state: directory
+
+- name: download Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+  environment: '{{proxy_environment}}'
+
+- name: install Caskaydia Cove Nerd Font
+  when: needs_installed
+  unarchive:
+    src: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts'
+  notify: refresh font cache
+
+- name: write version file
+  copy:
+    content: '{{latest.json.tag_name}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+
+- name: remove Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    state: absent

roles/fonts/tasks/Windows.yaml

@@ -0,0 +1,5 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: nerd-fonts-CascadiaCode
+    state: latest

roles/fonts/tasks/main.yaml

@@ -0,0 +1,7 @@
+---
+- when: ansible_os_family == 'Darwin'
+  include_tasks: 'Darwin.yaml'
+- when: ansible_os_family == 'Windows'
+  include_tasks: 'Windows.yaml'
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: 'Linux.yaml'

roles/fzf/handlers/main.yaml

@@ -1,4 +1,4 @@
 ---
 - name: install fzf binaries
   command:
-    cmd: ~/.config/zsh/fzf/install --bin
+    cmd: ~/.local/src/fzf/install --bin

roles/fzf/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: fzf
+    state: latest

roles/fzf/tasks/Debian-apt.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: fzf
+    state: latest

roles/fzf/tasks/Debian-old.yaml

@@ -0,0 +1,24 @@
+---
+- name: clone fzf repo
+  git:
+    repo: https://github.com/junegunn/fzf.git
+    dest: ~/.local/src/fzf
+  notify: install fzf binaries
+- meta: flush_handlers
+
+- name: create symbolic links
+  file:
+    state: link
+    src: '{{ item.src }}'
+    dest: '{{ item.dest }}'
+  with_items:
+    - src: ~/.local/src/fzf/bin/fzf
+      dest: ~/.local/bin/fzf
+    - src: ~/.local/src/fzf/bin/fzf-tmux
+      dest: ~/.local/bin/fzf-tmux
+    - src: ~/.local/src/fzf/bin/fzf-preview.sh
+      dest: ~/.local/bin/fzf-preview.sh
+    - src: ~/.local/src/fzf/man/man1/fzf.1
+      dest: ~/.local/share/man/man1/fzf.1
+    - src: ~/.local/src/fzf/man/man1/fzf-tmux.1
+      dest: ~/.local/share/man/man1/fzf-tmux.1

roles/fzf/tasks/Debian.yaml

@@ -0,0 +1,8 @@
+---
+- when: ansible_distribution == 'Ubuntu' and
+        ansible_distribution_version is version('22.04', '<=')
+  include_tasks: Debian-old.yaml
+
+- when: not (ansible_distribution == 'Ubuntu' and
+             ansible_distribution_version is version('22.04', '<='))
+  include_tasks: Debian-apt.yaml

roles/fzf/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: fzf
+    state: latest

roles/fzf/tasks/Windows.yaml

@@ -0,0 +1,10 @@
+---
+- name: remove chocolatey package
+  win_chocolatey:
+    name: fzf
+    state: absent
+
+- name: install scoop package
+  community.windows.win_scoop:
+    name: fzf
+    state: present

roles/fzf/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/gdb/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: gdb
+    state: latest

roles/gdb/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: gdb
+    state: latest

roles/gdb/tasks/gdb-11.1-config.yaml

@@ -0,0 +1,11 @@
+---
+- set_fact:
+    gdb_config_dir: '{{ansible_env.HOME}}/.config/gdb'
+
+- name: create config directory
+  file:
+    path: '{{gdb_config_dir}}'
+    state: directory
+
+- set_fact:
+    gdb_config_file: '{{gdb_config_dir}}/gdbinit'

roles/gdb/tasks/main.yaml

@@ -0,0 +1,34 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+# gdb 11.1 introduced support for config files that respect the XDG base
+# directory spec, handle the boths paths dependant on the gdb version install.
+- name: get installed version
+  command: gdb --version
+  register: gdb_version_output
+  changed_when: false
+
+- set_fact:
+    gdb_version: '{{gdb_version_output.stdout | regex_search("(\d+)\.(\d+)", "\1", "\2")}}'
+- set_fact:
+    gdb_xdg_base_dir_check:
+      gdb_version[0] | int > 11 or (
+        gdb_version[0] | int == 11 and gdb_version[1] | int == 1
+      )
+
+- set_fact:
+    gdb_config_file: '{{ansible_env.HOME}}/.gdbinit'
+    gdb_state_dir: '{{ansible_env.HOME}}/.local/state/gdb'
+
+- when: gdb_xdg_base_dir_check
+  include_tasks: gdb-11.1-config.yaml
+
+- name: create config file
+  template:
+    src: gdbinit
+    dest: '{{gdb_config_file}}'
+
+- name: create state directory
+  file:
+    path: '{{gdb_state_dir}}'
+    state: directory

roles/gdb/templates/gdbinit

@@ -0,0 +1,3 @@
+# Enable saving command history
+set history filename {{gdb_state_dir}}/history
+set history save on

roles/gh/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: gh
+    state: latest

roles/gh/tasks/Debian.yaml

@@ -0,0 +1,38 @@
+---
+- set_fact:
+    arch_map:
+      aarch64: arm64
+      armv6l: armhf
+      armv7l: armhf
+      i386: i386
+      x86_64: amd64
+- set_fact:
+    arch: '{{ [ansible_architecture] | map("extract", arch_map) | first }}'
+
+- name: download apt repository key
+  become: true
+  get_url:
+    url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
+    dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
+    mode: 0644
+  environment: '{{proxy_environment}}'
+
+- name: add apt repository list
+  become: true
+  apt_repository:
+    filename: github-cli
+    repo: 'deb [arch={{arch}} signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main'
+    state: present
+
+- name: install apt package
+  become: true
+  apt:
+    name: gh
+    state: latest
+    update_cache: true
+  register: gh_apt
+
+- name: install zsh completions
+  when: gh_apt.changed
+  become: true
+  shell: gh completion -s zsh > /usr/local/share/zsh/site-functions/_gh

roles/gh/tasks/RedHat.yaml

@@ -0,0 +1,13 @@
+---
+- name: add dnf repository
+  become: true
+  get_url:
+    url: https://cli.github.com/packages/rpm/gh-cli.repo
+    dest: /etc/yum.repos.d/gh-cli.repo
+  environment: '{{proxy_environment}}'
+
+- name: install dnf package
+  become: true
+  dnf:
+    name: gh
+    state: latest

roles/gh/tasks/Windows.yaml

@@ -0,0 +1,10 @@
+---
+- name: remove chocolatey package
+  win_chocolatey:
+    name: gh
+    state: absent
+
+- name: install scoop package
+  community.windows.win_scoop:
+    name: gh
+    state: present

roles/gh/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/git/tasks/Windows-installer.yaml

@@ -0,0 +1,36 @@
+---
+- name: get json containing all releases
+  win_uri:
+    url: 'https://api.github.com/repos/git-for-windows/git/releases/tags/v{{git_version}}.windows.1'
+    headers: '{{github_auth_headers}}'
+    return_content: true
+  register: git_release
+
+- set_fact:
+    git_installer_exe: 'Git-{{git_version}}-64-bit.exe'
+- set_fact:
+    git_asset_query: '[?contains(name, `{{git_installer_exe}}`)] | [0]'
+    git_installer_path: '{{ansible_env.TEMP}}/{{git_installer_exe}}'
+- name: select asset from release
+  set_fact:
+    git_asset: '{{git_release.json.assets | json_query(git_asset_query)}}'
+
+- name: download installer
+  win_get_url:
+    url: '{{git_asset.browser_download_url}}'
+    dest: '{{git_installer_path}}'
+  environment: '{{proxy_environment}}'
+
+- name: run installer command
+  win_command:
+    argv:
+      - '{{git_installer_path}}'
+      - '/GitAndUnixToolsOnPath'
+      - '/NoShellIntegration'
+      - '/NoGuiHereIntegration'
+      - '/NoCredentialManager'
+      - '/NoOpenSSH'
+      - '/Silent'
+      - '/SuppressMsgBoxes'
+      - '/NoCancel'
+      - '/NoRestart'

roles/git/tasks/Windows.yaml

@@ -1,9 +1,45 @@
 ---
+# Pinned to 2.36.1 because the unofficial win_git module hangs when using
+# 2.37.3, this is either a breaking change in 2.37.x or an incompatibility with
+# the win_git module. The git chocolatey package does not respect the version
+# argument and always installs the most recent version, so instead download the
+# installer from GitHub and install manually.
+- set_fact:
+    git_version: 2.36.1
+    git_cli_exe: '{{ansible_env.ProgramFiles}}/Git/cmd/git.exe'
+    git_run_installer: false
+
+- name: detect if Git for Windows is installed
+  win_stat:
+    path: '{{git_cli_exe}}'
+  register: git_cli_stat
+
+- when: not git_cli_stat.stat.exists
+  set_fact:
+    git_run_installer: true
+
+- name: check installed version
+  when: git_cli_stat.stat.exists
+  win_command: '"{{git_cli_exe}}" --version'
+  register: git_cli_version
+  changed_when: false
+
+- when: git_cli_stat.stat.exists and git_version not in git_cli_version.stdout
+  set_fact:
+    git_run_installer: true
+
+- include_tasks: Windows-installer.yaml
+  when: git_run_installer
+
+# NOTE: If this is failing on first install of git, restart the sshd service.
 - name: clone config repos
   win_git:
     repo: '{{item.repo}}'
     dest: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
-    version: master
+    version: main
   with_items: '{{git_config_repos}}'
 
-# TODO: - name: install pip packages
+# - TODO: install pip packages
+#   win_pip:
+#     name: '{{git_pip_packages}}'
+#     state: latest

roles/git/tasks/unix.yaml

@@ -3,7 +3,7 @@
   git:
     repo: '{{item.repo}}'
     dest: '~/.config/{{item.name}}'
-    version: master
+    version: main
   with_items: '{{git_config_repos}}'
 
 - name: install homebrew packages
@@ -18,8 +18,4 @@
     extra_args: --user
     state: latest
 
-- name: create symbolic links
-  file:
-    state: link
-    src: ~/.config/git/_git-changes
-    dest: ~/.local/share/zsh/site-functions/_git-changes
+- include_tasks: ~/.config/git/tasks.yaml

roles/git/vars/main.yaml

@@ -1,8 +1,8 @@
 ---
 git_config_repos:
-  - repo: git@code.infektor.net:config/git.git
+  - repo: git@git.infektor.net:config/git.git
     name: git
-  - repo: git@code.infektor.net:benie/config.git
+  - repo: git@git.infektor.net:benie/config.git
     name: private
 git_pip_packages:
   - git+https://github.com/kbenzie/git-issue.git

roles/gitea/tasks/Linux.yaml

@@ -0,0 +1,50 @@
+---
+- name: stat tea executable
+  stat:
+    path: '{{tea_package_exe}}'
+  register: tea
+
+- name: get installed version
+  when: tea.stat.exists
+  command: '{{tea_package_exe}} --version'
+  register: tea_version_string
+
+- name: extract version number
+  when: tea.stat.exists
+  set_fact:
+    installed_version: "{{tea_version_string.stdout |
+      regex_search('^.*(\\d+\\.\\d+\\.\\d+).*golang.*$', '\\1') }}"
+
+- name: get latest release json
+  uri:
+    url: https://gitea.com/api/v1/repos/gitea/tea//releases/latest
+  register: latest
+
+- name: check installed version
+  set_fact:
+    install_required: >
+      {{not tea.stat.exists or latest.json.name != 'v' + installed_version[0]}}
+    asset: '{{latest.json.assets | json_query(tea_asset_query)}}'
+
+- name: create package directory
+  when: install_required
+  become: true
+  file:
+    state: directory
+    path: '{{tea_package_dir}}/bin'
+
+- name: download package
+  when: install_required
+  become: true
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{tea_package_exe}}'
+    mode: '0755'
+  environment: '{{proxy_environment}}'
+
+- name: install package
+  when: install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{tea_package_dir}}'

roles/gitea/tasks/main.yaml

@@ -0,0 +1,12 @@
+---
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: Linux.yaml
+
+- when: ansible_os_family == 'Windows'
+  include_tasks: Windows.yaml
+
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: tea
+    state: latest

roles/gitea/vars/main.yaml

@@ -0,0 +1,4 @@
+---
+tea_package_dir: /usr/local/stow/tea
+tea_package_exe: '{{tea_package_dir}}/bin/tea'
+tea_asset_query: '[?contains(name, `tea-`)] | [?contains(name, `linux-amd64`)] | [0]'

roles/glab/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: glab
+    state: latest

roles/glab/tasks/Debian.yaml

@@ -0,0 +1,75 @@
+---
+- set_fact:
+    glab: /usr/bin/glab
+- name: stat the executable
+  stat:
+    path: '{{glab}}'
+  register: stat_glab
+
+- name: get install version
+  when: stat_glab.stat.exists
+  command: '{{glab}} --version'
+  register: glab_version_output
+  changed_when: false
+
+- when: stat_glab.stat.exists
+  set_fact:
+    glab_version: '{{glab_version_output.stdout | replace("glab version ", "v")}}'
+
+- set_fact:
+    gitlab_api: 'https://gitlab.com/api/v4'
+    project_id: 'gitlab-org%2Fcli'
+
+- name: get list of gitlab releases
+  uri:
+    url:
+      '{{gitlab_api}}/projects/{{project_id}}/releases'
+  register: releases
+
+- set_fact:
+    latest: '{{releases.json[0]}}'
+    latest_version: '{{releases.json[0].tag_name}}'
+    query: >
+      [?contains(name, `glab`)] |
+      [?contains(name, `linux`)] |
+      [?contains(name, `{{
+        {'x86_64': 'amd64', 'arm64': 'arm64'}[ansible_machine]}}.deb`)] | [0]
+- set_fact:
+    asset: '{{latest.assets.links|json_query(query)}}'
+
+- name: create download directory
+  when: glab_version is not defined or glab_version != latest_version
+  tempfile:
+    state: directory
+    suffix: glab
+  register: tempdir
+
+- name: download .deb file
+  when: glab_version is not defined or glab_version != latest_version
+  get_url:
+    url: '{{asset.url}}'
+    dest: '{{tempdir.path}}/glab.deb'
+  environment: '{{proxy_environment}}'
+
+- name: install .deb file
+  when: glab_version is not defined or glab_version != latest_version
+  become: true
+  apt:
+    deb: '{{tempdir.path}}/glab.deb'
+
+- name: remove download directory
+  when: glab_version is not defined or glab_version != latest_version
+  file:
+    state: absent
+    path: '{{tempdir.path}}'
+
+- name: get zsh completions source
+  command: glab completion -s zsh
+  register: glab_zsh_completions
+  changed_when: false
+
+- name: install zsh completions
+  become: true
+  copy:
+    content: '{{glab_zsh_completions.stdout}}'
+    dest: /usr/local/share/zsh/site-functions/_glab

roles/glab/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: glab
+    state: latest

roles/glab/tasks/Windows.yaml

@@ -0,0 +1,12 @@
+---
+- name: remove chocolatey package
+  win_chocolatey:
+    name:
+      - glab
+      - glab.portable
+    state: absent
+
+- name: install scoop package
+  community.windows.win_scoop:
+    name: glab
+    state: present

roles/glab/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/gnome-shell/tasks/Ubuntu.yaml

@@ -0,0 +1,18 @@
+---
+- name: ubuntu dock disable dock-fixed
+  gsettings:
+    schema: org.gnome.shell.extensions.dash-to-dock
+    key: dock-fixed
+    value: 'false'
+
+- name: ubuntu dock set dock-position to bottom
+  gsettings:
+    schema: org.gnome.shell.extensions.dash-to-dock
+    key: dock-position
+    value: "'BOTTOM'"
+
+- name: ubuntu dock disable extend-height
+  gsettings:
+    schema: org.gnome.shell.extensions.dash-to-dock
+    key: extend-height
+    value: 'false'

roles/gnome-shell/tasks/main.yaml

@@ -0,0 +1,71 @@
+---
+- assert:
+    that: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+
+- name: install packages
+  become: true
+  package:
+    name:
+      - gnome-tweaks
+      - gnome-themes-extra
+    state: latest
+
+- name: prefer dark mode
+  gsettings:
+    schema: org.gnome.desktop.interface
+    key: color-scheme
+    value: "'prefer-dark'"
+
+- name: disable activate-window-menu keybinding
+  gsettings:
+    schema: org.gnome.desktop.wm.keybindings
+    key: activate-window-menu
+    value: '@as []'
+
+- name: disable switch-input-source keybinding
+  gsettings:
+    schema: org.gnome.desktop.wm.keybindings
+    key: switch-input-source
+    value: '@as []'
+- name: disable switch-input-source-backward keybinding
+  gsettings:
+    schema: org.gnome.desktop.wm.keybindings
+    key: switch-input-source-backward
+    value: '@as []'
+
+# NOTE: Use this command to see default keybindings
+# gsettings list-recursively | grep -i -E 'media-keys|keybindings'
+# NOTE: Use this command to inspect the current state of the custom keybindings
+# dconf dump / | sed -n '/\[org.gnome.settings-daemon.plugins.media-keys/,/^$/p'
+
+- name: 1password quick access custom keybinding
+  dconf:
+    state: present
+    key: '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/{{item.key}}'
+    value: '{{item.value}}'
+  with_items:
+    - {key: 'binding', value: "'<Shift><Alt>space'"}
+    - {key: 'command', value: "'1password --quick-access'"}
+    - {key: 'name', value: "'1Password Quick Access'"}
+
+- name: ulauncher toggle custom keybinding
+  dconf:
+    state: present
+    key: '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/{{item.key}}'
+    value: '{{item.value}}'
+  with_items:
+    - {key: 'binding', value: "'<Alt>space'"}
+    - {key: 'command', value: "'ulauncher-toggle'"}
+    - {key: 'name', value: "'Ulauncher Toggle'"}
+
+- name: list of entries defining custom-keybindings
+  dconf:
+    state: present
+    key: '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings'
+    value: "['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/']"
+
+- when: ansible_distribution == 'Ubuntu'
+  include_tasks: Ubuntu.yaml
+
+# TODO: install gnome extensions
+# TODO: /org/gnome/shell/extensions/quake-terminal/terminal-shortcut = ['<Super>space']

roles/hiddenbar/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install homebrew package
+  homebrew_cask:
+    name: hiddenbar
+    state: latest

roles/htop/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: htop
+    state: latest

roles/htop/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: htop
+    state: latest

roles/htop/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: htop
+    state: latest