Update kitty to install from GitHub on Debian

Older version of kitty have terrible font rendering on Linux, e.g. the
one shipped with Ubuntu 22.04, so instead install the latest version
from the provided GitHub packages.

library/win_git.ps1

@@ -223,7 +223,7 @@ if ($recursive) {
 # Ensure the repository has the correct owner
 $userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
 $idRef = [System.Security.Principal.NTAccount]::new($userName)
-Get-Item $dest | foreach { `
+Get-Item -Force $dest | foreach { `
     $_ ; $_ | Get-ChildItem -Force -Recurse `
 } | foreach { `
     $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `

playbooks/1password.yaml

@@ -1,4 +1,6 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - 1password

playbooks/Linux.yaml

@@ -2,7 +2,20 @@
 - import_playbook: LinuxCLI.yaml
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
+    - role: firefox
     - role: kitty
+    - role: guake
+    - role: cider
+    - role: ulauncher
+    - role: gnome-shell
+      when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
     - role: xremap
-      when: ansible_os_family == "RedHat"
+      when: >
+        'GNOME' in ansible_env.XDG_CURRENT_DESKTOP and
+        ansible_env.XDG_SESSION_TYPE == 'wayland' and (
+            ansible_os_family == "RedHat" or
+            ansible_os_family == "Debian"
+        )

playbooks/LinuxCLI.yaml

@@ -1,6 +1,15 @@
 ---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: rpmfusion
+      when: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: gdb
+    - role: podman
     - role: system-info

playbooks/UnixCLI.yaml

@@ -1,19 +1,24 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: sudo
       when: ansible_user_id != "root"
     - role: python
 
     - role: zsh
+      tags: unsafe
     - role: neovim
     - role: tmux
+      tags: unsafe
 
     - role: ag
     - role: bash
     - role: bat
     - role: curl
     - role: editline
+    - role: fd
     - role: fzf
     - role: gh
     - role: git
@@ -22,6 +27,7 @@
     - role: jp
     - role: jq
     - role: readline
+    - role: ripgrep
     - role: tidy
     - role: tree
     - role: watch

playbooks/UnixGUI.yaml

@@ -1,6 +1,11 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
+    - role: flatpak
+      when: ansible_os_family != "Darwin"
+
     - role: 1password
     - role: ferdium
     - role: fonts

playbooks/WSL.yaml

@@ -1,7 +1,7 @@
 ---
-- import_playbook: UnixCLI.yaml
+- import_playbook: LinuxCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
-    - role: gdb
     - role: wsl
-    - role: system-info

playbooks/Windows.yaml

@@ -1,6 +1,7 @@
 ---
 - hosts: windows
-
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: python
     - role: git
@@ -11,10 +12,12 @@
     - role: ag
     - role: bat
     - role: curl
+    - role: fd
     - role: fzf
     - role: gh
     - role: glab
     - role: jq
+    - role: ripgrep
     - role: tree
     - role: yq
 
@@ -23,6 +26,7 @@
 
     - role: 1password
     - role: autohotkey
+    - role: cider
     - role: ferdium
     - role: firefox
     - role: fonts

playbooks/macOS.yaml

@@ -1,14 +1,22 @@
 ---
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: system-info
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: mas
 
+    - role: hiddenbar
     - role: iterm
+    - role: kitty
     - role: magnet
     - role: microsoft-remote-desktop
     - role: viscosity
+
+    - role: macos

playbooks/vars/environment.yaml

@@ -0,0 +1,15 @@
+---
+# GitHub may rate limit unauthenticated API requests, this is more likely when
+# behind a network proxy. Set the GITHUB_TOKEN environment variable to
+# authenticate any GitHub API requests executed while playing roles.
+github_auth_headers: >-
+  {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
+      if lookup('env', 'GITHUB_TOKEN') else {} }}
+
+# When working behind a network proxy, set the http_proxy and https_proxy
+# environment variables. These will be passed through to uses of the `get_url`
+# module when playing roles.
+proxy_environment: >-
+  {{ { 'http_proxy': lookup('env', 'http_proxy'),
+       'https_proxy': lookup('env', 'https_proxy') }
+      if lookup('env', 'http_proxy') and lookup('env', 'https_proxy') else {} }}

roles/1password/tasks/Debian.yaml

@@ -16,6 +16,7 @@
   get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: set compatible architecture
   when: ansible_machine == 'x86_64'

roles/1password/tasks/RedHat.yaml

@@ -1,10 +1,10 @@
 ---
-- name: add yum repository key
+- name: add dnf repository key
   become: true
   rpm_key:
     key: https://downloads.1password.com/linux/keys/1password.asc
 
-- name: add yum repository
+- name: add dnf repository
   become: true
   yum_repository:
     name: 1password
@@ -15,8 +15,8 @@
     repo_gpgcheck: true
     gpgkey: ['https://downloads.1password.com/linux/keys/1password.asc']
 
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: 1password
     state: latest

roles/1password/tasks/Windows.yaml

@@ -16,6 +16,7 @@
   win_get_url:
     url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
     dest: '{{installer_exe}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer
   when: not app_stat.stat.exists
@@ -68,6 +69,7 @@
   win_get_url:
     url: '{{latest.downloads.Windows.amd64}}'
     dest: '{{cli_zip}}'
+  environment: '{{proxy_environment}}'
 
 - name: unzip op zip archive
   when: cli_installed_version is not defined or cli_installed_version != latest.version

roles/ag/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: the_silver_searcher
     state: latest

roles/bash/templates/bashrc

@@ -110,3 +110,13 @@ grey="\001\e[38;5;244m\002"
 reset="\001\e[0m\002"
 
 PS1="$yellow\u$reset@$grey\h$reset "
+
+# Setup environment variables
+export PATH=$HOME/.local/bin:$PATH
+if command -v nvim > /dev/null; then
+  export EDITOR=nvim
+elif command -v vim > /dev/null; then
+  export EDITOR=vim
+elif command -v vi > /dev/null; then
+  export EDITOR=vi
+fi

roles/bat/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: bat
     state: latest

roles/bat/tasks/deb.yaml

@@ -2,6 +2,7 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/sharkdp/bat/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -50,6 +51,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{bat_deb}}'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: installed_version is not defined or installed_version != latest_version

roles/cider/tasks/main.yaml

@@ -0,0 +1,15 @@
+---
+- assert:
+    that: ansible_os_family != 'Darwin'
+
+- name: install chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: Cider
+    state: latest
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows'
+  become: true
+  flatpak:
+    name: sh.cider.Cider

roles/curl/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: curl
     state: latest

roles/fd/tasks/main.yaml

@@ -0,0 +1,26 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: fd-find
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: fd-find
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: fd
+    state: latest
+
+- name: install Chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: fd
+    state: latest

roles/ferdium/tasks/Windows.yaml

@@ -0,0 +1,14 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: ferdium
+    state: latest
+
+- set_fact:
+    ferdium_exe: 'C:/Program Files/Ferdium/Ferdium.exe'
+
+- name: create start menu shortcut
+  win_shortcut:
+    src: '{{ferdium_exe}}'
+    dest: '{{ansible_env.ProgramData}}/Microsoft/Windows/Start Menu/Programs/Ferdium.lnk'
+    icon: '{{ferdium_exe}},0'

roles/ferdium/tasks/main.yaml

@@ -6,12 +6,11 @@
     state: latest
 
 - when: ansible_os_family == 'Windows'
-  win_chocolatey:
+  include_tasks: Windows.yaml
-    name: ferdium
-    state: latest
 
 - name: install flatpak package
   when: ansible_os_family != 'Windows' and
         ansible_os_family != 'Darwin'
+  become: true
   flatpak:
     name: org.ferdium.Ferdium

roles/firefox/tasks/Ubuntu.yaml

@@ -0,0 +1,52 @@
+---
+- name: remove snap package
+  become: true
+  snap:
+    name: firefox
+    state: absent
+
+- name: create keyrings directory
+  become: true
+  file:
+    path: /etc/apt/keyrings
+    mode: '755'
+    state: directory
+
+- name: install mozilla repo keyring
+  become: true
+  get_url:
+    url: https://packages.mozilla.org/apt/repo-signing-key.gpg
+    dest: /etc/apt/keyrings/packages.mozilla.org.asc
+  environment: '{{proxy_environment}}'
+
+- name: add mozilla apt repo
+  become: true
+  copy:
+    content: >-
+      deb [signed-by=/etc/apt/keyrings/packages.mozilla.org.asc]
+      https://packages.mozilla.org/apt mozilla main
+    dest: /etc/apt/sources.list.d/mozilla.list
+
+- name: pin mozilla package
+  become: true
+  copy:
+    content: |
+      Package: *
+      Pin: origin packages.mozilla.org
+      Pin-Priority: 1000
+    dest: /etc/apt/preferences.d/mozilla
+
+- name: install mozilla package
+  become: true
+  apt:
+    name: firefox
+    state: latest
+    allow_downgrade: true
+    update_cache: true
+
+- name: install gnome shell integration
+  when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+  become: true
+  apt:
+    name: chrome-gnome-shell
+    state: latest

roles/firefox/tasks/main.yaml

@@ -1,2 +1,5 @@
 ---
-- include_tasks: '{{ansible_os_family}}.yaml'
+- include_tasks: Windows.yaml
+  when: ansible_os_family == 'Windows'
+- include_tasks: Ubuntu.yaml
+  when: ansible_distribution == 'Ubuntu'

roles/flatpak/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: add flathub repository remote
+  become: true
+  flatpak_remote:
+    name: flathub
+    state: present
+    flatpakrepo_url: https://dl.flathub.org/repo/flathub.flatpakrepo

roles/fonts/tasks/Linux.yaml

@@ -17,6 +17,7 @@
 - name: get latest release
   uri:
     url: https://api.github.com/repos/ryanoasis/nerd-fonts/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -36,6 +37,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+  environment: '{{proxy_environment}}'
 
 - name: install Caskaydia Cove Nerd Font
   when: needs_installed

roles/fzf/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: fzf
     state: latest

roles/gh/tasks/Debian.yaml

@@ -15,6 +15,7 @@
     url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
     dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
     mode: 0644
+  environment: '{{proxy_environment}}'
 
 - name: add apt repository list
   become: true

roles/gh/tasks/RedHat.yaml

@@ -1,9 +1,10 @@
 ---
-- name: add yum repository
+- name: add dnf repository
   become: true
   get_url:
     url: https://cli.github.com/packages/rpm/gh-cli.repo
     dest: /etc/yum.repos.d/gh-cli.repo
+  environment: '{{proxy_environment}}'
 
 - name: install dnf package
   become: true

roles/git/tasks/Windows-installer.yaml

@@ -2,6 +2,7 @@
 - name: get json containing all releases
   win_uri:
     url: 'https://api.github.com/repos/git-for-windows/git/releases/tags/v{{git_version}}.windows.1'
+    headers: '{{github_auth_headers}}'
     return_content: true
   register: git_release
 
@@ -18,6 +19,7 @@
   win_get_url:
     url: '{{git_asset.browser_download_url}}'
     dest: '{{git_installer_path}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer command
   win_command:

roles/git/tasks/Windows.yaml

@@ -31,6 +31,7 @@
 - include_tasks: Windows-installer.yaml
   when: git_run_installer
 
+# NOTE: If this is failing on first install of git, restart the sshd service.
 - name: clone config repos
   win_git:
     repo: '{{item.repo}}'

roles/gitea/tasks/Linux.yaml

@@ -0,0 +1,50 @@
+---
+- name: stat tea executable
+  stat:
+    path: '{{tea_package_exe}}'
+  register: tea
+
+- name: get installed version
+  when: tea.stat.exists
+  command: '{{tea_package_exe}} --version'
+  register: tea_version_string
+
+- name: extract version number
+  when: tea.stat.exists
+  set_fact:
+    installed_version: "{{tea_version_string.stdout |
+      regex_search('^.*(\\d+\\.\\d+\\.\\d+).*golang.*$', '\\1') }}"
+
+- name: get latest release json
+  uri:
+    url: https://gitea.com/api/v1/repos/gitea/tea//releases/latest
+  register: latest
+
+- name: check installed version
+  set_fact:
+    install_required: >
+      {{not tea.stat.exists or latest.json.name != 'v' + installed_version[0]}}
+    asset: '{{latest.json.assets | json_query(tea_asset_query)}}'
+
+- name: create package directory
+  when: install_required
+  become: true
+  file:
+    state: directory
+    path: '{{tea_package_dir}}/bin'
+
+- name: download package
+  when: install_required
+  become: true
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{tea_package_exe}}'
+    mode: '0755'
+  environment: '{{proxy_environment}}'
+
+- name: install package
+  when: install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{tea_package_dir}}'

roles/gitea/tasks/main.yaml

@@ -0,0 +1,12 @@
+---
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: Linux.yaml
+
+- when: ansible_os_family == 'Windows'
+  include_tasks: Windows.yaml
+
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: tea
+    state: latest

roles/gitea/vars/main.yaml

@@ -0,0 +1,4 @@
+---
+tea_package_dir: /usr/local/stow/tea
+tea_package_exe: '{{tea_package_dir}}/bin/tea'
+tea_asset_query: '[?contains(name, `tea-`)] | [?contains(name, `linux-amd64`)] | [0]'

roles/glab/tasks/Debian.yaml

@@ -48,6 +48,7 @@
   get_url:
     url: '{{asset.url}}'
     dest: '{{tempdir.path}}/glab.deb'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: glab_version is not defined or glab_version != latest_version

roles/gnome-shell/tasks/main.yaml

@@ -0,0 +1,30 @@
+---
+- assert:
+    that: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+
+- name: install gnome-tweaks
+  become: true
+  package:
+    name: gnome-tweaks
+    state: latest
+
+# NOTE: Use this command to see default keybindings
+# gsettings list-recursively | grep -i -E 'media-keys|keybindings'
+# NOTE: Use this command to inspect the current state of the custom keybindings
+# dconf dump / | sed -n '/\[org.gnome.settings-daemon.plugins.media-keys/,/^$/p'
+
+# TODO: List of custom-keybindings
+# [org/gnome/settings-daemon/plugins/media-keys]
+# custom-keybindings=['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/']
+
+# TODO: 1Password Quick Access
+# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0]
+# binding='<Shift><Alt>space'
+# command='1password --quick-access'
+# name='1Password Quick Access'
+
+# TODO: Guake toggle - this requires removing a default binding
+# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1]
+# binding='<Super>space'
+# command='guake-toggle'
+# name='Guake Toggle'

roles/guake/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- assert:
+    that: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+
+- name: install package
+  become: true
+  package:
+    name: guake
+    state: latest

roles/hiddenbar/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install homebrew package
+  homebrew_cask:
+    name: hiddenbar
+    state: latest

roles/jp/tasks/Darwin.yaml

@@ -2,6 +2,7 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/jmespath/jp/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -39,3 +40,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{jp_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/jp/tasks/RedHat.yaml

@@ -19,6 +19,7 @@
 - name: get latest release
   uri:
     url: 'https://api.github.com/repos/jmespath/jp/releases/latest'
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if jp needs installed
@@ -49,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/jp'
     mode: '0755'
+  environment: '{{proxy_environment}}'

roles/kitty/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew_cask:
+    name: kitty
+    state: latest

roles/kitty/tasks/Debian.yaml

@@ -1,6 +1,98 @@
 ---
-- name: install apt package
+- name: remove apt package
   become: true
   apt:
     name: kitty
-    state: latest
+    state: absent
+
+- name: get latest version
+  uri:
+    url: https://api.github.com/repos/kovidgoyal/kitty/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    kitty_latest_version: '{{latest.json.tag_name[1:]}}'
+    kitty_exe: /usr/local/bin/kitty
+    kitty_package_dir: /usr/local/stow/kitty
+
+- name: check if already installed
+  stat:
+    path: '{{kitty_exe}}'
+  register: kitty
+
+- name: get installed version
+  when: kitty.stat.exists
+  command: '{{kitty_exe}} --version'
+  register: kitty_version
+  changed_when: false
+
+- when: kitty.stat.exists
+  set_fact:
+    kitty_install_version:
+      '{{kitty_version.stdout | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- set_fact:
+    kitty_asset_query: >
+      [? contains(name,
+        `kitty-{{kitty_latest_version}}-{{ansible_architecture}}.txz`)] | [0]
+
+- set_fact:
+    kitty_install_required: >
+      {{ kitty_install_version is not defined or
+        kitty_latest_version != kitty_install_version }}
+    kitty_asset: "{{ latest.json.assets | json_query(kitty_asset_query) }}"
+
+- name: uninstall package
+  when: kitty_install_required and kitty.stat.exists
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{kitty_package_dir}}'
+
+- name: remove outdated package
+  when: kitty_install_required and kitty.stat.exists
+  become: true
+  file:
+    state: absent
+    path: '{{kitty_package_dir}}'
+
+- set_fact:
+    kitty_package_archive: '{{kitty_package_dir}}/{{kitty_asset.name}}'
+
+- name: create package directory
+  become: true
+  file:
+    state: directory
+    path: '{{kitty_package_dir}}'
+
+- name: download package
+  when: kitty_install_required
+  become: true
+  get_url:
+    url: '{{kitty_asset.browser_download_url}}'
+    dest: '{{kitty_package_archive}}'
+  environment: '{{proxy_environment}}'
+
+- name: decompress package
+  when: kitty_install_required
+  become: true
+  unarchive:
+    src: '{{kitty_package_archive}}'
+    dest: '{{kitty_package_dir}}'
+    owner: root
+    group: staff
+
+- name: remove package archive
+  when: kitty_install_required
+  become: true
+  file:
+    state: absent
+    path: '{{kitty_package_archive}}'
+
+- name: install package
+  when: kitty_install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{kitty_package_dir}}'

roles/llvm/tasks/Ubuntu.yaml

@@ -2,6 +2,7 @@
 - name: get latest stable github release
   uri:
     url: https://api.github.com/repos/llvm/llvm-project/releases/latest
+    headers: '{{github_auth_headers}}'
   register: llvm_latest
 
 - name: read /etc/os-release
@@ -56,6 +57,7 @@
   get_url:
     url: https://apt.llvm.org/llvm-snapshot.gpg.key
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: add upstream deb repository
   become: true

roles/macos/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: disable creation of .DS_Store in directories
+  osx_defaults:
+    domain: com.apple.desktopservices
+    key: DSDontWriteNetworkStores
+    value: 'true'

roles/neovim/tasks/Darwin.yaml

@@ -6,6 +6,12 @@
     state: latest
 
 - set_fact:
-    neovim_pip_packages: '{{neovim_pip_packages + ["pynvim"]}}'
+    neovim_pip_packages: >
+      {{
+          neovim_pip_packages + [
+            "pynvim",
+            "greenlet"
+          ]
+      }}
 
 - include_tasks: Unix.yaml

roles/neovim/tasks/Debian.yaml

@@ -1,25 +1,136 @@
 ---
-- name: slurp /etc/os-release
+# Don't neovim packages because they are all behind, even Debian unstable.
-  slurp:
+# Instead use the latest pre-build Linux package from GitHub, then stow them
-    src: /etc/os-release
+# into /usr/local.
-  register: os_release_slurp
-- set_fact:
-    os_release: "{{ os_release_slurp.content |
-        b64decode | trim() | replace('=', ': ') | from_yaml }}"
 
-- name: add neovim stable ppa
+- name: remove apt package
-  when: "'ID_LIKE' in os_release and os_release.ID_LIKE == 'ubuntu debian'"
   become: true
-  apt_repository:
+  apt:
-    repo: ppa:neovim-ppa/stable
+    name: neovim
-    update_cache: true
+    state: absent
 
-- name: install apt package
+- set_fact:
+    old_package_dir: '/usr/local/lib/nvim/nvim-linux64'
+
+- name: check if old package directory exists
+  stat:
+    path: '{{old_package_dir}}'
+  register: old_package
+
+- name: uninstall package from old directory
+  when: old_package.stat.exists
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{old_package_dir}}'
+
+- name: remove old package directory
+  when: old_package.stat.exists
+  become: true
+  file:
+    state: absent
+    path: '{{old_package_dir}}'
+
+- name: install gnu stow for managing tar.gz package
   become: true
   apt:
     name:
-      - neovim
+      - stow
-      - python3-neovim
     state: latest
 
+- name: install python provider pip package
+  pip:
+    name: pynvim
+    state: latest
+
+- name: stat installed executable
+  stat:
+    path: /usr/local/bin/nvim
+  register: nvim
+
+- name: get installed version
+  when: nvim.stat.exists
+  command: nvim --version
+  register: nvim_version
+  changed_when: false
+
+- when: nvim.stat.exists
+  set_fact:
+    installed_version: '{{nvim_version.stdout_lines[0][5:]}}'
+
+- name: get latest version
+  uri:
+    url: https://api.github.com/repos/neovim/neovim/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    install_required:
+      '{{installed_version is not defined or
+         installed_version != latest.json.tag_name}}'
+    asset_query: '[?contains(name, `nvim-linux64.tar.gz`)]'
+    package_dir: '/usr/local/stow/nvim'
+- set_fact:
+    uninstall_required: '{{nvim.stat.exists and install_required}}'
+    asset: '{{latest.json.assets | json_query(asset_query)}}'
+    package_path: '{{package_dir}}/{{latest.json.name}}'
+
+- name: uninstall old package from /usr/local
+  when: uninstall_required
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{package_dir}}/nvim-linux64'
+
+- name: remove old package
+  become: true
+  when: uninstall_required
+  file:
+    path: '{{package_dir}}/nvim-linux64'
+    state: absent
+
+- name: create package directory
+  become: true
+  file:
+    path: '{{package_dir}}'
+    state: directory
+
+- name: download package archive
+  when: install_required
+  become: true
+  get_url:
+    url: '{{asset[0].browser_download_url}}'
+    dest: '{{package_path}}'
+  environment: '{{proxy_environment}}'
+
+- name: extract package archive
+  when: install_required
+  become: true
+  unarchive:
+    src: '{{package_path}}'
+    dest: '{{package_dir}}'
+
+- name: remove downloaded archive
+  when: install_required
+  become: true
+  file:
+    path: '{{package_path}}'
+    state: absent
+
+- name: move man to share/man
+  when: install_required
+  become: true
+  command:
+    argv:
+      - mv
+      - '{{package_dir}}/nvim-linux64/man'
+      - '{{package_dir}}/nvim-linux64/share'
+
+- name: install package to /usr/local
+  when: install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{package_dir}}/nvim-linux64'
+
 - include_tasks: Unix.yaml

roles/neovim/tasks/Unix.yaml

@@ -4,9 +4,9 @@
 
 - name: clone config repo
   git:
-    repo: git@code.infektor.net:config/vim.git
+    repo: git@code.infektor.net:config/nvim.git
     dest: '{{vim_config_dir}}'
-    version: master
+    version: main
 
 - name: install pip packages
   pip:

roles/neovim/tasks/Windows.yaml

@@ -10,12 +10,10 @@
 
 - name: clone config repo
   win_git:
-    repo: git@code.infektor.net:config/vim.git
+    repo: git@code.infektor.net:config/nvim.git
     dest: '{{vim_config_dir}}'
-    branch: master
+    branch: main
 
-# - TODO: neovim set repo email
-#   win_git_config:
 # - TODO: neovim install pip packages
 #   win_pip:
 #     name: '{{neovim_pip_packages}}'

roles/nodejs/tasks/Debian.yaml

@@ -13,6 +13,7 @@
   get_url:
     url: 'https://nodejs.org/dist/{{latest.json[0].version}}/node-{{latest.json[0].version}}-linux-x64.tar.gz'
     dest: ~/.local/src/node/node.tar.gz
+  environment: '{{proxy_environment}}'
 
 - name: extract downloaded package
   unarchive:

roles/nodejs/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: nodejs
     state: latest

roles/obsidian/tasks/Linux.yaml

@@ -1,75 +1,32 @@
 ---
-# TODO: Prefer Flatpak over AppImage if available
+- name: install flatpak package
+  become: true
+  flatpak:
+    name: md.obsidian.Obsidian
 
-- name: stat symlink
+# Remove old appimage if it exists
+- name: stat appimage symlink
   stat:
     path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
   register: symlink_file
-
-- name: get latest release
-  uri:
-    url: https://api.github.com/repos/obsidianmd/obsidian-releases/releases/latest
-  register: latest
-
 - set_fact:
-    appimage: 'Obsidian-{{latest.json.name}}.AppImage'
-- set_fact:
-    filepath: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     iconpath: 'share/icons/hicolor/512x512/apps/obsidian.png'
-    asset_query: '[?contains(name, `{{appimage}}`)] | [0]'
+- name: remove appimage icon file
-- set_fact:
-    needs_installed:
-      '{{not symlink_file.stat.exists or symlink_file.stat.lnk_source != filepath}}'
-    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
-
-- name: download latest version
-  get_url:
-    url: '{{asset.browser_download_url}}'
-    dest: '{{filepath}}'
-    mode: '0755'
-
-- name: create directories
   file:
-    path: '{{item}}'
-    state: directory
-  with_items:
-    - '{{ansible_env.HOME}}/.local/bin'
-    - '{{ansible_env.HOME}}/.local/share/icons/hicolor/512x512/apps'
-
-- name: create symlink
-  file:
-    src: '{{filepath}}'
-    dest: '{{ansible_env.HOME}}/.local/bin/Obsidian'
-    state: link
-
-- name: extract squashfs-root for app icon
-  when: needs_installed
-  command:
-    cmd: '{{ansible_env.HOME}}/.local/bin/Obsidian --appimage-extract'
-    chdir: '/tmp'
-
-- name: copy icon file
-  when: needs_installed
-  copy:
-    src: '/tmp/squashfs-root/usr/{{iconpath}}'
     dest: '{{ansible_env.HOME}}/.local/{{iconpath}}'
-
-- name: remove squashfs-root directory
-  when: needs_installed
-  file:
-    path: '/tmp/squashfs-root'
     state: absent
-
+- name: remove appimage desktop file
-- name: create desktop file
+  file:
-  template:
-    src: obsidian.desktop.j2
     dest: '{{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop'
-  notify: install desktop menu
+    state: absent
-
 - name: remove old appimage
-  when: needs_installed and symlink_file.stat.exists
+  when: "'lnk_source' in symlink_file.stat"
   file:
     path: '{{symlink_file.stat.lnk_source}}'
     state: absent
+- name: remove appimage symlink
+  file:
+    path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+    state: absent
 
 - include_tasks: Unix.yaml

roles/podman/tasks/main.yaml

@@ -0,0 +1,26 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: podman
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: podman
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: podman-desktop
+    state: latest
+
+- name: install Chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: podman-desktop
+    state: latest

roles/python/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install yum packages
+- name: install dnf packages
   become: true
-  yum:
+  dnf:
     name:
       - python3
       - python3-pip

roles/python/tasks/Unix.yaml

@@ -1,10 +1,14 @@
 ---
-- name: install config repo
+- name: stat old config repo
-  git:
+  stat:
-    repo: git@code.infektor.net:config/python.git
+    path: ~/.config/python/.git
-    dest: ~/.config/python
+  register: config_python_git
 
-# TODO: set repo email
+- name: remove old config repo
+  when: config_python_git.stat.exists
+  file:
+    state: absent
+    dest: ~/.config/python
 
 - name: create config directories
   file:
@@ -15,34 +19,45 @@
     - ~/.config/ipython/profile_default
     - ~/.config/pip
 
-# Ensure that pip.conf exists before ever installing pip packages since
+- name: stat pip.conf
-# Debian has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip
+  stat:
-# install --user` unless configured otherwise.
+    path: ~/.config/pip/pip.conf
-- name: create symbolic links
+  register: pip_conf
+
+- name: remove pip.conf if its a symbolic link
+  when: pip_conf.stat.islnk
   file:
-    state: link
+    state: absent
-    src: '{{item.src}}'
+    path: ~/.config/pip/pip.conf
-    dest: '{{item.dest}}'
+
-  with_items:
+# Ensure that pip.conf exists before ever installing pip packages since Debian
-    - src: ~/.config/python/flake8
+# has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip install
-      dest: ~/.config/flake8
+# --user` unless configured otherwise.
-    - src: ~/.config/python/pylintrc
+- name: create user pip.conf from template
-      dest: ~/.pylintrc
+  template:
-    - src: ~/.config/python/ipython_config.py
+    src: pip.conf.j2
-      dest: ~/.config/ipython/profile_default/ipython_config.py
+    dest: ~/.config/pip/pip.conf
-    - src: ~/.config/python/pip.conf
+
-      dest: ~/.config/pip/pip.conf
+# TODO: Also configure pip to disable `EXTERNALLY-MANAGED` globally?
+
+- name: stat old ipython_config.py
+  stat:
+    path: ~/.config/ipython/profile_default/ipython_config.py
+  register: ipython_config_py
+
+- name: remove ipython_conifg.py if its a symbolic link
+  when: ipython_config_py.stat.islnk
+  file:
+    state: absent
+    path: ~/.config/ipython/profile_default/ipython_config.py
+
+- name: create ipython config from template
+  template:
+    src: ipython_config.py
+    dest: ~/.config/ipython/profile_default/ipython_config.py
 
 - name: install pip packages
   pip:
     name: '{{python_pip_packages}}'
     state: latest
     extra_args: --user
-
-- name: create directories
-  file:
-    state: directory
-    dest: '{{item}}'
-  with_items:
-    - ~/.config/ipython/profile_default
-    - ~/.config/pip

roles/python/tasks/Windows.yaml

@@ -6,7 +6,6 @@
     state: latest
 
 # TODO: - name: install config repo
-# TODO: - name: set repo email
 # TODO: - name: install pip packages
 # TODO: - name: create config directories/files
 

roles/python/templates/ipython_config.py

@@ -0,0 +1 @@
+c.TerminalInteractiveShell.editing_mode = 'vi'

roles/python/templates/pip.conf.j2

@@ -0,0 +1,8 @@
+[global]
+break-system-packages = true
+{% if ansible_env.http_proxy is defined %}
+proxy = {{ ansible_env.http_proxy }}
+{% endif %}
+
+[list]
+format=columns

roles/ripgrep/tasks/main.yaml

@@ -0,0 +1,26 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: ripgrep
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: ripgrep
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: ripgrep
+    state: latest
+
+- name: install Chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: ripgrep
+    state: latest

roles/rpmfusion/tasks/main.yaml

@@ -0,0 +1,31 @@
+---
+- assert:
+    that: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
+
+- name: install rpm fusion free gpg key
+  become: true
+  rpm_key:
+    key: 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-free-fedora-2020'
+    state: present
+
+- name: install rpmfusion free repository
+  become: true
+  dnf:
+    name:
+      'https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-{{ansible_distribution_major_version}}.noarch.rpm'
+    state: present
+    validate_certs: no
+
+- name: install rpmfusion non-free gpg key
+  become: true
+  rpm_key:
+    key: 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-nonfree-fedora-2020'
+    state: present
+
+- name: install rpmfusion non-free repository
+  become: true
+  dnf:
+    name:
+      'https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-{{ansible_distribution_major_version}}.noarch.rpm'
+    state: present
+    validate_certs: no

roles/system-info/tasks/Darwin.yaml

@@ -1,4 +1,25 @@
 ---
-# TODO:
+- name: get list of running launchd services
-# cp $script_dir/system-info.plist ~/Library/LaunchAgents/system-info.plist
+  command: launchctl list
-# launchctl load -w ~/Library/LaunchAgents/system-info.plist
+  register: launchd_running_services
+  changed_when: false
+
+- name: determine if system-info is currently running
+  set_fact:
+    system_info_debug: true
+    system_info_plist_path: '{{ansible_env.HOME}}/Library/LaunchAgents/system-info.plist'
+    system_info_running: "{{'system-info' in launchd_running_services.stdout}}"
+
+- name: install system-info launchd plist
+  template:
+    src: system-info.plist.j2
+    dest: '{{system_info_plist_path}}'
+  register: system_info_plist
+
+- name: unload running system-info launchd service
+  when: system_info_plist.changed and system_info_running
+  command: 'launchctl unload -w {{system_info_plist_path}}'
+
+- name: load system-info launchd service
+  when: system_info_plist.changed or not system_info_running
+  command: 'launchctl load -w {{system_info_plist_path}}'

roles/system-info/templates/system-info.plist.j2

@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>Label</key>
+    <string>system-info</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+      <key>PATH</key>
+      <string>/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
+    </dict>
+    <key>Program</key>
+    <string>{{ansible_env.HOME}}/.config/tmux/system-info/system-info-macOS.sh</string>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+  </dict>
+</plist>

roles/tmux/tasks/Darwin.yaml

@@ -18,6 +18,7 @@
   get_url:
     url: https://gist.githubusercontent.com/nicm/ea9cf3c93f22e0246ec858122d9abea1/raw/37ae29fc86e88b48dbc8a674478ad3e7a009f357/tmux-256color
     dest: ~/tmux-256color
+  environment: '{{proxy_environment}}'
 
 - name: compile terminal info
   when: terminfo_exists.rc == 1

roles/tmux/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install yum packages
+- name: install dnf packages
   become: true
-  yum:
+  dnf:
     name:
       - tmux
       - sysstat

roles/tmux/tasks/main.yaml

@@ -5,8 +5,9 @@
   git:
     repo: git@code.infektor.net:config/tmux.git
     dest: ~/.config/tmux
-    version: master
+    version: main
 
-# TODO: - name: set repo email
+- name: run install script
-
+  command: ~/.config/tmux/install.sh
-- include_tasks: ~/.config/tmux/tasks.yaml
+  register: tmux_install
+  changed_when: "'changed' in tmux_install.stdout"

roles/ulauncher/tasks/Debian.yaml

@@ -0,0 +1,32 @@
+---
+- name: install keyring
+  when: ansible_distribution == 'Debian'
+  become: true
+  get_url:
+    url: '{{ulauncher_keyring_url}}'
+    dest: '{{ulauncher_keyring_path}}'
+    mode: '0644'
+    force: true
+  environment: '{{proxy_environment}}'
+
+- name: add apt sources list
+  when: ansible_distribution == 'Debian'
+  become: true
+  copy:
+    content: >-
+      deb [signed-by={{ulauncher_keyring_path}}]
+      http://ppa.launchpad.net/agornostal/ulauncher/ubuntu
+      {{ansible_distribution_release}} main"
+    dest: '{{ulauncher_apt_sources_list_path}}'
+
+- name: add ppa repository
+  when: ansible_distribution != 'Debian'
+  become: true
+  apt_repository:
+    repo: ppa:agornostal/ulauncher
+
+- name: install apt package
+  become: true
+  apt:
+    name: ulauncher
+    state: latest

roles/ulauncher/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: ulauncher
+    state: latest

roles/ulauncher/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/ulauncher/vars/main.yaml

@@ -0,0 +1,4 @@
+---
+ulauncher_keyring_url: http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x59ebde772980c381ca13fa59faf1020699503176
+ulauncher_keyring_path: /usr/share/keyrings/ulauncher-archive-keyring.gpg
+ulauncher_apt_list_path: /etc/apt/sources.list.d/ulauncher.list

roles/webcatalog/tasks/Linux.yaml

@@ -28,6 +28,7 @@
     url: 'https://cdn-2.webcatalog.io/webcatalog/{{appimage}}'
     dest: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     mode: '0755'
+  environment: '{{proxy_environment}}'
 
 - name: create directories
   file:

roles/xremap/tasks/main.yaml

@@ -1,7 +1,8 @@
 ---
 - assert:
-    that: ansible_env.XDG_CURRENT_DESKTOP == "GNOME" and
+    that: >
-          ansible_env.XDG_SESSION_TYPE == "wayland"
+      'GNOME' in ansible_env.XDG_CURRENT_DESKTOP and
+      ansible_env.XDG_SESSION_TYPE == 'wayland'
 
 - set_fact:
     install_dir: '{{ansible_env.HOME}}/.local/bin'
@@ -29,18 +30,21 @@
 - name: get latest release
   uri:
     url: https://api.github.com/repos/k0kubun/xremap/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if install needed
   set_fact:
     needs_installed:
       '{{not executable.stat.exists or installed_version != latest.json.name}}'
+    xdg_current_desktop:
+      "{{ansible_env.XDG_CURRENT_DESKTOP | regex_replace('(.*:)?(.*)', '\\2')}}"
 
 - name: construct asset query
   set_fact:
     asset_query: >
       [?contains(name, `xremap-linux-{{ansible_architecture}}-{{
-                     ansible_env.XDG_CURRENT_DESKTOP | lower}}.zip`)] | [0]
+                     xdg_current_desktop | lower}}.zip`)] | [0]
 - name: get release asset
   set_fact:
     asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
@@ -59,6 +63,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{install_dir}}/xremap.zip'
+  environment: '{{proxy_environment}}'
 
 - name: extract release archive
   when: needs_installed
@@ -81,6 +86,14 @@
     append: true
     groups: input
 
+- name: load the uinput kernel module
+  when: ansible_os_family == 'Debian'
+  become: true
+  copy:
+    content: |
+      uinput
+    dest: /etc/modules-load.d/uinput.conf
+
 # TODO: This works for on Fedora, author uses it on Ubuntu so I assume Debian
 # will work too. Arch and other distros are potentially different see the docs
 # https://github.com/k0kubun/xremap

roles/yq/tasks/Debian.yaml

@@ -2,6 +2,7 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/mikefarah/yq/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -35,3 +36,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{yq_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/yq/tasks/RedHat.yaml

@@ -19,6 +19,7 @@
 - name: get latest release
   uri:
     url: 'https://api.github.com/repos/mikefarah/yq/releases/latest'
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if yq needs installed
@@ -49,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/yq'
     mode: '0755'
+  environment: '{{proxy_environment}}'

roles/zsh/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install yum packages
+- name: install dnf packages
   become: true
-  yum:
+  dnf:
     name:
       - zsh
       - pinentry-tty

roles/zsh/tasks/main.yaml

@@ -5,77 +5,12 @@
   git:
     repo: git@code.infektor.net:config/zsh.git
     dest: ~/.config/zsh
-    version: master
+    version: main
 
-- name: clone plugin repos
+- name: run install script
-  git:
+  command: ~/.config/zsh/install.zsh
-    repo: '{{item.repo}}'
+  register: zsh_install
-    dest: '{{item.dest}}'
+  changed_when: "'changed' in zsh_install.stdout"
-  with_items:
-    - repo: https://github.com/zsh-users/zsh-autosuggestions.git
-      dest: ~/.config/zsh/zsh-autosuggestions
-    - repo: https://github.com/zsh-users/zsh-history-substring-search.git
-      dest: ~/.config/zsh/zsh-history-substring-search
-    - repo: https://github.com/zsh-users/zsh-syntax-highlighting.git
-      dest: ~/.config/zsh/zsh-syntax-highlighting
-    - repo: https://github.com/zsh-users/zsh-completions.git
-      dest: ~/.config/zsh/zsh-completions
-  loop_control:
-    label: '{{item.repo | regex_search("https://github.com/(.*)\.git$", "\1")}}'
-
-- name: create directories
-  file:
-    state: directory
-    dest: '{{item}}'
-  with_items:
-    - ~/.local/bin
-    - ~/.local/share/zsh/site-functions
-
-- name: create symbolic links
-  file:
-    state: link
-    src: '{{item.src}}'
-    dest: '{{item.dest}}'
-  with_items:
-    - src: ~/.config/zsh/zlogin
-      dest: ~/.zlogin
-    - src: ~/.config/zsh/zlogout
-      dest: ~/.zlogout
-    - src: ~/.config/zsh/zprofile
-      dest: ~/.zprofile
-    - src: ~/.config/zsh/zshenv
-      dest: ~/.zshenv
-    - src: ~/.config/zsh/zshrc
-      dest: ~/.zshrc
-    - src: ~/.config/zsh/prompt_fresh_setup
-      dest: ~/.local/share/zsh/site-functions/prompt_fresh_setup
-    - src: ~/.config/zsh/build/_build-dir
-      dest: ~/.local/share/zsh/site-functions/_build-dir
-    - src: ~/.config/zsh/sandbox/_sandbox
-      dest: ~/.local/share/zsh/site-functions/_sandbox
-    - src: ~/.config/zsh/layout/_layout
-      dest: ~/.local/share/zsh/site-functions/_layout
-    - src: ~/.config/zsh/notes/_note
-      dest: ~/.local/share/zsh/site-functions/_note
-    - src: ~/.config/zsh/cmake-uninstall
-      dest: ~/.local/bin/cmake-uninstall
-    - src: ~/.config/zsh/$
-      dest: ~/.local/bin/$
-  loop_control:
-    label: '{{item.dest}}'
-
-- name: list commands with available completions
-  command:
-    zsh {{ansible_env.HOME}}/.config/zsh/list-commands-with-available-completions.zsh
-  changed_when: false
-  register: completion_commands
-
-- name: install completions for available commands
-  file:
-    state: link
-    src: '~/.config/zsh/zsh-completions/src/_{{item}}'
-    dest: '~/.local/share/zsh/site-functions/_{{item}}'
-  with_items: '{{completion_commands.stdout}}'
 
 - name: get absolute path
   shell: command -v zsh