Add flatpak role for Debian

library/win_git.ps1

@@ -223,7 +223,7 @@ if ($recursive) {
 # Ensure the repository has the correct owner
 $userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
 $idRef = [System.Security.Principal.NTAccount]::new($userName)
-Get-Item -Force $dest | foreach { `
+Get-Item $dest | foreach { `
     $_ ; $_ | Get-ChildItem -Force -Recurse `
 } | foreach { `
     $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `

playbooks/1password.yaml

@@ -1,6 +1,4 @@
 ---
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
     - 1password

playbooks/Linux.yaml

@@ -2,20 +2,7 @@
 - import_playbook: LinuxCLI.yaml
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
-    - role: firefox
     - role: kitty
-    - role: guake
-    - role: cider
-    - role: ulauncher
-    - role: gnome-shell
-      when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
     - role: xremap
-      when: >
-        'GNOME' in ansible_env.XDG_CURRENT_DESKTOP and
-        ansible_env.XDG_SESSION_TYPE == 'wayland' and (
-            ansible_os_family == "RedHat" or
-            ansible_os_family == "Debian"
-        )
+      when: ansible_os_family == "RedHat"

playbooks/LinuxCLI.yaml

@@ -1,15 +1,6 @@
 ---
-- hosts: localhost
-  vars_files:
-    - vars/environment.yaml
-  roles:
-    - role: rpmfusion
-      when: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
     - role: gdb
-    - role: podman
     - role: system-info

playbooks/UnixCLI.yaml

@@ -1,24 +1,19 @@
 ---
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
     - role: sudo
       when: ansible_user_id != "root"
     - role: python
 
     - role: zsh
-      tags: unsafe
     - role: neovim
     - role: tmux
-      tags: unsafe
 
     - role: ag
     - role: bash
     - role: bat
     - role: curl
     - role: editline
-    - role: fd
     - role: fzf
     - role: gh
     - role: git
@@ -27,7 +22,6 @@
     - role: jp
     - role: jq
     - role: readline
-    - role: ripgrep
     - role: tidy
     - role: tree
     - role: watch

playbooks/UnixGUI.yaml

@@ -1,11 +1,6 @@
 ---
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
-    - role: flatpak
-      when: ansible_os_family != "Darwin"
-
     - role: 1password
     - role: ferdium
     - role: fonts

playbooks/WSL.yaml

@@ -1,7 +1,7 @@
 ---
-- import_playbook: LinuxCLI.yaml
+- import_playbook: UnixCLI.yaml
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
+    - role: gdb
     - role: wsl
+    - role: system-info

playbooks/Windows.yaml

@@ -1,7 +1,6 @@
 ---
 - hosts: windows
-  vars_files:
-    - vars/environment.yaml
+
   roles:
     - role: python
     - role: git
@@ -12,12 +11,10 @@
     - role: ag
     - role: bat
     - role: curl
-    - role: fd
     - role: fzf
     - role: gh
     - role: glab
     - role: jq
-    - role: ripgrep
     - role: tree
     - role: yq
 
@@ -26,7 +23,6 @@
 
     - role: 1password
     - role: autohotkey
-    - role: cider
     - role: ferdium
     - role: firefox
     - role: fonts

playbooks/macOS.yaml

@@ -1,22 +1,14 @@
 ---
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
     - role: system-info
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
-  vars_files:
-    - vars/environment.yaml
   roles:
     - role: mas
 
-    - role: hiddenbar
     - role: iterm
-    - role: kitty
     - role: magnet
     - role: microsoft-remote-desktop
     - role: viscosity
-
-    - role: macos

playbooks/vars/environment.yaml

@@ -1,15 +0,0 @@
----
-# GitHub may rate limit unauthenticated API requests, this is more likely when
-# behind a network proxy. Set the GITHUB_TOKEN environment variable to
-# authenticate any GitHub API requests executed while playing roles.
-github_auth_headers: >-
-  {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
-      if lookup('env', 'GITHUB_TOKEN') else {} }}
-
-# When working behind a network proxy, set the http_proxy and https_proxy
-# environment variables. These will be passed through to uses of the `get_url`
-# module when playing roles.
-proxy_environment: >-
-  {{ { 'http_proxy': lookup('env', 'http_proxy'),
-       'https_proxy': lookup('env', 'https_proxy') }
-      if lookup('env', 'http_proxy') and lookup('env', 'https_proxy') else {} }}

roles/1password/tasks/Debian.yaml

@@ -16,7 +16,6 @@
   get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
     dest: '{{keyring}}'
-  environment: '{{proxy_environment}}'
 
 - name: set compatible architecture
   when: ansible_machine == 'x86_64'

roles/1password/tasks/RedHat.yaml

@@ -1,10 +1,10 @@
 ---
-- name: add dnf repository key
+- name: add yum repository key
   become: true
   rpm_key:
     key: https://downloads.1password.com/linux/keys/1password.asc
 
-- name: add dnf repository
+- name: add yum repository
   become: true
   yum_repository:
     name: 1password
@@ -15,8 +15,8 @@
     repo_gpgcheck: true
     gpgkey: ['https://downloads.1password.com/linux/keys/1password.asc']
 
-- name: install dnf package
+- name: install yum package
   become: true
-  dnf:
+  yum:
     name: 1password
     state: latest

roles/1password/tasks/Windows.yaml

@@ -16,7 +16,6 @@
   win_get_url:
     url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
     dest: '{{installer_exe}}'
-  environment: '{{proxy_environment}}'
 
 - name: run installer
   when: not app_stat.stat.exists
@@ -69,7 +68,6 @@
   win_get_url:
     url: '{{latest.downloads.Windows.amd64}}'
     dest: '{{cli_zip}}'
-  environment: '{{proxy_environment}}'
 
 - name: unzip op zip archive
   when: cli_installed_version is not defined or cli_installed_version != latest.version

roles/ag/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install dnf package
+- name: install yum package
   become: true
-  dnf:
+  yum:
     name: the_silver_searcher
     state: latest

roles/bash/templates/bashrc

@@ -110,13 +110,3 @@ grey="\001\e[38;5;244m\002"
 reset="\001\e[0m\002"
 
 PS1="$yellow\u$reset@$grey\h$reset "
-
-# Setup environment variables
-export PATH=$HOME/.local/bin:$PATH
-if command -v nvim > /dev/null; then
-  export EDITOR=nvim
-elif command -v vim > /dev/null; then
-  export EDITOR=vim
-elif command -v vi > /dev/null; then
-  export EDITOR=vi
-fi

roles/bat/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install dnf package
+- name: install yum package
   become: true
-  dnf:
+  yum:
     name: bat
     state: latest

roles/bat/tasks/deb.yaml

@@ -2,7 +2,6 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/sharkdp/bat/releases/latest
-    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -51,7 +50,6 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{bat_deb}}'
-  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: installed_version is not defined or installed_version != latest_version

roles/cider/tasks/main.yaml

@@ -1,15 +0,0 @@
----
-- assert:
-    that: ansible_os_family != 'Darwin'
-
-- name: install chocolatey package
-  when: ansible_os_family == 'Windows'
-  win_chocolatey:
-    name: Cider
-    state: latest
-
-- name: install flatpak package
-  when: ansible_os_family != 'Windows'
-  become: true
-  flatpak:
-    name: sh.cider.Cider

roles/curl/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install dnf package
+- name: install yum package
   become: true
-  dnf:
+  yum:
     name: curl
     state: latest

roles/fd/tasks/main.yaml

@@ -1,26 +0,0 @@
----
-- name: install apt package
-  when: ansible_os_family == 'Debian'
-  become: true
-  apt:
-    name: fd-find
-    state: latest
-
-- name: install dnf package
-  when: ansible_os_family == 'RedHat'
-  become: true
-  dnf:
-    name: fd-find
-    state: latest
-
-- name: install Homebrew package
-  when: ansible_os_family == 'Darwin'
-  homebrew:
-    name: fd
-    state: latest
-
-- name: install Chocolatey package
-  when: ansible_os_family == 'Windows'
-  win_chocolatey:
-    name: fd
-    state: latest

roles/ferdium/tasks/Windows.yaml

@@ -1,14 +0,0 @@
----
-- name: install chocolatey package
-  win_chocolatey:
-    name: ferdium
-    state: latest
-
-- set_fact:
-    ferdium_exe: 'C:/Program Files/Ferdium/Ferdium.exe'
-
-- name: create start menu shortcut
-  win_shortcut:
-    src: '{{ferdium_exe}}'
-    dest: '{{ansible_env.ProgramData}}/Microsoft/Windows/Start Menu/Programs/Ferdium.lnk'
-    icon: '{{ferdium_exe}},0'

roles/ferdium/tasks/main.yaml

@@ -6,11 +6,12 @@
     state: latest
 
 - when: ansible_os_family == 'Windows'
-  include_tasks: Windows.yaml
+  win_chocolatey:
+    name: ferdium
+    state: latest
 
 - name: install flatpak package
   when: ansible_os_family != 'Windows' and
         ansible_os_family != 'Darwin'
-  become: true
   flatpak:
     name: org.ferdium.Ferdium

roles/firefox/tasks/Ubuntu.yaml

@@ -1,52 +0,0 @@
----
-- name: remove snap package
-  become: true
-  snap:
-    name: firefox
-    state: absent
-
-- name: create keyrings directory
-  become: true
-  file:
-    path: /etc/apt/keyrings
-    mode: '755'
-    state: directory
-
-- name: install mozilla repo keyring
-  become: true
-  get_url:
-    url: https://packages.mozilla.org/apt/repo-signing-key.gpg
-    dest: /etc/apt/keyrings/packages.mozilla.org.asc
-  environment: '{{proxy_environment}}'
-
-- name: add mozilla apt repo
-  become: true
-  copy:
-    content: >-
-      deb [signed-by=/etc/apt/keyrings/packages.mozilla.org.asc]
-      https://packages.mozilla.org/apt mozilla main
-    dest: /etc/apt/sources.list.d/mozilla.list
-
-- name: pin mozilla package
-  become: true
-  copy:
-    content: |
-      Package: *
-      Pin: origin packages.mozilla.org
-      Pin-Priority: 1000
-    dest: /etc/apt/preferences.d/mozilla
-
-- name: install mozilla package
-  become: true
-  apt:
-    name: firefox
-    state: latest
-    allow_downgrade: true
-    update_cache: true
-
-- name: install gnome shell integration
-  when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
-  become: true
-  apt:
-    name: chrome-gnome-shell
-    state: latest

roles/firefox/tasks/main.yaml

@@ -1,5 +1,2 @@
 ---
-- include_tasks: Windows.yaml
-  when: ansible_os_family == 'Windows'
-- include_tasks: Ubuntu.yaml
-  when: ansible_distribution == 'Ubuntu'
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/flatpak/tasks/RedHat.yaml

@@ -1,6 +0,0 @@
----
-- name: install dnf package
-  become: true
-  dnf:
-    name: flatpak
-    state: latest

roles/fonts/tasks/Linux.yaml

@@ -17,7 +17,6 @@
 - name: get latest release
   uri:
     url: https://api.github.com/repos/ryanoasis/nerd-fonts/releases/latest
-    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -37,7 +36,6 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
-  environment: '{{proxy_environment}}'
 
 - name: install Caskaydia Cove Nerd Font
   when: needs_installed

roles/fzf/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install dnf package
+- name: install yum package
   become: true
-  dnf:
+  yum:
     name: fzf
     state: latest

roles/gh/tasks/Debian.yaml

@@ -15,7 +15,6 @@
     url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
     dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
     mode: 0644
-  environment: '{{proxy_environment}}'
 
 - name: add apt repository list
   become: true

roles/gh/tasks/RedHat.yaml

@@ -1,10 +1,9 @@
 ---
-- name: add dnf repository
+- name: add yum repository
   become: true
   get_url:
     url: https://cli.github.com/packages/rpm/gh-cli.repo
     dest: /etc/yum.repos.d/gh-cli.repo
-  environment: '{{proxy_environment}}'
 
 - name: install dnf package
   become: true

roles/git/tasks/Windows-installer.yaml

@@ -2,7 +2,6 @@
 - name: get json containing all releases
   win_uri:
     url: 'https://api.github.com/repos/git-for-windows/git/releases/tags/v{{git_version}}.windows.1'
-    headers: '{{github_auth_headers}}'
     return_content: true
   register: git_release
 
@@ -19,7 +18,6 @@
   win_get_url:
     url: '{{git_asset.browser_download_url}}'
     dest: '{{git_installer_path}}'
-  environment: '{{proxy_environment}}'
 
 - name: run installer command
   win_command:

roles/git/tasks/Windows.yaml

@@ -31,7 +31,6 @@
 - include_tasks: Windows-installer.yaml
   when: git_run_installer
 
-# NOTE: If this is failing on first install of git, restart the sshd service.
 - name: clone config repos
   win_git:
     repo: '{{item.repo}}'

roles/gitea/tasks/Linux.yaml

@@ -1,50 +0,0 @@
----
-- name: stat tea executable
-  stat:
-    path: '{{tea_package_exe}}'
-  register: tea
-
-- name: get installed version
-  when: tea.stat.exists
-  command: '{{tea_package_exe}} --version'
-  register: tea_version_string
-
-- name: extract version number
-  when: tea.stat.exists
-  set_fact:
-    installed_version: "{{tea_version_string.stdout |
-      regex_search('^.*(\\d+\\.\\d+\\.\\d+).*golang.*$', '\\1') }}"
-
-- name: get latest release json
-  uri:
-    url: https://gitea.com/api/v1/repos/gitea/tea//releases/latest
-  register: latest
-
-- name: check installed version
-  set_fact:
-    install_required: >
-      {{not tea.stat.exists or latest.json.name != 'v' + installed_version[0]}}
-    asset: '{{latest.json.assets | json_query(tea_asset_query)}}'
-
-- name: create package directory
-  when: install_required
-  become: true
-  file:
-    state: directory
-    path: '{{tea_package_dir}}/bin'
-
-- name: download package
-  when: install_required
-  become: true
-  get_url:
-    url: '{{asset.browser_download_url}}'
-    dest: '{{tea_package_exe}}'
-    mode: '0755'
-  environment: '{{proxy_environment}}'
-
-- name: install package
-  when: install_required
-  become: true
-  command:
-    cmd: 'stow --target /usr/local .'
-    chdir: '{{tea_package_dir}}'

roles/gitea/tasks/main.yaml

@@ -1,12 +0,0 @@
----
-- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
-  include_tasks: Linux.yaml
-
-- when: ansible_os_family == 'Windows'
-  include_tasks: Windows.yaml
-
-- name: install homebrew package
-  when: ansible_os_family == 'Darwin'
-  homebrew:
-    name: tea
-    state: latest

roles/gitea/vars/main.yaml

@@ -1,4 +0,0 @@
----
-tea_package_dir: /usr/local/stow/tea
-tea_package_exe: '{{tea_package_dir}}/bin/tea'
-tea_asset_query: '[?contains(name, `tea-`)] | [?contains(name, `linux-amd64`)] | [0]'

roles/glab/tasks/Debian.yaml

@@ -48,7 +48,6 @@
   get_url:
     url: '{{asset.url}}'
     dest: '{{tempdir.path}}/glab.deb'
-  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: glab_version is not defined or glab_version != latest_version

roles/gnome-shell/tasks/main.yaml

@@ -1,30 +0,0 @@
----
-- assert:
-    that: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
-
-- name: install gnome-tweaks
-  become: true
-  package:
-    name: gnome-tweaks
-    state: latest
-
-# NOTE: Use this command to see default keybindings
-# gsettings list-recursively | grep -i -E 'media-keys|keybindings'
-# NOTE: Use this command to inspect the current state of the custom keybindings
-# dconf dump / | sed -n '/\[org.gnome.settings-daemon.plugins.media-keys/,/^$/p'
-
-# TODO: List of custom-keybindings
-# [org/gnome/settings-daemon/plugins/media-keys]
-# custom-keybindings=['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/']
-
-# TODO: 1Password Quick Access
-# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0]
-# binding='<Shift><Alt>space'
-# command='1password --quick-access'
-# name='1Password Quick Access'
-
-# TODO: Guake toggle - this requires removing a default binding
-# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1]
-# binding='<Super>space'
-# command='guake-toggle'
-# name='Guake Toggle'

roles/guake/tasks/main.yaml

@@ -1,9 +0,0 @@
----
-- assert:
-    that: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
-
-- name: install package
-  become: true
-  package:
-    name: guake
-    state: latest

roles/hiddenbar/tasks/main.yaml

@@ -1,8 +0,0 @@
----
-- assert:
-    that: ansible_os_family == 'Darwin'
-
-- name: install homebrew package
-  homebrew_cask:
-    name: hiddenbar
-    state: latest

roles/jp/tasks/Darwin.yaml

@@ -2,7 +2,6 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/jmespath/jp/releases/latest
-    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -40,4 +39,3 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{jp_exe}}'
     mode: +x
-  environment: '{{proxy_environment}}'

roles/jp/tasks/RedHat.yaml

@@ -19,7 +19,6 @@
 - name: get latest release
   uri:
     url: 'https://api.github.com/repos/jmespath/jp/releases/latest'
-    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if jp needs installed
@@ -50,4 +49,3 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/jp'
     mode: '0755'
-  environment: '{{proxy_environment}}'

roles/kitty/tasks/Darwin.yaml

@@ -1,5 +0,0 @@
----
-- name: install homebrew package
-  homebrew_cask:
-    name: kitty
-    state: latest

roles/llvm/tasks/Ubuntu.yaml

@@ -2,7 +2,6 @@
 - name: get latest stable github release
   uri:
     url: https://api.github.com/repos/llvm/llvm-project/releases/latest
-    headers: '{{github_auth_headers}}'
   register: llvm_latest
 
 - name: read /etc/os-release
@@ -57,7 +56,6 @@
   get_url:
     url: https://apt.llvm.org/llvm-snapshot.gpg.key
     dest: '{{keyring}}'
-  environment: '{{proxy_environment}}'
 
 - name: add upstream deb repository
   become: true

roles/macos/tasks/main.yaml

@@ -1,9 +0,0 @@
----
-- assert:
-    that: ansible_os_family == 'Darwin'
-
-- name: disable creation of .DS_Store in directories
-  osx_defaults:
-    domain: com.apple.desktopservices
-    key: DSDontWriteNetworkStores
-    value: 'true'

roles/neovim/tasks/Darwin.yaml

@@ -6,12 +6,6 @@
     state: latest
 
 - set_fact:
-    neovim_pip_packages: >
-      {{
-          neovim_pip_packages + [
-            "pynvim",
-            "greenlet"
-          ]
-      }}
+    neovim_pip_packages: '{{neovim_pip_packages + ["pynvim"]}}'
 
 - include_tasks: Unix.yaml

roles/neovim/tasks/Debian.yaml

@@ -1,114 +1,25 @@
 ---
-# Don't neovim packages because they are all behind, even Debian unstable.
-# Instead use the latest pre-build Linux package from GitHub, then stow them
-# into /usr/local.
+- name: slurp /etc/os-release
+  slurp:
+    src: /etc/os-release
+  register: os_release_slurp
+- set_fact:
+    os_release: "{{ os_release_slurp.content |
+        b64decode | trim() | replace('=', ': ') | from_yaml }}"
 
-- name: remove apt package
+- name: add neovim stable ppa
+  when: "'ID_LIKE' in os_release and os_release.ID_LIKE == 'ubuntu debian'"
   become: true
-  apt:
-    name: neovim
-    state: absent
+  apt_repository:
+    repo: ppa:neovim-ppa/stable
+    update_cache: true
 
-- name: install gnu stow for managing tar.gz package
+- name: install apt package
   become: true
   apt:
     name:
-      - stow
+      - neovim
+      - python3-neovim
     state: latest
 
-- name: install python provider pip package
-  pip:
-    name: pynvim
-    state: latest
-
-- name: stat installed executable
-  stat:
-    path: /usr/local/bin/nvim
-  register: nvim
-
-- name: get installed version
-  when: nvim.stat.exists
-  command: nvim --version
-  register: nvim_version
-  changed_when: false
-
-- when: nvim.stat.exists
-  set_fact:
-    installed_version: '{{nvim_version.stdout_lines[0][5:]}}'
-
-- name: get latest version
-  uri:
-    url: https://api.github.com/repos/neovim/neovim/releases/latest
-    headers: '{{github_auth_headers}}'
-  register: latest
-
-- set_fact:
-    install_required:
-      '{{installed_version is not defined or
-         installed_version != latest.json.tag_name}}'
-    asset_query: '[?contains(name, `nvim-linux64.tar.gz`)]'
-    package_dir: '/usr/local/lib/nvim'
-- set_fact:
-    uninstall_required: '{{nvim.stat.exists and install_required}}'
-    asset: '{{latest.json.assets | json_query(asset_query)}}'
-    package_path: '{{package_dir}}/{{latest.json.name}}'
-
-- name: uninstall old package from /usr/local
-  when: uninstall_required
-  become: true
-  command:
-    cmd: 'stow --delete --target /usr/local .'
-    chdir: '{{package_dir}}/nvim-linux64'
-
-- name: remove old package
-  become: true
-  when: uninstall_required
-  file:
-    path: '{{package_dir}}/nvim-linux64'
-    state: absent
-
-- name: create package directory
-  become: true
-  file:
-    path: '{{package_dir}}'
-    state: directory
-
-- name: download package archive
-  when: install_required
-  become: true
-  get_url:
-    url: '{{asset[0].browser_download_url}}'
-    dest: '{{package_path}}'
-  environment: '{{proxy_environment}}'
-
-- name: extract package archive
-  when: install_required
-  become: true
-  unarchive:
-    src: '{{package_path}}'
-    dest: '{{package_dir}}'
-
-- name: remove downloaded archive
-  when: install_required
-  become: true
-  file:
-    path: '{{package_path}}'
-    state: absent
-
-- name: move man to share/man
-  when: install_required
-  become: true
-  command:
-    argv:
-      - mv
-      - '{{package_dir}}/nvim-linux64/man'
-      - '{{package_dir}}/nvim-linux64/share'
-
-- name: install package to /usr/local
-  when: install_required
-  become: true
-  command:
-    cmd: 'stow --target /usr/local .'
-    chdir: '{{package_dir}}/nvim-linux64'
-
 - include_tasks: Unix.yaml

roles/neovim/tasks/Unix.yaml

@@ -4,9 +4,9 @@
 
 - name: clone config repo
   git:
-    repo: git@code.infektor.net:config/nvim.git
+    repo: git@code.infektor.net:config/vim.git
     dest: '{{vim_config_dir}}'
-    version: main
+    version: master
 
 - name: install pip packages
   pip:

roles/neovim/tasks/Windows.yaml

@@ -10,10 +10,12 @@
 
 - name: clone config repo
   win_git:
-    repo: git@code.infektor.net:config/nvim.git
+    repo: git@code.infektor.net:config/vim.git
     dest: '{{vim_config_dir}}'
-    branch: main
+    branch: master
 
+# - TODO: neovim set repo email
+#   win_git_config:
 # - TODO: neovim install pip packages
 #   win_pip:
 #     name: '{{neovim_pip_packages}}'

roles/nodejs/tasks/Debian.yaml

@@ -13,7 +13,6 @@
   get_url:
     url: 'https://nodejs.org/dist/{{latest.json[0].version}}/node-{{latest.json[0].version}}-linux-x64.tar.gz'
     dest: ~/.local/src/node/node.tar.gz
-  environment: '{{proxy_environment}}'
 
 - name: extract downloaded package
   unarchive:

roles/nodejs/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install dnf package
+- name: install yum package
   become: true
-  dnf:
+  yum:
     name: nodejs
     state: latest

roles/obsidian/tasks/Linux.yaml

@@ -1,32 +1,75 @@
 ---
-- name: install flatpak package
-  become: true
-  flatpak:
-    name: md.obsidian.Obsidian
+# TODO: Prefer Flatpak over AppImage if available
 
-# Remove old appimage if it exists
-- name: stat appimage symlink
+- name: stat symlink
   stat:
     path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
   register: symlink_file
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/obsidianmd/obsidian-releases/releases/latest
+  register: latest
+
 - set_fact:
+    appimage: 'Obsidian-{{latest.json.name}}.AppImage'
+- set_fact:
+    filepath: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     iconpath: 'share/icons/hicolor/512x512/apps/obsidian.png'
-- name: remove appimage icon file
+    asset_query: '[?contains(name, `{{appimage}}`)] | [0]'
+- set_fact:
+    needs_installed:
+      '{{not symlink_file.stat.exists or symlink_file.stat.lnk_source != filepath}}'
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: download latest version
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{filepath}}'
+    mode: '0755'
+
+- name: create directories
   file:
+    path: '{{item}}'
+    state: directory
+  with_items:
+    - '{{ansible_env.HOME}}/.local/bin'
+    - '{{ansible_env.HOME}}/.local/share/icons/hicolor/512x512/apps'
+
+- name: create symlink
+  file:
+    src: '{{filepath}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+    state: link
+
+- name: extract squashfs-root for app icon
+  when: needs_installed
+  command:
+    cmd: '{{ansible_env.HOME}}/.local/bin/Obsidian --appimage-extract'
+    chdir: '/tmp'
+
+- name: copy icon file
+  when: needs_installed
+  copy:
+    src: '/tmp/squashfs-root/usr/{{iconpath}}'
     dest: '{{ansible_env.HOME}}/.local/{{iconpath}}'
-    state: absent
-- name: remove appimage desktop file
+
+- name: remove squashfs-root directory
+  when: needs_installed
   file:
-    dest: '{{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop'
+    path: '/tmp/squashfs-root'
     state: absent
+
+- name: create desktop file
+  template:
+    src: obsidian.desktop.j2
+    dest: '{{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop'
+  notify: install desktop menu
+
 - name: remove old appimage
-  when: "'lnk_source' in symlink_file.stat"
+  when: needs_installed and symlink_file.stat.exists
   file:
     path: '{{symlink_file.stat.lnk_source}}'
     state: absent
-- name: remove appimage symlink
-  file:
-    path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
-    state: absent
 
 - include_tasks: Unix.yaml

roles/podman/tasks/main.yaml

@@ -1,26 +0,0 @@
----
-- name: install apt package
-  when: ansible_os_family == 'Debian'
-  become: true
-  apt:
-    name: podman
-    state: latest
-
-- name: install dnf package
-  when: ansible_os_family == 'RedHat'
-  become: true
-  dnf:
-    name: podman
-    state: latest
-
-- name: install Homebrew package
-  when: ansible_os_family == 'Darwin'
-  homebrew:
-    name: podman-desktop
-    state: latest
-
-- name: install Chocolatey package
-  when: ansible_os_family == 'Windows'
-  win_chocolatey:
-    name: podman-desktop
-    state: latest

roles/python/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install dnf packages
+- name: install yum packages
   become: true
-  dnf:
+  yum:
     name:
       - python3
       - python3-pip

roles/python/tasks/Unix.yaml

@@ -1,15 +1,11 @@
 ---
-- name: stat old config repo
-  stat:
-    path: ~/.config/python/.git
-  register: config_python_git
-
-- name: remove old config repo
-  when: config_python_git.stat.exists
-  file:
-    state: absent
+- name: install config repo
+  git:
+    repo: git@code.infektor.net:config/python.git
     dest: ~/.config/python
 
+# TODO: set repo email
+
 - name: create config directories
   file:
     state: directory
@@ -19,45 +15,34 @@
     - ~/.config/ipython/profile_default
     - ~/.config/pip
 
-- name: stat pip.conf
-  stat:
-    path: ~/.config/pip/pip.conf
-  register: pip_conf
-
-- name: remove pip.conf if its a symbolic link
-  when: pip_conf.stat.islnk
+# Ensure that pip.conf exists before ever installing pip packages since
+# Debian has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip
+# install --user` unless configured otherwise.
+- name: create symbolic links
   file:
-    state: absent
-    path: ~/.config/pip/pip.conf
-
-# Ensure that pip.conf exists before ever installing pip packages since Debian
-# has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip install
-# --user` unless configured otherwise.
-- name: create user pip.conf from template
-  template:
-    src: pip.conf.j2
-    dest: ~/.config/pip/pip.conf
-
-# TODO: Also configure pip to disable `EXTERNALLY-MANAGED` globally?
-
-- name: stat old ipython_config.py
-  stat:
-    path: ~/.config/ipython/profile_default/ipython_config.py
-  register: ipython_config_py
-
-- name: remove ipython_conifg.py if its a symbolic link
-  when: ipython_config_py.stat.islnk
-  file:
-    state: absent
-    path: ~/.config/ipython/profile_default/ipython_config.py
-
-- name: create ipython config from template
-  template:
-    src: ipython_config.py
-    dest: ~/.config/ipython/profile_default/ipython_config.py
+    state: link
+    src: '{{item.src}}'
+    dest: '{{item.dest}}'
+  with_items:
+    - src: ~/.config/python/flake8
+      dest: ~/.config/flake8
+    - src: ~/.config/python/pylintrc
+      dest: ~/.pylintrc
+    - src: ~/.config/python/ipython_config.py
+      dest: ~/.config/ipython/profile_default/ipython_config.py
+    - src: ~/.config/python/pip.conf
+      dest: ~/.config/pip/pip.conf
 
 - name: install pip packages
   pip:
     name: '{{python_pip_packages}}'
     state: latest
     extra_args: --user
+
+- name: create directories
+  file:
+    state: directory
+    dest: '{{item}}'
+  with_items:
+    - ~/.config/ipython/profile_default
+    - ~/.config/pip

roles/python/tasks/Windows.yaml

@@ -6,6 +6,7 @@
     state: latest
 
 # TODO: - name: install config repo
+# TODO: - name: set repo email
 # TODO: - name: install pip packages
 # TODO: - name: create config directories/files
 

roles/python/templates/ipython_config.py

@@ -1 +0,0 @@
-c.TerminalInteractiveShell.editing_mode = 'vi'

roles/python/templates/pip.conf.j2

@@ -1,8 +0,0 @@
-[global]
-break-system-packages = true
-{% if ansible_env.http_proxy is defined %}
-proxy = {{ ansible_env.http_proxy }}
-{% endif %}
-
-[list]
-format=columns

roles/ripgrep/tasks/main.yaml

@@ -1,26 +0,0 @@
----
-- name: install apt package
-  when: ansible_os_family == 'Debian'
-  become: true
-  apt:
-    name: ripgrep
-    state: latest
-
-- name: install dnf package
-  when: ansible_os_family == 'RedHat'
-  become: true
-  dnf:
-    name: ripgrep
-    state: latest
-
-- name: install Homebrew package
-  when: ansible_os_family == 'Darwin'
-  homebrew:
-    name: ripgrep
-    state: latest
-
-- name: install Chocolatey package
-  when: ansible_os_family == 'Windows'
-  win_chocolatey:
-    name: ripgrep
-    state: latest

roles/rpmfusion/tasks/main.yaml

@@ -1,31 +0,0 @@
----
-- assert:
-    that: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
-
-- name: install rpm fusion free gpg key
-  become: true
-  rpm_key:
-    key: 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-free-fedora-2020'
-    state: present
-
-- name: install rpmfusion free repository
-  become: true
-  dnf:
-    name:
-      'https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-{{ansible_distribution_major_version}}.noarch.rpm'
-    state: present
-    validate_certs: no
-
-- name: install rpmfusion non-free gpg key
-  become: true
-  rpm_key:
-    key: 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-nonfree-fedora-2020'
-    state: present
-
-- name: install rpmfusion non-free repository
-  become: true
-  dnf:
-    name:
-      'https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-{{ansible_distribution_major_version}}.noarch.rpm'
-    state: present
-    validate_certs: no

roles/system-info/tasks/Darwin.yaml

@@ -1,25 +1,4 @@
 ---
-- name: get list of running launchd services
-  command: launchctl list
-  register: launchd_running_services
-  changed_when: false
-
-- name: determine if system-info is currently running
-  set_fact:
-    system_info_debug: true
-    system_info_plist_path: '{{ansible_env.HOME}}/Library/LaunchAgents/system-info.plist'
-    system_info_running: "{{'system-info' in launchd_running_services.stdout}}"
-
-- name: install system-info launchd plist
-  template:
-    src: system-info.plist.j2
-    dest: '{{system_info_plist_path}}'
-  register: system_info_plist
-
-- name: unload running system-info launchd service
-  when: system_info_plist.changed and system_info_running
-  command: 'launchctl unload -w {{system_info_plist_path}}'
-
-- name: load system-info launchd service
-  when: system_info_plist.changed or not system_info_running
-  command: 'launchctl load -w {{system_info_plist_path}}'
+# TODO:
+# cp $script_dir/system-info.plist ~/Library/LaunchAgents/system-info.plist
+# launchctl load -w ~/Library/LaunchAgents/system-info.plist

roles/system-info/templates/system-info.plist.j2

@@ -1,19 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-  <dict>
-    <key>Label</key>
-    <string>system-info</string>
-    <key>EnvironmentVariables</key>
-    <dict>
-      <key>PATH</key>
-      <string>/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
-    </dict>
-    <key>Program</key>
-    <string>{{ansible_env.HOME}}/.config/tmux/system-info/system-info-macOS.sh</string>
-    <key>RunAtLoad</key>
-    <true/>
-    <key>KeepAlive</key>
-    <true/>
-  </dict>
-</plist>

roles/tmux/tasks/Darwin.yaml

@@ -18,7 +18,6 @@
   get_url:
     url: https://gist.githubusercontent.com/nicm/ea9cf3c93f22e0246ec858122d9abea1/raw/37ae29fc86e88b48dbc8a674478ad3e7a009f357/tmux-256color
     dest: ~/tmux-256color
-  environment: '{{proxy_environment}}'
 
 - name: compile terminal info
   when: terminfo_exists.rc == 1

roles/tmux/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install dnf packages
+- name: install yum packages
   become: true
-  dnf:
+  yum:
     name:
       - tmux
       - sysstat

roles/tmux/tasks/main.yaml

@@ -5,9 +5,8 @@
   git:
     repo: git@code.infektor.net:config/tmux.git
     dest: ~/.config/tmux
-    version: main
+    version: master
 
-- name: run install script
-  command: ~/.config/tmux/install.sh
-  register: tmux_install
-  changed_when: "'changed' in tmux_install.stdout"
+# TODO: - name: set repo email
+
+- include_tasks: ~/.config/tmux/tasks.yaml

roles/ulauncher/tasks/Debian.yaml

@@ -1,32 +0,0 @@
----
-- name: install keyring
-  when: ansible_distribution == 'Debian'
-  become: true
-  get_url:
-    url: '{{ulauncher_keyring_url}}'
-    dest: '{{ulauncher_keyring_path}}'
-    mode: '0644'
-    force: true
-  environment: '{{proxy_environment}}'
-
-- name: add apt sources list
-  when: ansible_distribution == 'Debian'
-  become: true
-  copy:
-    content: >-
-      deb [signed-by={{ulauncher_keyring_path}}]
-      http://ppa.launchpad.net/agornostal/ulauncher/ubuntu
-      {{ansible_distribution_release}} main"
-    dest: '{{ulauncher_apt_sources_list_path}}'
-
-- name: add ppa repository
-  when: ansible_distribution != 'Debian'
-  become: true
-  apt_repository:
-    repo: ppa:agornostal/ulauncher
-
-- name: install apt package
-  become: true
-  apt:
-    name: ulauncher
-    state: latest

roles/ulauncher/tasks/RedHat.yaml

@@ -1,6 +0,0 @@
----
-- name: install dnf package
-  become: true
-  dnf:
-    name: ulauncher
-    state: latest

roles/ulauncher/tasks/main.yaml

@@ -1,2 +0,0 @@
----
-- include_tasks: '{{ansible_os_family}}.yaml'

roles/ulauncher/vars/main.yaml

@@ -1,4 +0,0 @@
----
-ulauncher_keyring_url: http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x59ebde772980c381ca13fa59faf1020699503176
-ulauncher_keyring_path: /usr/share/keyrings/ulauncher-archive-keyring.gpg
-ulauncher_apt_list_path: /etc/apt/sources.list.d/ulauncher.list

roles/webcatalog/tasks/Linux.yaml

@@ -28,7 +28,6 @@
     url: 'https://cdn-2.webcatalog.io/webcatalog/{{appimage}}'
     dest: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     mode: '0755'
-  environment: '{{proxy_environment}}'
 
 - name: create directories
   file:

roles/xremap/tasks/main.yaml

@@ -1,8 +1,7 @@
 ---
 - assert:
-    that: >
-      'GNOME' in ansible_env.XDG_CURRENT_DESKTOP and
-      ansible_env.XDG_SESSION_TYPE == 'wayland'
+    that: ansible_env.XDG_CURRENT_DESKTOP == "GNOME" and
+          ansible_env.XDG_SESSION_TYPE == "wayland"
 
 - set_fact:
     install_dir: '{{ansible_env.HOME}}/.local/bin'
@@ -30,21 +29,18 @@
 - name: get latest release
   uri:
     url: https://api.github.com/repos/k0kubun/xremap/releases/latest
-    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if install needed
   set_fact:
     needs_installed:
       '{{not executable.stat.exists or installed_version != latest.json.name}}'
-    xdg_current_desktop:
-      "{{ansible_env.XDG_CURRENT_DESKTOP | regex_replace('(.*:)?(.*)', '\\2')}}"
 
 - name: construct asset query
   set_fact:
     asset_query: >
       [?contains(name, `xremap-linux-{{ansible_architecture}}-{{
-                     xdg_current_desktop | lower}}.zip`)] | [0]
+                     ansible_env.XDG_CURRENT_DESKTOP | lower}}.zip`)] | [0]
 - name: get release asset
   set_fact:
     asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
@@ -63,7 +59,6 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{install_dir}}/xremap.zip'
-  environment: '{{proxy_environment}}'
 
 - name: extract release archive
   when: needs_installed
@@ -86,14 +81,6 @@
     append: true
     groups: input
 
-- name: load the uinput kernel module
-  when: ansible_os_family == 'Debian'
-  become: true
-  copy:
-    content: |
-      uinput
-    dest: /etc/modules-load.d/uinput.conf
-
 # TODO: This works for on Fedora, author uses it on Ubuntu so I assume Debian
 # will work too. Arch and other distros are potentially different see the docs
 # https://github.com/k0kubun/xremap

roles/yq/tasks/Debian.yaml

@@ -2,7 +2,6 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/mikefarah/yq/releases/latest
-    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -36,4 +35,3 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{yq_exe}}'
     mode: +x
-  environment: '{{proxy_environment}}'

roles/yq/tasks/RedHat.yaml

@@ -19,7 +19,6 @@
 - name: get latest release
   uri:
     url: 'https://api.github.com/repos/mikefarah/yq/releases/latest'
-    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if yq needs installed
@@ -50,4 +49,3 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/yq'
     mode: '0755'
-  environment: '{{proxy_environment}}'

roles/zsh/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install dnf packages
+- name: install yum packages
   become: true
-  dnf:
+  yum:
     name:
       - zsh
       - pinentry-tty

roles/zsh/tasks/main.yaml

@@ -5,12 +5,77 @@
   git:
     repo: git@code.infektor.net:config/zsh.git
     dest: ~/.config/zsh
-    version: main
+    version: master
 
-- name: run install script
-  command: ~/.config/zsh/install.zsh
-  register: zsh_install
-  changed_when: "'changed' in zsh_install.stdout"
+- name: clone plugin repos
+  git:
+    repo: '{{item.repo}}'
+    dest: '{{item.dest}}'
+  with_items:
+    - repo: https://github.com/zsh-users/zsh-autosuggestions.git
+      dest: ~/.config/zsh/zsh-autosuggestions
+    - repo: https://github.com/zsh-users/zsh-history-substring-search.git
+      dest: ~/.config/zsh/zsh-history-substring-search
+    - repo: https://github.com/zsh-users/zsh-syntax-highlighting.git
+      dest: ~/.config/zsh/zsh-syntax-highlighting
+    - repo: https://github.com/zsh-users/zsh-completions.git
+      dest: ~/.config/zsh/zsh-completions
+  loop_control:
+    label: '{{item.repo | regex_search("https://github.com/(.*)\.git$", "\1")}}'
+
+- name: create directories
+  file:
+    state: directory
+    dest: '{{item}}'
+  with_items:
+    - ~/.local/bin
+    - ~/.local/share/zsh/site-functions
+
+- name: create symbolic links
+  file:
+    state: link
+    src: '{{item.src}}'
+    dest: '{{item.dest}}'
+  with_items:
+    - src: ~/.config/zsh/zlogin
+      dest: ~/.zlogin
+    - src: ~/.config/zsh/zlogout
+      dest: ~/.zlogout
+    - src: ~/.config/zsh/zprofile
+      dest: ~/.zprofile
+    - src: ~/.config/zsh/zshenv
+      dest: ~/.zshenv
+    - src: ~/.config/zsh/zshrc
+      dest: ~/.zshrc
+    - src: ~/.config/zsh/prompt_fresh_setup
+      dest: ~/.local/share/zsh/site-functions/prompt_fresh_setup
+    - src: ~/.config/zsh/build/_build-dir
+      dest: ~/.local/share/zsh/site-functions/_build-dir
+    - src: ~/.config/zsh/sandbox/_sandbox
+      dest: ~/.local/share/zsh/site-functions/_sandbox
+    - src: ~/.config/zsh/layout/_layout
+      dest: ~/.local/share/zsh/site-functions/_layout
+    - src: ~/.config/zsh/notes/_note
+      dest: ~/.local/share/zsh/site-functions/_note
+    - src: ~/.config/zsh/cmake-uninstall
+      dest: ~/.local/bin/cmake-uninstall
+    - src: ~/.config/zsh/$
+      dest: ~/.local/bin/$
+  loop_control:
+    label: '{{item.dest}}'
+
+- name: list commands with available completions
+  command:
+    zsh {{ansible_env.HOME}}/.config/zsh/list-commands-with-available-completions.zsh
+  changed_when: false
+  register: completion_commands
+
+- name: install completions for available commands
+  file:
+    state: link
+    src: '~/.config/zsh/zsh-completions/src/_{{item}}'
+    dest: '~/.local/share/zsh/site-functions/_{{item}}'
+  with_items: '{{completion_commands.stdout}}'
 
 - name: get absolute path
   shell: command -v zsh