Update kitty to install from GitHub on Debian

Older version of kitty have terrible font rendering on Linux, e.g. the
one shipped with Ubuntu 22.04, so instead install the latest version
from the provided GitHub packages.

.gitignore

@@ -1 +1,2 @@
 external
+playbooks/test.yaml

.vim/coc-settings.json

@@ -1,12 +0,0 @@
-{
-  "yaml.schemas": {
-    "https://raw.githubusercontent.com/ansible-community/schemas/main/f/ansible.json#/$defs/playbook": [
-      "./*.yaml"
-    ],
-    "https://raw.githubusercontent.com/ansible-community/schemas/main/f/ansible.json#/$defs/tasks": [
-      "./roles/*/handlers/*.yaml",
-      "./roles/*/tasks/*.yaml",
-      "./tasks.yaml"
-    ]
-  }
-}

WSL.yaml

@@ -1,3 +0,0 @@
----
-- import_playbook: Unix.yaml
-- import_playbook: Windows.yaml

ansible.cfg

@@ -0,0 +1,5 @@
+[defaults]
+collections_path = collections
+library = library
+roles_path = roles
+stdout_callback = yaml

library/win_git.ps1

@@ -0,0 +1,232 @@
+#!powershell
+
+#AnsibleRequires -CSharpUtil Ansible.Basic
+#AnsibleRequires -PowerShell Ansible.ModuleUtils.CommandUtil
+
+$module = [Ansible.Basic.AnsibleModule]::Create($args, @{
+    options = @{
+        dest = @{type = 'path'}
+        repo = @{required = $true; aliases = @('name')}
+        version = @{default = 'HEAD'; aliases = @('branch')}
+        remote = @{default = 'origin'}
+        recursive = @{default = $true; type = 'bool'}
+        executable = @{default = $null; type = 'path'}
+    }
+    supports_check_mode = $false
+})
+
+$dest = $module.Params.dest
+$repo = $module.Params.repo
+$version = $module.Params.version
+$remote = $module.Params.remote
+$git = $module.Params.executable
+if (!$git) {
+    $git = Get-ExecutablePath 'git'
+}
+
+# ================================= Utilities ==================================
+
+function Get-AbsolutePath {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    try {
+        $result = Resolve-Path $path
+    } catch {
+        return $_[0].TargetObject
+    }
+    return $result
+}
+
+function Get-GitDir {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $path
+    )
+    $git_dir = Join-Path $path '.git'
+    # Check if this .git is a file.
+    if ([System.IO.File]::Exists($git_dir)) {
+        # Extract the gitdir: path from the .git file.
+        $groups = Get-Content "$git_dir" | `
+            Select-String '(gitdir:) (.*)' | `
+            ForEach { $_.Matches[0].Groups[1..2] }
+        $ref_prefix = $groups[0]
+        $gitdir = $groups[1]
+        if ($ref_prefix -ne 'gitdir:') {
+            $module.FailJson('The .git file has invalid gitdir reference format.')
+        }
+        # Check if the repo path is absolute.
+        if ([System.IO.Path]::IsPathRooted($gitdir)) {
+            $git_dir = $gitdir
+        } else {
+            # Join with the input path to construct an absolute path.
+            $git_dir = Join-Path $path $gitdir
+        }
+        if (![System.IO.Directory]::Exists($git_dir)) {
+            throw "$git_dir is not a directory."
+        }
+    }
+    return $git_dir
+}
+
+function Test-GitLocalChanges {
+    [CmdletBinding()]
+    param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" status --porcelain"
+    $result = Run-Command -command $command -working_directory $dest
+    $changes = $result.stdout.Split([System.Environment]::NewLine, `
+            [System.StringSplitOptions]::RemoveEmptyEntries) | `
+        Where-Object { -not $_.StartsWith('??') } | Measure-Object -Line
+    return $changes.Lines -gt 0
+}
+
+function Get-GitRemoteHeadBranch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote
+    )
+    $command = "`"$git`" symbolic-ref --short refs/remotes/$remote/HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Could not determine the default HEAD branch of remote: $remote" ` +
+                         "$result.stdout $result.stderr")
+    }
+    return $result.stdout.Trim().Replace("$remote/", '')
+}
+
+function Get-GitCurrentSha {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $command = "`"$git`" rev-parse HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    return $result.stdout.Trim()
+}
+
+function Invoke-GitClone {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $repo,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $dest_parent = Split-Path -Path $dest -Parent
+    if (!(Test-Path $dest_parent)) {
+        New-Item -Path $dest_parent -ItemType Directory
+    }
+    $command = "`"$git`" clone --recursive --origin $remote $repo $dest"
+    if ($version -ne "HEAD") {
+        $command += " --branch $version"
+    }
+    $result = Run-Command -command $command -working_directory $cwd
+    if ($result.rc -ne 0) {
+        $module.FailJson($result.stderr)
+    }
+}
+
+function Invoke-GitCheckout {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    if ($version -eq "HEAD") {
+        $branch = Get-GitRemoteHeadBranch $dest $remote
+    } else {
+        $branch = $version
+    }
+    $result = Run-Command -command "`"$git`" checkout $branch" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to checkout version '$version'`n" + $result.stderr)
+    }
+}
+
+function Invoke-GitFetch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $command = "`"$git`" fetch --tags $remote"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to download remote objects and refs:`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitPull {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $result = Run-Command -command "`"$git`" pull $remote $version" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to pull version '$version' from remote '$origin':`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitSubmoduleUpdate {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $result = Run-Command -command "`"$git`" submodule update --init" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to initialized/update submodules:`n" + $result.stderr)
+    }
+}
+
+# ================================ Start logic =================================
+
+if (!$dest) {
+    $module.FailJson('The destination directory must be specified.')
+}
+$dest = Get-AbsolutePath $dest
+$git_dir = Get-GitDir $dest
+$gitconfig = Join-Path $git_dir 'config'
+
+$module.Result.before = $null
+
+if (($dest -and ![System.IO.File]::Exists($gitconfig))) {
+    Invoke-GitClone $repo $remote $dest
+    Invoke-GitCheckout $dest $remote $version
+    $module.Result.changed = $true
+} else {
+    $module.Result.before = Get-GitCurrentSha $dest
+    if (Test-GitLocalChanges $dest) {
+        $module.FailJson('Local modifications exist in repository.')
+    }
+    Invoke-GitFetch $dest $remote $version
+    Invoke-GitCheckout $dest $remote $version
+    Invoke-GitPull $dest $remote $version
+    $module.Result.after = Get-GitCurrentSha $dest
+    if ($module.Result.before -ne $module.Result.after) {
+        $module.Result.changed = $true
+    }
+}
+
+if ($recursive) {
+    Invoke-GitSubmoduleUpdate $dest
+}
+
+# Ensure the repository has the correct owner
+$userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+$idRef = [System.Security.Principal.NTAccount]::new($userName)
+Get-Item -Force $dest | foreach { `
+    $_ ; $_ | Get-ChildItem -Force -Recurse `
+} | foreach { `
+    $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `
+}
+
+$module.ExitJson()

library/win_git.py

@@ -0,0 +1,64 @@
+# -*- coding: utf-8 -*-
+
+# TODO: copyright
+
+DOCUMENTATION = '''
+---
+module: win_git
+author:
+    - "Kenneth Benzie (Benie)"
+short_description: Deploy software (or files) from git checkouts on Windows
+description:
+    - Manage git checkouts of repositories to deploy files or software on Windows.
+options:
+    data:
+        description:
+            - Alternate data to return instead of 'pong'.
+            - If this parameter is set to C(crash), the module will cause an
+              exception.
+        type: str
+        default: pong
+seealso:
+    - module: ansible.builtin.git
+'''
+
+# DOCUMENTATION = r'''
+# ---
+# module: win_ping
+# short_description: A windows version of the classic ping module
+# description:
+#   - Checks management connectivity of a windows host.
+#   - This is NOT ICMP ping, this is just a trivial test module.
+#   - For non-Windows targets, use the M(ansible.builtin.ping) module instead.
+# options:
+#   data:
+#     description:
+#       - Alternate data to return instead of 'pong'.
+#       - If this parameter is set to C(crash), the module will cause an exception.
+#     type: str
+#     default: pong
+# seealso:
+# - module: ansible.builtin.ping
+# author:
+# - Chris Church (@cchurch)
+# '''
+
+EXAMPLES = r'''
+# Test connectivity to a windows host
+# ansible winserver -m ansible.windows.win_ping
+
+- name: Example from an Ansible Playbook
+  ansible.windows.win_ping:
+
+- name: Induce an exception to see what happens
+  ansible.windows.win_ping:
+    data: crash
+'''
+
+RETURN = r'''
+ping:
+    description: Value provided with the data parameter.
+    returned: success
+    type: str
+    sample: pong
+'''

macOS.yaml

@@ -1,7 +0,0 @@
----
-- import_playbook: Unix.yaml
-
-- hosts: localhost
-
-  roles:
-    - role: obsidian

playbooks/1password.yaml

@@ -0,0 +1,6 @@
+---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - 1password

playbooks/Linux.yaml

@@ -0,0 +1,21 @@
+---
+- import_playbook: LinuxCLI.yaml
+- import_playbook: UnixGUI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: firefox
+    - role: kitty
+    - role: guake
+    - role: cider
+    - role: ulauncher
+    - role: gnome-shell
+      when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+    - role: xremap
+      when: >
+        'GNOME' in ansible_env.XDG_CURRENT_DESKTOP and
+        ansible_env.XDG_SESSION_TYPE == 'wayland' and (
+            ansible_os_family == "RedHat" or
+            ansible_os_family == "Debian"
+        )

playbooks/LinuxCLI.yaml

@@ -0,0 +1,15 @@
+---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: rpmfusion
+      when: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: gdb
+    - role: podman
+    - role: system-info

playbooks/UnixCLI.yaml

@@ -1,34 +1,38 @@
 ---
 - hosts: localhost
-
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: sudo
       when: ansible_user_id != "root"
+    - role: python
 
     - role: zsh
+      tags: unsafe
     - role: neovim
     - role: tmux
-    - role: system-info
+      tags: unsafe
-      when: '"WSL" not in ansible_kernel'
 
     - role: ag
+    - role: bash
     - role: bat
     - role: curl
+    - role: editline
+    - role: fd
     - role: fzf
+    - role: gh
     - role: git
+    - role: glab
     - role: htop
     - role: jp
     - role: jq
     - role: readline
+    - role: ripgrep
     - role: tidy
     - role: tree
+    - role: watch
+    - role: wget
     - role: yq
 
     - role: llvm
     - role: nodejs
-    - role: python
-
-    - role: 1password
-
-    - role: wsl
-      when: '"WSL" in ansible_kernel'

playbooks/UnixGUI.yaml

@@ -0,0 +1,12 @@
+---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: flatpak
+      when: ansible_os_family != "Darwin"
+
+    - role: 1password
+    - role: ferdium
+    - role: fonts
+    - role: obsidian

playbooks/WSL.yaml

@@ -0,0 +1,7 @@
+---
+- import_playbook: LinuxCLI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: wsl

playbooks/Windows.yaml

@@ -1,10 +1,9 @@
 ---
 - hosts: windows
-
+  vars_files:
-  vars:
+    - vars/environment.yaml
-    install_cad_apps: false
-
   roles:
+    - role: python
     - role: git
     - role: powershell
     - role: neovim
@@ -13,23 +12,24 @@
     - role: ag
     - role: bat
     - role: curl
+    - role: fd
     - role: fzf
-    - role: tree
+    - role: gh
+    - role: glab
     - role: jq
+    - role: ripgrep
+    - role: tree
     - role: yq
 
     - role: llvm
     - role: nodejs
-    - role: python
 
     - role: 1password
     - role: autohotkey
+    - role: cider
+    - role: ferdium
     - role: firefox
+    - role: fonts
     - role: obsidian
     - role: powertoys
     - role: windows-terminal
-
-    - role: autodesk-fusion360
-      when: install_cad_apps
-    - role: prusaslicer
-      when: install_cad_apps

playbooks/macOS.yaml

@@ -0,0 +1,22 @@
+---
+- import_playbook: UnixCLI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: system-info
+- import_playbook: UnixGUI.yaml
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: mas
+
+    - role: hiddenbar
+    - role: iterm
+    - role: kitty
+    - role: magnet
+    - role: microsoft-remote-desktop
+    - role: viscosity
+
+    - role: macos

playbooks/vars/environment.yaml

@@ -0,0 +1,15 @@
+---
+# GitHub may rate limit unauthenticated API requests, this is more likely when
+# behind a network proxy. Set the GITHUB_TOKEN environment variable to
+# authenticate any GitHub API requests executed while playing roles.
+github_auth_headers: >-
+  {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
+      if lookup('env', 'GITHUB_TOKEN') else {} }}
+
+# When working behind a network proxy, set the http_proxy and https_proxy
+# environment variables. These will be passed through to uses of the `get_url`
+# module when playing roles.
+proxy_environment: >-
+  {{ { 'http_proxy': lookup('env', 'http_proxy'),
+       'https_proxy': lookup('env', 'https_proxy') }
+      if lookup('env', 'http_proxy') and lookup('env', 'https_proxy') else {} }}

roles/1password/tasks/Debian.yaml

@@ -1,13 +1,25 @@
 ---
+- name: set keyring path
+  set_fact:
+    keyring: /etc/apt/keyrings/1password.asc
+    old_keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+
+- name: remove old keyring
+  become: true
+  file:
+    path: '{{old_keyring}}'
+    state: absent
+
 - name: add apt signing key
   when: '"WSL" not in ansible_kernel'
   become: true
-  apt_key:
+  get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
-    keyring: /etc/apt/trusted.gpg.d/1password-archive-keyring.gpg
+    dest: '{{keyring}}'
-    state: present
+  environment: '{{proxy_environment}}'
 
-- when: ansible_machine == 'x86_64'
+- name: set compatible architecture
+  when: ansible_machine == 'x86_64'
   set_fact:
     arch: amd64
 
@@ -18,11 +30,16 @@
 - name: add apt repository
   when: '"WSL" not in ansible_kernel'
   become: true
-  apt_repository:
+  copy:
-    repo: >-
+    content: >-
-      deb [arch={{arch}}
+      deb [arch={{arch}} signed-by={{keyring}}]
-      signed-by=/etc/apt/trusted.gpg.d/1password-archive-keyring.gpg]
       https://downloads.1password.com/linux/debian/{{arch}} stable main
+    dest: /etc/apt/sources.list.d/1password.list
+
+- name: apt update
+  become: true
+  apt:
+    update_cache: true
 
 - name: install gui package
   when: '"WSL" not in ansible_kernel'

roles/1password/tasks/RedHat.yaml

@@ -0,0 +1,22 @@
+---
+- name: add dnf repository key
+  become: true
+  rpm_key:
+    key: https://downloads.1password.com/linux/keys/1password.asc
+
+- name: add dnf repository
+  become: true
+  yum_repository:
+    name: 1password
+    description: 1Password Stable Channel
+    baseurl: https://downloads.1password.com/linux/rpm/stable/$basearch
+    enabled: true
+    gpgcheck: true
+    repo_gpgcheck: true
+    gpgkey: ['https://downloads.1password.com/linux/keys/1password.asc']
+
+- name: install dnf package
+  become: true
+  dnf:
+    name: 1password
+    state: latest

roles/1password/tasks/Windows.yaml

@@ -11,36 +11,22 @@
     path: '{{app_exe}}'
   register: app_stat
 
-- name: get installed version
-  when: app_stat.stat.exists == True
-  win_command: '{{app_exe}} --version'
-  register: app_version
-  changed_when: false
-
-- when: app_stat.stat.exists == True
-  set_fact:
-    installed_version: '{{app_version.stdout.strip()}}'
-
 - name: download latest installer
+  when: not app_stat.stat.exists
   win_get_url:
     url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
     dest: '{{installer_exe}}'
-
+  environment: '{{proxy_environment}}'
-- name: get installer version
-  win_shell: |
-    (Get-ItemProperty {{installer_exe}}).VersionInfo.ProductVersion
-  register: installer_product_version
-  changed_when: false
-
-# FIXME: The [5:] is to account for a mystery "\e[6 q" prefix, not sure if this
-# is consistent across machines or some other oddity.
-- set_fact:
-    installer_version: '{{installer_product_version.stdout.strip()[5:]}}'
 
 - name: run installer
-  when: installed_version is not defined or installed_version != installer_version
+  when: not app_stat.stat.exists
   win_command: '{{installer_exe}}'
 
+- name: remove installer
+  win_file:
+    path: '{{installer_exe}}'
+    state: absent
+
 - name: create start menu shortcut
   win_shortcut:
     src: '{{app_exe}}'
@@ -83,6 +69,7 @@
   win_get_url:
     url: '{{latest.downloads.Windows.amd64}}'
     dest: '{{cli_zip}}'
+  environment: '{{proxy_environment}}'
 
 - name: unzip op zip archive
   when: cli_installed_version is not defined or cli_installed_version != latest.version

roles/1password/tasks/zsh-completion.yaml

@@ -4,6 +4,11 @@
   register: zsh_completion_script
   changed_when: false
 
+- name: create local zsh site functions directory
+  file:
+    state: directory
+    path: ~/.local/share/zsh/site-functions
+
 - name: create op zsh completion file
   copy:
     content: '{{zsh_completion_script.stdout}}'

roles/ag/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: the_silver_searcher
+    state: latest

roles/autodesk-fusion360/tasks/main.yaml

@@ -1,8 +0,0 @@
----
-- assert:
-    that: ansible_os_family == "Windows"
-
-- name: install chocolatey package
-  win_chocolatey:
-    name: autodesk-fusion360
-    state: latest

roles/autohotkey/tasks/main.yaml

@@ -9,10 +9,6 @@
     repo: git@code.infektor.net:config/AutoHotKey.git
     dest: '{{autohotkey_repo_dir}}'
     branch: master
-- win_owner:
-    path: '{{autohotkey_repo_dir}}'
-    user: Benie
-    recurse: true
 
 - name: create scheduled task
   win_scheduled_task:

roles/bash/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: create ~/.bashrc file
+  template:
+    src: templates/bashrc
+    dest: ~/.bashrc

roles/bash/templates/bashrc

@@ -0,0 +1,122 @@
+# If not running interactively, don't do anything
+case $- in
+    *i*) ;;
+      *) return;;
+esac
+
+# don't put duplicate lines or lines starting with space in the history.
+# See bash(1) for more options
+HISTCONTROL=ignoreboth
+
+# append to the history file, don't overwrite it
+shopt -s histappend
+
+# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
+HISTSIZE=1000
+HISTFILESIZE=2000
+
+# check the window size after each command and, if necessary,
+# update the values of LINES and COLUMNS.
+shopt -s checkwinsize
+
+# make less more friendly for non-text input files, see lesspipe(1)
+[ -x /usr/bin/lesspipe ] && eval "$(SHELL=/bin/sh lesspipe)"
+
+# enable color support of ls and also add handy aliases
+if [ -x /usr/bin/dircolors ]; then
+  test -r ~/.dircolors && eval "$(dircolors -b ~/.dircolors)" || eval "$(dircolors -b)"
+  alias ls='ls --color=auto'
+  alias dir='dir --color=auto'
+  alias vdir='vdir --color=auto'
+  alias grep='grep --color=auto'
+  alias fgrep='fgrep --color=auto'
+  alias egrep='egrep --color=auto'
+fi
+
+if [ -f ~/.bash_aliases ]; then
+    . ~/.bash_aliases
+fi
+
+# enable programmable completion features (you don't need to enable
+# this, if it's already enabled in /etc/bash.bashrc and /etc/profile
+# sources /etc/bash.bashrc).
+if ! shopt -oq posix; then
+  if [ -f /usr/share/bash-completion/bash_completion ]; then
+    . /usr/share/bash-completion/bash_completion
+  elif [ -f /etc/bash_completion ]; then
+    . /etc/bash_completion
+  fi
+fi
+
+# Enable vi mode
+set -o vi
+
+function _prompt_first_line {
+  local exit_code=$?
+  if [ "$exit_code" = "0" ]; then
+    exit_code=
+  else
+    # If the last command failed, display its error code at the right
+    case $exit_code in
+      129) exit_code="SIGHUP"     ;;  # 128 + 1
+      130) exit_code="SIGINT"     ;;  # 128 + 2
+      131) exit_code="SIGQUIT"    ;;  # 128 + 3
+      132) exit_code="SIGILL"     ;;  # 128 + 4
+      133) exit_code="SIGTRAP"    ;;  # 128 + 5
+      134) exit_code="SIGABRT"    ;;  # 128 + 6
+      134) exit_code="SIGIOT"     ;;  # 128 + 6
+      135) exit_code="SIGBUS"     ;;  # 128 + 7
+      136) exit_code="SIGFPE"     ;;  # 128 + 8
+      137) exit_code="SIGKILL"    ;;  # 128 + 9
+      138) exit_code="SIGUSR1"    ;;  # 128 + 10
+      139) exit_code="SIGSEGV"    ;;  # 128 + 11
+      140) exit_code="SIGUSR2"    ;;  # 128 + 12
+      141) exit_code="SIGPIPE"    ;;  # 128 + 13
+      142) exit_code="SIGALRM"    ;;  # 128 + 14
+      143) exit_code="SIGTERM"    ;;  # 128 + 15
+      144) exit_code="SIGSTKFLT"  ;;  # 128 + 16
+      145) exit_code="SIGCHLD"    ;;  # 128 + 17
+      146) exit_code="SIGCONT"    ;;  # 128 + 18
+      147) exit_code="SIGSTOP"    ;;  # 128 + 19
+      148) exit_code="SIGTSTP"    ;;  # 128 + 20
+      149) exit_code="SIGTTIN"    ;;  # 128 + 21
+      150) exit_code="SIGTTOU"    ;;  # 128 + 22
+      151) exit_code="SIGURG"     ;;  # 128 + 23
+      152) exit_code="SIGXCPU"    ;;  # 128 + 24
+      153) exit_code="SIGXFSZ"    ;;  # 128 + 25
+      154) exit_code="SIGVTALRM"  ;;  # 128 + 26
+      155) exit_code="SIGPROF"    ;;  # 128 + 27
+      156) exit_code="SIGWINCH"   ;;  # 128 + 28
+      157) exit_code="SIGIO"      ;;  # 128 + 29
+      158) exit_code="SIGPWR"     ;;  # 128 + 30
+      159) exit_code="SIGSYS"     ;;  # 128 + 31
+    esac
+    exit_code=" \e[1m\e[31m$exit_code\e[0m"
+  fi
+  local time=$(date +%H:%M:%S)
+  local dir=$PWD
+  [[ "$dir" =~ ^"$HOME"(/|$) ]] && dir="~${dir#$HOME}"
+  # TODO: virtualenv
+  local grey="\e[38;5;244m"
+  local reset="\e[0m"
+  local blue="\e[38;5;37m"
+  echo -e "$grey$time$reset $blue$dir$reset$exit_code"
+}
+
+PROMPT_COMMAND=_prompt_first_line
+
+yellow="\001\e[38;5;3m\002"
+grey="\001\e[38;5;244m\002"
+reset="\001\e[0m\002"
+
+PS1="$yellow\u$reset@$grey\h$reset "
+
+# Setup environment variables
+export PATH=$HOME/.local/bin:$PATH
+if command -v nvim > /dev/null; then
+  export EDITOR=nvim
+elif command -v vim > /dev/null; then
+  export EDITOR=vim
+elif command -v vi > /dev/null; then
+  export EDITOR=vi
+fi

roles/bat/tasks/Debian.yaml

@@ -4,7 +4,6 @@
         ansible_distribution == "Ubuntu" and
         ansible_distribution_version == "18.04"
       }}'
-- debug: msg={{use_github}}
 
 - when: use_github
   include_tasks: deb.yaml

roles/bat/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: bat
+    state: latest

roles/bat/tasks/deb.yaml

@@ -2,6 +2,7 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/sharkdp/bat/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -50,6 +51,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{bat_deb}}'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: installed_version is not defined or installed_version != latest_version

roles/cider/tasks/main.yaml

@@ -0,0 +1,15 @@
+---
+- assert:
+    that: ansible_os_family != 'Darwin'
+
+- name: install chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: Cider
+    state: latest
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows'
+  become: true
+  flatpak:
+    name: sh.cider.Cider

roles/curl/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: curl
+    state: latest

roles/editline/tasks/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: create .editrc config file
+  template:
+    src: editrc
+    dest: '{{ansible_env.HOME}}/.editrc'

roles/editline/templates/editrc

@@ -0,0 +1,3 @@
+# Enable vi mode
+lldb:bind -v
+lldb:bind ^I lldb_complete

roles/fd/tasks/main.yaml

@@ -0,0 +1,26 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: fd-find
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: fd-find
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: fd
+    state: latest
+
+- name: install Chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: fd
+    state: latest

roles/ferdium/tasks/Windows.yaml

@@ -0,0 +1,14 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: ferdium
+    state: latest
+
+- set_fact:
+    ferdium_exe: 'C:/Program Files/Ferdium/Ferdium.exe'
+
+- name: create start menu shortcut
+  win_shortcut:
+    src: '{{ferdium_exe}}'
+    dest: '{{ansible_env.ProgramData}}/Microsoft/Windows/Start Menu/Programs/Ferdium.lnk'
+    icon: '{{ferdium_exe}},0'

roles/ferdium/tasks/main.yaml

@@ -0,0 +1,16 @@
+---
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew_cask:
+    name: ferdium
+    state: latest
+
+- when: ansible_os_family == 'Windows'
+  include_tasks: Windows.yaml
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows' and
+        ansible_os_family != 'Darwin'
+  become: true
+  flatpak:
+    name: org.ferdium.Ferdium

roles/firefox/tasks/Ubuntu.yaml

@@ -0,0 +1,52 @@
+---
+- name: remove snap package
+  become: true
+  snap:
+    name: firefox
+    state: absent
+
+- name: create keyrings directory
+  become: true
+  file:
+    path: /etc/apt/keyrings
+    mode: '755'
+    state: directory
+
+- name: install mozilla repo keyring
+  become: true
+  get_url:
+    url: https://packages.mozilla.org/apt/repo-signing-key.gpg
+    dest: /etc/apt/keyrings/packages.mozilla.org.asc
+  environment: '{{proxy_environment}}'
+
+- name: add mozilla apt repo
+  become: true
+  copy:
+    content: >-
+      deb [signed-by=/etc/apt/keyrings/packages.mozilla.org.asc]
+      https://packages.mozilla.org/apt mozilla main
+    dest: /etc/apt/sources.list.d/mozilla.list
+
+- name: pin mozilla package
+  become: true
+  copy:
+    content: |
+      Package: *
+      Pin: origin packages.mozilla.org
+      Pin-Priority: 1000
+    dest: /etc/apt/preferences.d/mozilla
+
+- name: install mozilla package
+  become: true
+  apt:
+    name: firefox
+    state: latest
+    allow_downgrade: true
+    update_cache: true
+
+- name: install gnome shell integration
+  when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+  become: true
+  apt:
+    name: chrome-gnome-shell
+    state: latest

roles/firefox/tasks/main.yaml

@@ -1,2 +1,5 @@
 ---
-- include_tasks: '{{ansible_os_family}}.yaml'
+- include_tasks: Windows.yaml
+  when: ansible_os_family == 'Windows'
+- include_tasks: Ubuntu.yaml
+  when: ansible_distribution == 'Ubuntu'

roles/flatpak/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: add flathub repository remote
+  become: true
+  flatpak_remote:
+    name: flathub
+    state: present
+    flatpakrepo_url: https://dl.flathub.org/repo/flathub.flatpakrepo

roles/fonts/handlers/main.yaml

@@ -0,0 +1,3 @@
+---
+- name: refresh font cache
+  command: fc-cache

roles/fonts/tasks/Darwin.yaml

@@ -0,0 +1,9 @@
+---
+- name: enable homebrew tap
+  homebrew_tap:
+    name: homebrew/cask-fonts
+
+- name: install Caskaydia Cove Nerd Font
+  homebrew_cask:
+    name: font-caskaydia-cove-nerd-font
+    state: latest

roles/fonts/tasks/Linux.yaml

@@ -0,0 +1,58 @@
+---
+- name: stat version file
+  stat:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_file
+
+- name: slurp version
+  when: version_file.stat.exists
+  slurp:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+  register: version_slurp
+
+- when: version_file.stat.exists
+  set_fact:
+    version: '{{version_slurp.content | b64decode}}'
+
+- name: get latest release
+  uri:
+    url: https://api.github.com/repos/ryanoasis/nerd-fonts/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    needs_installed:
+      '{{ not version_file.stat.exists or version.strip() != latest.json.tag_name }}'
+    asset: '{{ latest.json.assets | to_json | from_json |
+      json_query("[?contains(name, `CascadiaCode.zip`)] | [0]") }}'
+
+- name: create user fonts directory
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts'
+    state: directory
+
+- name: download Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+  environment: '{{proxy_environment}}'
+
+- name: install Caskaydia Cove Nerd Font
+  when: needs_installed
+  unarchive:
+    src: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts'
+  notify: refresh font cache
+
+- name: write version file
+  copy:
+    content: '{{latest.json.tag_name}}'
+    dest: '{{ansible_env.HOME}}/.local/share/fonts/CaskaydiaCove.version'
+
+- name: remove Caskaydia Cove Nerd Font archive
+  when: needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+    state: absent

roles/fonts/tasks/Windows.yaml

@@ -1,8 +1,5 @@
 ---
-- assert:
-    that: ansible_os_family == "Windows"
-
 - name: install chocolatey package
   win_chocolatey:
-    name: prusaslicer
+    name: nerd-fonts-CascadiaCode
     state: latest

roles/fonts/tasks/main.yaml

@@ -0,0 +1,7 @@
+---
+- when: ansible_os_family == 'Darwin'
+  include_tasks: 'Darwin.yaml'
+- when: ansible_os_family == 'Windows'
+  include_tasks: 'Windows.yaml'
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: 'Linux.yaml'

roles/fzf/tasks/Debian-apt.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: fzf
+    state: latest

roles/fzf/tasks/Debian.yaml

@@ -1,6 +1,8 @@
 ---
-- name: install apt package
+- when: ansible_distribution == 'Ubuntu' and
-  become: true
+        ansible_distribution_version is version('22.04', '<=')
-  apt:
+  include_tasks: Debian-old.yaml
-    name: fzf
+
-    state: latest
+- when: not (ansible_distribution == 'Ubuntu' and
+             ansible_distribution_version is version('22.04', '<='))
+  include_tasks: Debian-apt.yaml

roles/fzf/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: fzf
+    state: latest

roles/gdb/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: gdb
+    state: latest

roles/gh/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: gh
+    state: latest

roles/gh/tasks/Debian.yaml

@@ -0,0 +1,38 @@
+---
+- set_fact:
+    arch_map:
+      aarch64: arm64
+      armv6l: armhf
+      armv7l: armhf
+      i386: i386
+      x86_64: amd64
+- set_fact:
+    arch: '{{ [ansible_architecture] | map("extract", arch_map) | first }}'
+
+- name: download apt repository key
+  become: true
+  get_url:
+    url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
+    dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
+    mode: 0644
+  environment: '{{proxy_environment}}'
+
+- name: add apt repository list
+  become: true
+  apt_repository:
+    filename: github-cli
+    repo: 'deb [arch={{arch}} signed-by=/usr/share/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main'
+    state: present
+
+- name: install apt package
+  become: true
+  apt:
+    name: gh
+    state: latest
+    update_cache: true
+  register: gh_apt
+
+- name: install zsh completions
+  when: gh_apt.changed
+  become: true
+  shell: gh completion -s zsh > /usr/local/share/zsh/site-functions/_gh

roles/gh/tasks/RedHat.yaml

@@ -0,0 +1,13 @@
+---
+- name: add dnf repository
+  become: true
+  get_url:
+    url: https://cli.github.com/packages/rpm/gh-cli.repo
+    dest: /etc/yum.repos.d/gh-cli.repo
+  environment: '{{proxy_environment}}'
+
+- name: install dnf package
+  become: true
+  dnf:
+    name: gh
+    state: latest

roles/gh/tasks/Windows.yaml

@@ -0,0 +1,5 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: gh
+    state: latest

roles/gh/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/git/tasks/Windows-installer.yaml

@@ -2,6 +2,7 @@
 - name: get json containing all releases
   win_uri:
     url: 'https://api.github.com/repos/git-for-windows/git/releases/tags/v{{git_version}}.windows.1'
+    headers: '{{github_auth_headers}}'
     return_content: true
   register: git_release
 
@@ -18,6 +19,7 @@
   win_get_url:
     url: '{{git_asset.browser_download_url}}'
     dest: '{{git_installer_path}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer command
   win_command:

roles/git/tasks/Windows.yaml

@@ -31,17 +31,13 @@
 - include_tasks: Windows-installer.yaml
   when: git_run_installer
 
+# NOTE: If this is failing on first install of git, restart the sshd service.
 - name: clone config repos
   win_git:
     repo: '{{item.repo}}'
     dest: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
     version: master
   with_items: '{{git_config_repos}}'
-- win_owner:
-    path: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
-    user: Benie
-    recurse: true
-  with_items: '{{git_config_repos}}'
 
 # - TODO: install pip packages
 #   win_pip:

roles/git/tasks/unix.yaml

@@ -18,8 +18,4 @@
     extra_args: --user
     state: latest
 
-- name: create symbolic links
+- include_tasks: ~/.config/git/tasks.yaml
-  file:
-    state: link
-    src: ~/.config/git/_git-changes
-    dest: ~/.local/share/zsh/site-functions/_git-changes

roles/gitea/tasks/Linux.yaml

@@ -0,0 +1,50 @@
+---
+- name: stat tea executable
+  stat:
+    path: '{{tea_package_exe}}'
+  register: tea
+
+- name: get installed version
+  when: tea.stat.exists
+  command: '{{tea_package_exe}} --version'
+  register: tea_version_string
+
+- name: extract version number
+  when: tea.stat.exists
+  set_fact:
+    installed_version: "{{tea_version_string.stdout |
+      regex_search('^.*(\\d+\\.\\d+\\.\\d+).*golang.*$', '\\1') }}"
+
+- name: get latest release json
+  uri:
+    url: https://gitea.com/api/v1/repos/gitea/tea//releases/latest
+  register: latest
+
+- name: check installed version
+  set_fact:
+    install_required: >
+      {{not tea.stat.exists or latest.json.name != 'v' + installed_version[0]}}
+    asset: '{{latest.json.assets | json_query(tea_asset_query)}}'
+
+- name: create package directory
+  when: install_required
+  become: true
+  file:
+    state: directory
+    path: '{{tea_package_dir}}/bin'
+
+- name: download package
+  when: install_required
+  become: true
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{tea_package_exe}}'
+    mode: '0755'
+  environment: '{{proxy_environment}}'
+
+- name: install package
+  when: install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{tea_package_dir}}'

roles/gitea/tasks/main.yaml

@@ -0,0 +1,12 @@
+---
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: Linux.yaml
+
+- when: ansible_os_family == 'Windows'
+  include_tasks: Windows.yaml
+
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: tea
+    state: latest

roles/gitea/vars/main.yaml

@@ -0,0 +1,4 @@
+---
+tea_package_dir: /usr/local/stow/tea
+tea_package_exe: '{{tea_package_dir}}/bin/tea'
+tea_asset_query: '[?contains(name, `tea-`)] | [?contains(name, `linux-amd64`)] | [0]'

roles/glab/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew:
+    name: glab
+    state: latest

roles/glab/tasks/Debian.yaml

@@ -0,0 +1,68 @@
+---
+- set_fact:
+    glab: /usr/bin/glab
+- name: stat the executable
+  stat:
+    path: '{{glab}}'
+  register: stat_glab
+
+- name: get instlal version
+  when: stat_glab.stat.exists
+  command: '{{glab}} --version'
+  register: glab_version_output
+  changed_when: false
+
+- when: stat_glab.stat.exists
+  set_fact:
+    glab_version: '{{glab_version_output.stdout | replace("glab version ", "v")}}'
+
+- set_fact:
+    gitlab_api: 'https://gitlab.com/api/v4'
+    project_id: 'gitlab-org%2Fcli'
+
+- name: get list of gitlab releases
+  uri:
+    url:
+      '{{gitlab_api}}/projects/{{project_id}}/releases'
+  register: releases
+
+- set_fact:
+    latest: '{{releases.json[0]}}'
+    latest_version: '{{releases.json[0].tag_name}}'
+    query: >
+      [?contains(name, `glab`)] |
+      [?contains(name, `Linux`)] |
+      [?contains(name, `{{ansible_machine}}.deb`)] | [0]
+- set_fact:
+    asset: '{{latest.assets.links|json_query(query)}}'
+
+- name: create download directory
+  when: glab_version is not defined or glab_version != latest_version
+  tempfile:
+    state: directory
+    suffix: glab
+  register: tempdir
+
+- name: download .deb file
+  when: glab_version is not defined or glab_version != latest_version
+  get_url:
+    url: '{{asset.url}}'
+    dest: '{{tempdir.path}}/glab.deb'
+  environment: '{{proxy_environment}}'
+
+- name: install .deb file
+  when: glab_version is not defined or glab_version != latest_version
+  become: true
+  apt:
+    deb: '{{tempdir.path}}/glab.deb'
+
+- name: remove download directory
+  when: glab_version is not defined or glab_version != latest_version
+  file:
+    state: absent
+    path: '{{tempdir.path}}'
+
+- name: install zsh completions
+  when: glab_version is not defined or glab_version != latest_version
+  command:
+    glab completion -s zsh > ~/.local/share/zsh/site-functions/_glab

roles/glab/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: glab
+    state: latest

roles/glab/tasks/Windows.yaml

@@ -0,0 +1,5 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: glab
+    state: latest

roles/glab/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/gnome-shell/tasks/main.yaml

@@ -0,0 +1,30 @@
+---
+- assert:
+    that: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+
+- name: install gnome-tweaks
+  become: true
+  package:
+    name: gnome-tweaks
+    state: latest
+
+# NOTE: Use this command to see default keybindings
+# gsettings list-recursively | grep -i -E 'media-keys|keybindings'
+# NOTE: Use this command to inspect the current state of the custom keybindings
+# dconf dump / | sed -n '/\[org.gnome.settings-daemon.plugins.media-keys/,/^$/p'
+
+# TODO: List of custom-keybindings
+# [org/gnome/settings-daemon/plugins/media-keys]
+# custom-keybindings=['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/']
+
+# TODO: 1Password Quick Access
+# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0]
+# binding='<Shift><Alt>space'
+# command='1password --quick-access'
+# name='1Password Quick Access'
+
+# TODO: Guake toggle - this requires removing a default binding
+# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1]
+# binding='<Super>space'
+# command='guake-toggle'
+# name='Guake Toggle'

roles/guake/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- assert:
+    that: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+
+- name: install package
+  become: true
+  package:
+    name: guake
+    state: latest

roles/hiddenbar/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install homebrew package
+  homebrew_cask:
+    name: hiddenbar
+    state: latest

roles/htop/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: htop
+    state: latest

roles/iterm/tasks/main.yaml

@@ -0,0 +1,10 @@
+---
+- assert:
+    that: ansible_os_family == "Darwin"
+
+- name: install homebrew package
+  homebrew_cask:
+    name: iterm2
+    state: latest
+
+# TODO: Configure stuff, somehow?

roles/jp/tasks/Darwin.yaml

@@ -2,11 +2,15 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/jmespath/jp/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
-# TODO: Support arm64
 - set_fact:
-    asset_query: '[?contains(name, `jp-darwin-amd64`)] | [0]'
+    arch: '{{ [ansible_architecture] |
+      map("extract", { "arm64": "arm64", "x86_64": "amd64" }) | first }}'
+
+- set_fact:
+    asset_query: '[?contains(name, `jp-darwin-{{arch}}`)] | [0]'
     assets: '{{latest.json.assets}}'
     latest_version: '{{latest.json.tag_name}}'
     jp_exe: '{{ansible_env.HOME}}/.local/bin/jp'
@@ -14,7 +18,7 @@
 - name: check if already installed
   stat:
     path: '{{jp_exe}}'
-  register: jp_exe
+  register: jp_stat
 
 - name: get installed version
   when: jp_stat.stat.exists == True
@@ -36,3 +40,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{jp_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/jp/tasks/RedHat.yaml

@@ -0,0 +1,53 @@
+---
+- name: stat executable
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/jp'
+  register: jp_stat
+
+- name: get installed version
+  when: jp_stat.stat.exists
+  command: jp --version
+  changed_when: false
+  register: jp_version
+
+- name: extract installed version
+  when: jp_stat.stat.exists
+  set_fact:
+    jp_installed_version:
+      '{{jp_version.stdout.strip() | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- name: get latest release
+  uri:
+    url: 'https://api.github.com/repos/jmespath/jp/releases/latest'
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- name: determine if jp needs installed
+  set_fact:
+    jp_needs_installed:
+      '{{not jp_stat.stat.exists or jp_installed_version != latest.json.tag_name}}'
+    arch_dict: {x86_64: amd64, arm64: arm64}
+
+- name: select asset name
+  when: jp_needs_installed
+  set_fact:
+    asset_query:
+      '[?contains(name, `jp-linux-{{arch_dict[ansible_architecture]}}`)] | [0]'
+- name: select asset
+  when: jp_needs_installed
+  set_fact:
+    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
+
+- name: create directory
+  when: jp_needs_installed
+  file:
+    path: '{{ansible_env.HOME}}/.local/bin'
+    state: directory
+
+- name: install executable
+  when: jp_needs_installed
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{ansible_env.HOME}}/.local/bin/jp'
+    mode: '0755'
+  environment: '{{proxy_environment}}'

roles/jq/tasks/Debian.yaml

@@ -1,5 +1,6 @@
 ---
 - name: install apt package
+  become: true
   apt:
     name: jq
     state: latest

roles/jq/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: jq
+    state: latest

roles/kitty/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew_cask:
+    name: kitty
+    state: latest

roles/kitty/tasks/Debian.yaml

@@ -0,0 +1,98 @@
+---
+- name: remove apt package
+  become: true
+  apt:
+    name: kitty
+    state: absent
+
+- name: get latest version
+  uri:
+    url: https://api.github.com/repos/kovidgoyal/kitty/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    kitty_latest_version: '{{latest.json.tag_name[1:]}}'
+    kitty_exe: /usr/local/bin/kitty
+    kitty_package_dir: /usr/local/stow/kitty
+
+- name: check if already installed
+  stat:
+    path: '{{kitty_exe}}'
+  register: kitty
+
+- name: get installed version
+  when: kitty.stat.exists
+  command: '{{kitty_exe}} --version'
+  register: kitty_version
+  changed_when: false
+
+- when: kitty.stat.exists
+  set_fact:
+    kitty_install_version:
+      '{{kitty_version.stdout | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- set_fact:
+    kitty_asset_query: >
+      [? contains(name,
+        `kitty-{{kitty_latest_version}}-{{ansible_architecture}}.txz`)] | [0]
+
+- set_fact:
+    kitty_install_required: >
+      {{ kitty_install_version is not defined or
+        kitty_latest_version != kitty_install_version }}
+    kitty_asset: "{{ latest.json.assets | json_query(kitty_asset_query) }}"
+
+- name: uninstall package
+  when: kitty_install_required and kitty.stat.exists
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{kitty_package_dir}}'
+
+- name: remove outdated package
+  when: kitty_install_required and kitty.stat.exists
+  become: true
+  file:
+    state: absent
+    path: '{{kitty_package_dir}}'
+
+- set_fact:
+    kitty_package_archive: '{{kitty_package_dir}}/{{kitty_asset.name}}'
+
+- name: create package directory
+  become: true
+  file:
+    state: directory
+    path: '{{kitty_package_dir}}'
+
+- name: download package
+  when: kitty_install_required
+  become: true
+  get_url:
+    url: '{{kitty_asset.browser_download_url}}'
+    dest: '{{kitty_package_archive}}'
+  environment: '{{proxy_environment}}'
+
+- name: decompress package
+  when: kitty_install_required
+  become: true
+  unarchive:
+    src: '{{kitty_package_archive}}'
+    dest: '{{kitty_package_dir}}'
+    owner: root
+    group: staff
+
+- name: remove package archive
+  when: kitty_install_required
+  become: true
+  file:
+    state: absent
+    path: '{{kitty_package_archive}}'
+
+- name: install package
+  when: kitty_install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{kitty_package_dir}}'

roles/kitty/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: kitty
+    state: latest

roles/kitty/tasks/main.yaml

@@ -0,0 +1,7 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: clone config repo
+  git:
+    repo: git@code.infektor.net:config/kitty.git
+    dest: ~/.config/kitty

roles/llvm/tasks/Debian.yaml

@@ -1,5 +1,17 @@
 ---
+- name: slurp /etc/os-release
+  slurp:
+    src: /etc/os-release
+  register: os_release_slurp
+- set_fact:
+    os_release: "{{ os_release_slurp.content |
+        b64decode | trim() | replace('=', ': ') | from_yaml }}"
+
+- include_tasks: Ubuntu.yaml
+  when: "'ID_LIKE' in os_release and os_release.ID_LIKE == 'ubuntu debian'"
+
 - name: install apt packages
+  when: "'ID_LIKE' not in os_release"
   become: true
   apt:
     name:

roles/llvm/tasks/RedHat.yaml

@@ -0,0 +1,10 @@
+---
+- name: install dnf packages
+  become: true
+  dnf:
+    name:
+      - clang
+      - clang-tools-extra
+      - git-clang-format
+      - llvm
+    state: latest

roles/llvm/tasks/Ubuntu.yaml

@@ -2,21 +2,69 @@
 - name: get latest stable github release
   uri:
     url: https://api.github.com/repos/llvm/llvm-project/releases/latest
+    headers: '{{github_auth_headers}}'
   register: llvm_latest
 
+- name: read /etc/os-release
+  slurp:
+    src: /etc/os-release
+  register: os_release_b64
+- name: extract UBUNTU_CODENAME=<name> to support dirivitive distros
+  set_fact:
+    ubuntu_codename: >-
+      {{
+          os_release_b64.content | b64decode |
+          regex_search('UBUNTU_CODENAME=.*') |
+          replace('UBUNTU_CODENAME=', '')
+      }}
+
 - set_fact:
     llvm_major_version:
       '{{llvm_latest.json.tag_name[8:llvm_latest.json.tag_name.find(".")]}}'
 - set_fact:
     llvm_apt_repo_url:
-      'http://apt.llvm.org/{{ansible_distribution_release}}/'
+      'http://apt.llvm.org/{{ubuntu_codename}}/'
     llvm_apt_category:
-      'llvm-toolchain-{{ansible_distribution_release}}-{{llvm_major_version}}'
+      'llvm-toolchain-{{ubuntu_codename}}-{{llvm_major_version}}'
+    keyring: '/etc/apt/keyrings/llvm.asc'
+
+- name: remove old keyring
+  when: '"WSL" not in ansible_kernel'
+  become: true
+  apt_key:
+    url: https://apt.llvm.org/llvm-snapshot.gpg.key
+    id: 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421
+    state: absent
+
+- name: remove old upstream deb repository
+  become: true
+  apt_repository:
+    repo: 'deb {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    state: absent
+    filename: llvm
+    update_cache: false
+
+- name: remove old upstream deb-src repository
+  become: true
+  apt_repository:
+    repo: 'deb-src {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    state: absent
+    filename: llvm
+    update_cache: false
+
+- name: add apt repository key
+  become: true
+  get_url:
+    url: https://apt.llvm.org/llvm-snapshot.gpg.key
+    dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: add upstream deb repository
   become: true
   apt_repository:
-    repo: 'deb {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    repo: >
+      deb [signed-by={{keyring}}]
+      {{llvm_apt_repo_url}} {{llvm_apt_category}} main
     state: present
     filename: llvm
     update_cache: false
@@ -24,18 +72,13 @@
 - name: add upstream deb-src repository
   become: true
   apt_repository:
-    repo: 'deb-src {{llvm_apt_repo_url}} {{llvm_apt_category}} main'
+    repo: >
+      deb-src [signed-by={{keyring}}]
+      {{llvm_apt_repo_url}} {{llvm_apt_category}} main
     state: present
     filename: llvm
     update_cache: false
 
-- name: add apt repository key
-  become: true
-  apt_key:
-    url: https://apt.llvm.org/llvm-snapshot.gpg.key
-    id: 6084F3CF814B57C1CF12EFD515CF4D18AF4F7421
-    state: present
-
 - name: update apt cache
   become: true
   apt:

roles/llvm/tasks/main.yaml

@@ -1,5 +1,2 @@
 ---
 - include_tasks: '{{ansible_os_family}}.yaml'
-  when: ansible_os_family in ['Darwin', 'Windows']
-- include_tasks: '{{ansible_distribution}}.yaml'
-  when: ansible_os_family not in ['Darwin', 'Windows']

roles/macos/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: disable creation of .DS_Store in directories
+  osx_defaults:
+    domain: com.apple.desktopservices
+    key: DSDontWriteNetworkStores
+    value: 'true'

roles/magnet/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install app store package
+  mas:
+    id: 441258766
+    state: latest

roles/mas/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install homebrew package
+  homebrew:
+    name: mas
+    state: latest

roles/microsoft-remote-desktop/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == "Darwin"
+
+- name: install homebrew cask
+  homebrew_cask:
+    name: microsoft-remote-desktop
+    state: latest

roles/neovim/tasks/Darwin.yaml

@@ -1,7 +1,17 @@
 ---
 - name: install homebrew packages
   homebrew:
-    name: neovim
+    name:
+      - neovim
     state: latest
 
+- set_fact:
+    neovim_pip_packages: >
+      {{
+          neovim_pip_packages + [
+            "pynvim",
+            "greenlet"
+          ]
+      }}
+
 - include_tasks: Unix.yaml

roles/neovim/tasks/Debian.yaml

@@ -1,8 +1,136 @@
 ---
-- name: install apt package
+# Don't neovim packages because they are all behind, even Debian unstable.
+# Instead use the latest pre-build Linux package from GitHub, then stow them
+# into /usr/local.
+
+- name: remove apt package
   become: true
   apt:
     name: neovim
+    state: absent
+
+- set_fact:
+    old_package_dir: '/usr/local/lib/nvim/nvim-linux64'
+
+- name: check if old package directory exists
+  stat:
+    path: '{{old_package_dir}}'
+  register: old_package
+
+- name: uninstall package from old directory
+  when: old_package.stat.exists
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{old_package_dir}}'
+
+- name: remove old package directory
+  when: old_package.stat.exists
+  become: true
+  file:
+    state: absent
+    path: '{{old_package_dir}}'
+
+- name: install gnu stow for managing tar.gz package
+  become: true
+  apt:
+    name:
+      - stow
     state: latest
 
+- name: install python provider pip package
+  pip:
+    name: pynvim
+    state: latest
+
+- name: stat installed executable
+  stat:
+    path: /usr/local/bin/nvim
+  register: nvim
+
+- name: get installed version
+  when: nvim.stat.exists
+  command: nvim --version
+  register: nvim_version
+  changed_when: false
+
+- when: nvim.stat.exists
+  set_fact:
+    installed_version: '{{nvim_version.stdout_lines[0][5:]}}'
+
+- name: get latest version
+  uri:
+    url: https://api.github.com/repos/neovim/neovim/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    install_required:
+      '{{installed_version is not defined or
+         installed_version != latest.json.tag_name}}'
+    asset_query: '[?contains(name, `nvim-linux64.tar.gz`)]'
+    package_dir: '/usr/local/stow/nvim'
+- set_fact:
+    uninstall_required: '{{nvim.stat.exists and install_required}}'
+    asset: '{{latest.json.assets | json_query(asset_query)}}'
+    package_path: '{{package_dir}}/{{latest.json.name}}'
+
+- name: uninstall old package from /usr/local
+  when: uninstall_required
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{package_dir}}/nvim-linux64'
+
+- name: remove old package
+  become: true
+  when: uninstall_required
+  file:
+    path: '{{package_dir}}/nvim-linux64'
+    state: absent
+
+- name: create package directory
+  become: true
+  file:
+    path: '{{package_dir}}'
+    state: directory
+
+- name: download package archive
+  when: install_required
+  become: true
+  get_url:
+    url: '{{asset[0].browser_download_url}}'
+    dest: '{{package_path}}'
+  environment: '{{proxy_environment}}'
+
+- name: extract package archive
+  when: install_required
+  become: true
+  unarchive:
+    src: '{{package_path}}'
+    dest: '{{package_dir}}'
+
+- name: remove downloaded archive
+  when: install_required
+  become: true
+  file:
+    path: '{{package_path}}'
+    state: absent
+
+- name: move man to share/man
+  when: install_required
+  become: true
+  command:
+    argv:
+      - mv
+      - '{{package_dir}}/nvim-linux64/man'
+      - '{{package_dir}}/nvim-linux64/share'
+
+- name: install package to /usr/local
+  when: install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{package_dir}}/nvim-linux64'
+
 - include_tasks: Unix.yaml

roles/neovim/tasks/RedHat.yaml

@@ -0,0 +1,10 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name:
+      - neovim
+      - python3-neovim
+    state: latest
+
+- include_tasks: Unix.yaml

roles/neovim/tasks/Unix.yaml

@@ -4,11 +4,9 @@
 
 - name: clone config repo
   git:
-    repo: git@code.infektor.net:config/vim.git
+    repo: git@code.infektor.net:config/nvim.git
     dest: '{{vim_config_dir}}'
-    version: master
+    version: main
-
-# TODO: - name: set repo email
 
 - name: install pip packages
   pip:

roles/neovim/tasks/Windows-plugins.yaml

@@ -26,6 +26,13 @@
     file_type: directory
   register: found_plugins
 
+- set_fact:
+    backslashes: '\\'
+    forwardslash: '/'
+- set_fact:
+    managed_plugins: "{{managed_plugins | replace(backslashes, forwardslash)}}"
+    found_plugins: "{{found_plugins | replace(backslashes, forwardslash)}}"
+
 - name: remove found plugins which are not in the managed list
   win_file:
     path: '{{item.path}}'

roles/neovim/tasks/Windows.yaml

@@ -10,21 +10,10 @@
 
 - name: clone config repo
   win_git:
-    repo: git@code.infektor.net:config/vim.git
+    repo: git@code.infektor.net:config/nvim.git
     dest: '{{vim_config_dir}}'
-    branch: master
+    branch: main
-    # clone: false
-    update: true
-- win_owner:
-    path: '{{vim_config_dir}}'
-    user: Benie
-    recurse: true
 
-- assert:
-    that: False
-
-# - TODO: neovim set repo email
-#   win_git_config:
 # - TODO: neovim install pip packages
 #   win_pip:
 #     name: '{{neovim_pip_packages}}'
@@ -50,10 +39,18 @@
     src: '{{vim_config_dir}}/tasks.yaml'
     dest: vim_config_tasks.yaml
     flat: true
+  changed_when: false
 
 - when: config_repo_tasks.stat.exists
   include_tasks: vim_config_tasks.yaml
 
+- name: remove fetched tasks
+  file:
+    state: absent
+    path: vim_config_tasks.yaml
+  changed_when: false
+  delegate_to: localhost
+
 - when: ansible_os_family != "Windows" and
         plugin_dir is defined and plugins is defined
   include_tasks: 'Unix-plugins.yaml'

roles/neovim/vars/main.yaml

@@ -3,6 +3,5 @@ neovim_pip_packages:
   - cmake-language-server
   - cmakelint
   - compdb
-  - pynvim
   - vim-vint
   - yamllint

roles/nodejs/tasks/Debian.yaml

@@ -13,6 +13,7 @@
   get_url:
     url: 'https://nodejs.org/dist/{{latest.json[0].version}}/node-{{latest.json[0].version}}-linux-x64.tar.gz'
     dest: ~/.local/src/node/node.tar.gz
+  environment: '{{proxy_environment}}'
 
 - name: extract downloaded package
   unarchive:

roles/nodejs/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: nodejs
+    state: latest

roles/obsidian/handlers/main.yaml

@@ -0,0 +1,5 @@
+---
+- name: install desktop menu
+  command: >
+    xdg-desktop-menu install --mode user
+      {{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop

roles/obsidian/tasks/Darwin.yaml

@@ -1,11 +1,7 @@
 ---
 - name: install homebrew package
-  homebrew:
+  homebrew_cask:
     name: obsidian
     state: latest
 
-- name: clone notes repository
+- include_tasks: Unix.yaml
-  git:
-    repo: git@github.com:kbenzie/notes.git
-    dest: '{{ansible_env.HOME}}/Documents/Notes'
-    branch: main

roles/obsidian/tasks/Linux.yaml

@@ -0,0 +1,32 @@
+---
+- name: install flatpak package
+  become: true
+  flatpak:
+    name: md.obsidian.Obsidian
+
+# Remove old appimage if it exists
+- name: stat appimage symlink
+  stat:
+    path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+  register: symlink_file
+- set_fact:
+    iconpath: 'share/icons/hicolor/512x512/apps/obsidian.png'
+- name: remove appimage icon file
+  file:
+    dest: '{{ansible_env.HOME}}/.local/{{iconpath}}'
+    state: absent
+- name: remove appimage desktop file
+  file:
+    dest: '{{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop'
+    state: absent
+- name: remove old appimage
+  when: "'lnk_source' in symlink_file.stat"
+  file:
+    path: '{{symlink_file.stat.lnk_source}}'
+    state: absent
+- name: remove appimage symlink
+  file:
+    path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+    state: absent
+
+- include_tasks: Unix.yaml

roles/obsidian/tasks/Unix.yaml

@@ -0,0 +1,6 @@
+---
+- name: clone notes repository
+  git:
+    repo: git@github.com:kbenzie/notes.git
+    dest: '{{ansible_env.HOME}}/Documents/Notes'
+    version: main

roles/obsidian/tasks/Windows.yaml

@@ -12,7 +12,3 @@
     repo: git@github.com:kbenzie/notes.git
     dest: '{{obsidian_notes_repo}}'
     branch: main
-- win_owner:
-    path: '{{obsidian_notes_repo}}'
-    user: Benie
-    recurse: true