Update kitty to install from GitHub on Debian

Older version of kitty have terrible font rendering on Linux, e.g. the
one shipped with Ubuntu 22.04, so instead install the latest version
from the provided GitHub packages.

library/win_git.ps1

@@ -5,11 +5,12 @@
 
 $module = [Ansible.Basic.AnsibleModule]::Create($args, @{
     options = @{
-        dest = @{ type = 'path' }
-        repo = @{ required = $true; aliases = @( 'name' ) }
-        version = @{ default = 'HEAD' }
-        remote = @{ default = 'origin' }
-        executable = @{ default = $null; type = 'path' }
+        dest = @{type = 'path'}
+        repo = @{required = $true; aliases = @('name')}
+        version = @{default = 'HEAD'; aliases = @('branch')}
+        remote = @{default = 'origin'}
+        recursive = @{default = $true; type = 'bool'}
+        executable = @{default = $null; type = 'path'}
     }
     supports_check_mode = $false
 })
@@ -19,25 +20,12 @@ $repo = $module.Params.repo
 $version = $module.Params.version
 $remote = $module.Params.remote
 $git = $module.Params.executable
-if ( !$git ) {
+if (!$git) {
     $git = Get-ExecutablePath 'git'
 }
 
 # ================================= Utilities ==================================
 
-function Test-SshAcceptNewHostKey {
-    try {
-        $ssh = Get-ExecutablePath 'ssh'
-    } catch {
-        throw 'Remote host is missing ssh command, so you cannot use acceptnewhostkey option.'
-    }
-    $result = Run-Command "$ssh -o StrictHostKeyChecking=accept-new -V"
-    if ( $result.rc -ne 0 ) {
-        return $false
-    }
-    return $true
-}
-
 function Get-AbsolutePath {
     [CmdletBinding()]
     param (
@@ -58,70 +46,30 @@ function Get-GitDir {
     )
     $git_dir = Join-Path $path '.git'
     # Check if this .git is a file.
-    if ( [System.IO.File]::Exists($git_dir) ) {
+    if ([System.IO.File]::Exists($git_dir)) {
         # Extract the gitdir: path from the .git file.
         $groups = Get-Content "$git_dir" | `
             Select-String '(gitdir:) (.*)' | `
             ForEach { $_.Matches[0].Groups[1..2] }
         $ref_prefix = $groups[0]
         $gitdir = $groups[1]
-        if ( $ref_prefix -ne 'gitdir:' ) {
+        if ($ref_prefix -ne 'gitdir:') {
             $module.FailJson('The .git file has invalid gitdir reference format.')
         }
         # Check if the repo path is absolute.
-        if ( [System.IO.Path]::IsPathRooted($gitdir) ) {
+        if ([System.IO.Path]::IsPathRooted($gitdir)) {
             $git_dir = $gitdir
         } else {
             # Join with the input path to construct an absolute path.
             $git_dir = Join-Path $path $gitdir
         }
-        if ( ![System.IO.Directory]::Exists($git_dir) ) {
+        if (![System.IO.Directory]::Exists($git_dir)) {
             throw "$git_dir is not a directory."
         }
     }
     return $git_dir
 }
 
-function Get-GitSshExecutablePath {
-    if ( $env:GIT_SSH ) {
-        return $env:GIT_SSH
-    }
-    if ( $env:GIT_SSH_COMMAND ) {
-        return $env:GIT_SSH_COMMAND
-    }
-    return Get-ExecutablePath 'ssh'
-}
-
-function Test-GitRemoteBranch {
-    [CmdletBinding()]
-    param (
-        [Parameter(Mandatory = $true)] [String] $dest,
-        [Parameter(Mandatory = $true)] [String] $repository,
-        [Parameter(Mandatory = $true)] [String] $branch
-    )
-    $command = "`"$git`" ls-remote $repository -h refs/heads/$branch"
-    $result = Run-Command -command $command
-    if ( $result.stdout.Contains($version) ) {
-        return $true
-    }
-    return $false
-}
-
-function Test-GitRemoteTag {
-    [CmdletBinding()]
-    param (
-        [Parameter(Mandatory = $true)] [String] $dest,
-        [Parameter(Mandatory = $true)] [String] $repository,
-        [Parameter(Mandatory = $true)] [String] $tag
-    )
-    $command = "`"$git`" ls-remote $repository -t refs/tags/$tag"
-    $result = Run-Command -command $command
-    if ( $result.stdout.Contains($version) ) {
-        return $true
-    }
-    return $false
-}
-
 function Test-GitLocalChanges {
     [CmdletBinding()]
     param (
@@ -135,79 +83,19 @@ function Test-GitLocalChanges {
     return $changes.Lines -gt 0
 }
 
-function Get-GitRemoteHead {
-    [CmdletBinding()]
-    param (
-        [Parameter(Mandatory = $true)] [String] $repo,
-        [Parameter(Mandatory = $true)] [String] $dest,
-        [Parameter(Mandatory = $true)] [String] $version,
-        [Parameter(Mandatory = $true)] [String] $remote
-    )
-    $cloning = $false
-    $cwd = $null
-    $tag = $false
-    if ( $remote -eq $repo ) {
-        $cloning = $true
-    } else {
-        $cwd = $dest
-    }
-    if ( $version -eq 'HEAD' ) {
-        if ( $cloning ) {
-            # Cloning the repo, just get the remote's HEAD version.
-            $command = "`"$git`" ls-remote $remote -h HEAD"
-        } else {
-            $head_branch = Get-GitRemoteHeadBranch $module $dest $remote
-            $command = "`"$git`" ls-remote $remote -h refs/heads/$head_branch"
-        }
-    } elseif ( Test-GitRemoteBranch $dest $remote $version ) {
-        $command = "`"$git`" ls-remote $remote -h refs/head/$version"
-    } elseif ( Test-GitRemoteTag $dest $remote $version ) {
-        $tag = $true
-        $command = "`"$git`" ls-remote $remote -t refs/tags/$version*"
-    } else {
-        # Appears to be a sha1, return as-is since it apparently not possible
-        # to check for a specific sha1 on remote.
-        return $version
-    }
-    $result = Run-Command -command $command -working_directory $cwd
-    if ( $result.rc -ne 0 -or $result.stdout.Length -lt 1 ) {
-        throw "Could not determine remote ref for $vesion"
-    }
-    $ref = $result.stdout
-    if ( $tag ) {
-        # Find the dereferenced tag if this is an annotated tag.
-        ForEach ( $tag in $ref.Split([System.Environment]::NewLine) ) {
-            if ( $tag.EndsWith("$version ^{}") ) {
-                $ref = $tag
-            } elseif ( $tag.EndsWith($version) ) {
-                $ref = $tag
-            }
-        }
-    }
-    return $ref.Split()[0]
-}
-
-function Test-GitDetachedHead {
-    [CmdletBinding()]
-    Param (
-        [Parameter(Mandatory = $true)] [String] $dest
-    )
-}
-
 function Get-GitRemoteHeadBranch {
     [CmdletBinding()]
     Param (
         [Parameter(Mandatory = $true)] [String] $dest,
-        [Parameter(Mandatory = $true)] [String] $version,
         [Parameter(Mandatory = $true)] [String] $remote
     )
-    $git_dir = Join-Path $dest '.git'
-    # TODO: Check if the .git is a file. If it is a file, it means that we are
-    # in a submodule structure.
-    $head_file = Join-Path $git_dir 'HEAD'
-    if ( Test-GitDetachedHead $dest ) {
-        $head_file = Join-Path $git_dir 'refs' 'remotes' $remote 'HEAD'
+    $command = "`"$git`" symbolic-ref --short refs/remotes/$remote/HEAD"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Could not determine the default HEAD branch of remote: $remote" ` +
+                         "$result.stdout $result.stderr")
     }
+    return $result.stdout.Trim().Replace("$remote/", '')
 }
 
 function Get-GitCurrentSha {
@@ -220,44 +108,6 @@ function Get-GitCurrentSha {
     return $result.stdout.Trim()
 }
 
-function Get-GitRemoteUrl {
-    [CmdletBinding()]
-    Param (
-        [Parameter(Mandatory = $true)] [String] $dest,
-        [Parameter(Mandatory = $true)] [String] $remote
-    )
-    $command = "`"$git`" ls-remote --get-url $remote"
-    $result = Run-Command -command $command -working_directory $dest
-    if ( $result.rc -ne 0 ) {
-        # There was an issue getting the remote URL, most likely command is not
-        # available in this version of Git.
-        return $null
-    }
-    return $result.stdout.Trim()
-}
-
-function Set-GitRemoteUrl {
-    [CmdletBinding()]
-    Param (
-        [Parameter(Mandatory = $true)] [String] $dest,
-        [Parameter(Mandatory = $true)] [String] $remote,
-        [Parameter(Mandatory = $true)] [String] $url
-    )
-    # Return if remote URL isn't changing.
-    $remote_url = Get-GitRemoteUrl $dest $remote
-    if ( $remote_url -eq $repo ) {
-        return $false
-    }
-    $command = "`"$git`" remote set-url $remote $url"
-    $result = Run-Command -command $command -working_directory $dest
-    if ( $result.rc -ne 0 ) {
-        $module.FailJson("Failed to set a new url $url for $remote`: $result.stderr")
-    }
-    # Return false if remote_url is null to maintain previous behavior for Git
-    # versions prior to 1.7.5 that lack required functionality.
-    return $remote_url -ne $null
-}
-
 function Invoke-GitClone {
     [CmdletBinding()]
     Param (
@@ -266,59 +116,80 @@ function Invoke-GitClone {
         [Parameter(Mandatory = $true)] [String] $dest
     )
     $dest_parent = Split-Path -Path $dest -Parent
-    if ( !(Test-Path $dest_parent) ) {
+    if (!(Test-Path $dest_parent)) {
         New-Item -Path $dest_parent -ItemType Directory
     }
     $command = "`"$git`" clone --recursive --origin $remote $repo $dest"
-    if ( $version -ne "HEAD" ) {
+    if ($version -ne "HEAD") {
         $command += " --branch $version"
     }
     $result = Run-Command -command $command -working_directory $cwd
-    if ( $result.rc -ne 0 ) {
+    if ($result.rc -ne 0) {
         $module.FailJson($result.stderr)
     }
-    # Ensure the newly cloned repository has the correct owner
-    $userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
-    $idRef = [System.Security.Principal.NTAccount]::new($userName)
-    Get-Item $dest | foreach { `
-        $_ ; $_ | Get-ChildItem -Force -Recurse `
-    } | foreach { `
-        $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `
-    }
-}
-
-function Invoke-GitFetch {
-    [CmdletBinding()]
-    Param (
-        [Parameter(Mandatory = $true)] [String] $repo,
-        [Parameter(Mandatory = $true)] [String] $dest,
-        [Parameter(Mandatory = $true)] [String] $version,
-        [Parameter(Mandatory = $true)] [String] $remote
-    )
-    $command = "`"$git`" fetch --tags $remote"
-    $result = Run-Command -command $command -working_directory $dest
-    if ( $result.rc -ne 0 ) {
-        $module.FailJson("Failed to download remote objects and refs:" + `
-                         "$result.stdout $result.stderr")
-    }
 }
 
 function Invoke-GitCheckout {
     [CmdletBinding()]
     Param (
         [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
         [Parameter(Mandatory = $true)] [String] $version
     )
-    $result = Run-Command -command "`"$git`" checkout $version" -working_directory $dest
-    if ( $result.rc -ne 0 ) {
-        $module.FailJson("Failed to checkout version '$version': " + `
-                         "$result.stdout $result.stderr")
+    if ($version -eq "HEAD") {
+        $branch = Get-GitRemoteHeadBranch $dest $remote
+    } else {
+        $branch = $version
+    }
+    $result = Run-Command -command "`"$git`" checkout $branch" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to checkout version '$version'`n" + $result.stderr)
+    }
+}
+
+function Invoke-GitFetch {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $command = "`"$git`" fetch --tags $remote"
+    $result = Run-Command -command $command -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to download remote objects and refs:`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitPull {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest,
+        [Parameter(Mandatory = $true)] [String] $remote,
+        [Parameter(Mandatory = $true)] [String] $version
+    )
+    $result = Run-Command -command "`"$git`" pull $remote $version" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to pull version '$version' from remote '$origin':`n" + `
+                         $result.stderr)
+    }
+}
+
+function Invoke-GitSubmoduleUpdate {
+    [CmdletBinding()]
+    Param (
+        [Parameter(Mandatory = $true)] [String] $dest
+    )
+    $result = Run-Command -command "`"$git`" submodule update --init" -working_directory $dest
+    if ($result.rc -ne 0) {
+        $module.FailJson("Failed to initialized/update submodules:`n" + $result.stderr)
     }
 }
 
 # ================================ Start logic =================================
 
-if ( !$dest ) {
+if (!$dest) {
     $module.FailJson('The destination directory must be specified.')
 }
 $dest = Get-AbsolutePath $dest
@@ -327,18 +198,35 @@ $gitconfig = Join-Path $git_dir 'config'
 
 $module.Result.before = $null
 
-$local_changes = $false
-if ( ($dest -and ![System.IO.File]::Exists($gitconfig)) -or (!$dest -and !$clone) ) {
-    Invoke-GitClone $repo $remote $dest $version
+if (($dest -and ![System.IO.File]::Exists($gitconfig))) {
+    Invoke-GitClone $repo $remote $dest
+    Invoke-GitCheckout $dest $remote $version
     $module.Result.changed = $true
 } else {
-    $local_changes = Test-GitLocalChanges $dest
     $module.Result.before = Get-GitCurrentSha $dest
-    if ( $local_changes ) {
+    if (Test-GitLocalChanges $dest) {
         $module.FailJson('Local modifications exist in repository.')
     }
-    # Checkout branch, if $version is HEAD get HEAD branch
-    # Pull
+    Invoke-GitFetch $dest $remote $version
+    Invoke-GitCheckout $dest $remote $version
+    Invoke-GitPull $dest $remote $version
+    $module.Result.after = Get-GitCurrentSha $dest
+    if ($module.Result.before -ne $module.Result.after) {
+        $module.Result.changed = $true
+    }
+}
+
+if ($recursive) {
+    Invoke-GitSubmoduleUpdate $dest
+}
+
+# Ensure the repository has the correct owner
+$userName = [System.Security.Principal.WindowsIdentity]::GetCurrent().Name
+$idRef = [System.Security.Principal.NTAccount]::new($userName)
+Get-Item -Force $dest | foreach { `
+    $_ ; $_ | Get-ChildItem -Force -Recurse `
+} | foreach { `
+    $acl = $_ | Get-Acl; $acl.SetOwner($idRef); $_ | Set-Acl -AclObject $acl `
 }
 
 $module.ExitJson()

playbooks/1password.yaml

@@ -1,4 +1,6 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - 1password

playbooks/Linux.yaml

@@ -2,7 +2,20 @@
 - import_playbook: LinuxCLI.yaml
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
+    - role: firefox
     - role: kitty
+    - role: guake
+    - role: cider
+    - role: ulauncher
+    - role: gnome-shell
+      when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
     - role: xremap
-      when: ansible_os_family == "RedHat"
+      when: >
+        'GNOME' in ansible_env.XDG_CURRENT_DESKTOP and
+        ansible_env.XDG_SESSION_TYPE == 'wayland' and (
+            ansible_os_family == "RedHat" or
+            ansible_os_family == "Debian"
+        )

playbooks/LinuxCLI.yaml

@@ -1,6 +1,15 @@
 ---
+- hosts: localhost
+  vars_files:
+    - vars/environment.yaml
+  roles:
+    - role: rpmfusion
+      when: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: gdb
+    - role: podman
     - role: system-info

playbooks/UnixCLI.yaml

@@ -1,19 +1,24 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: sudo
       when: ansible_user_id != "root"
     - role: python
 
     - role: zsh
+      tags: unsafe
     - role: neovim
     - role: tmux
+      tags: unsafe
 
     - role: ag
     - role: bash
     - role: bat
     - role: curl
     - role: editline
+    - role: fd
     - role: fzf
     - role: gh
     - role: git
@@ -22,6 +27,7 @@
     - role: jp
     - role: jq
     - role: readline
+    - role: ripgrep
     - role: tidy
     - role: tree
     - role: watch

playbooks/UnixGUI.yaml

@@ -1,7 +1,12 @@
 ---
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
+    - role: flatpak
+      when: ansible_os_family != "Darwin"
+
     - role: 1password
+    - role: ferdium
     - role: fonts
     - role: obsidian
-    - role: webcatalog

playbooks/WSL.yaml

@@ -1,6 +1,7 @@
 ---
-- import_playbook: UnixCLI.yaml
+- import_playbook: LinuxCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
-    - role: gdb
     - role: wsl

playbooks/Windows.yaml

@@ -1,6 +1,7 @@
 ---
 - hosts: windows
-
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: python
     - role: git
@@ -11,10 +12,12 @@
     - role: ag
     - role: bat
     - role: curl
+    - role: fd
     - role: fzf
     - role: gh
     - role: glab
     - role: jq
+    - role: ripgrep
     - role: tree
     - role: yq
 
@@ -23,7 +26,10 @@
 
     - role: 1password
     - role: autohotkey
+    - role: cider
+    - role: ferdium
     - role: firefox
+    - role: fonts
     - role: obsidian
     - role: powertoys
     - role: windows-terminal

playbooks/macOS.yaml

@@ -1,14 +1,22 @@
 ---
 - import_playbook: UnixCLI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: system-info
 - import_playbook: UnixGUI.yaml
 - hosts: localhost
+  vars_files:
+    - vars/environment.yaml
   roles:
     - role: mas
 
+    - role: hiddenbar
     - role: iterm
+    - role: kitty
     - role: magnet
     - role: microsoft-remote-desktop
     - role: viscosity
+
+    - role: macos

playbooks/vars/environment.yaml

@@ -0,0 +1,15 @@
+---
+# GitHub may rate limit unauthenticated API requests, this is more likely when
+# behind a network proxy. Set the GITHUB_TOKEN environment variable to
+# authenticate any GitHub API requests executed while playing roles.
+github_auth_headers: >-
+  {{ { 'Authorization': 'Bearer ' + lookup('env', 'GITHUB_TOKEN') }
+      if lookup('env', 'GITHUB_TOKEN') else {} }}
+
+# When working behind a network proxy, set the http_proxy and https_proxy
+# environment variables. These will be passed through to uses of the `get_url`
+# module when playing roles.
+proxy_environment: >-
+  {{ { 'http_proxy': lookup('env', 'http_proxy'),
+       'https_proxy': lookup('env', 'https_proxy') }
+      if lookup('env', 'http_proxy') and lookup('env', 'https_proxy') else {} }}

roles/1password/tasks/Debian.yaml

@@ -16,6 +16,7 @@
   get_url:
     url: https://downloads.1password.com/linux/keys/1password.asc
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: set compatible architecture
   when: ansible_machine == 'x86_64'
@@ -35,6 +36,11 @@
       https://downloads.1password.com/linux/debian/{{arch}} stable main
     dest: /etc/apt/sources.list.d/1password.list
 
+- name: apt update
+  become: true
+  apt:
+    update_cache: true
+
 - name: install gui package
   when: '"WSL" not in ansible_kernel'
   become: true

roles/1password/tasks/RedHat.yaml

@@ -1,10 +1,10 @@
 ---
-- name: add yum repository key
+- name: add dnf repository key
   become: true
   rpm_key:
     key: https://downloads.1password.com/linux/keys/1password.asc
 
-- name: add yum repository
+- name: add dnf repository
   become: true
   yum_repository:
     name: 1password
@@ -15,8 +15,8 @@
     repo_gpgcheck: true
     gpgkey: ['https://downloads.1password.com/linux/keys/1password.asc']
 
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: 1password
     state: latest

roles/1password/tasks/Windows.yaml

@@ -11,36 +11,22 @@
     path: '{{app_exe}}'
   register: app_stat
 
-- name: get installed version
-  when: app_stat.stat.exists == True
-  win_command: '{{app_exe}} --version'
-  register: app_version
-  changed_when: false
-
-- when: app_stat.stat.exists == True
-  set_fact:
-    installed_version: '{{app_version.stdout.strip()}}'
-
 - name: download latest installer
+  when: not app_stat.stat.exists
   win_get_url:
     url: https://downloads.1password.com/win/1PasswordSetup-latest.exe
     dest: '{{installer_exe}}'
-
-- name: get installer version
-  win_shell: |
-    (Get-ItemProperty {{installer_exe}}).VersionInfo.ProductVersion
-  register: installer_product_version
-  changed_when: false
-
-# FIXME: The [5:] is to account for a mystery "\e[6 q" prefix, not sure if this
-# is consistent across machines or some other oddity.
-- set_fact:
-    installer_version: '{{installer_product_version.stdout.strip()[5:]}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer
-  when: installed_version is not defined or installed_version != installer_version
+  when: not app_stat.stat.exists
   win_command: '{{installer_exe}}'
 
+- name: remove installer
+  win_file:
+    path: '{{installer_exe}}'
+    state: absent
+
 - name: create start menu shortcut
   win_shortcut:
     src: '{{app_exe}}'
@@ -83,6 +69,7 @@
   win_get_url:
     url: '{{latest.downloads.Windows.amd64}}'
     dest: '{{cli_zip}}'
+  environment: '{{proxy_environment}}'
 
 - name: unzip op zip archive
   when: cli_installed_version is not defined or cli_installed_version != latest.version

roles/ag/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: the_silver_searcher
     state: latest

roles/autohotkey/tasks/main.yaml

@@ -9,10 +9,6 @@
     repo: git@code.infektor.net:config/AutoHotKey.git
     dest: '{{autohotkey_repo_dir}}'
     branch: master
-- win_owner:
-    path: '{{autohotkey_repo_dir}}'
-    user: Benie
-    recurse: true
 
 - name: create scheduled task
   win_scheduled_task:

roles/bash/templates/bashrc

@@ -110,3 +110,13 @@ grey="\001\e[38;5;244m\002"
 reset="\001\e[0m\002"
 
 PS1="$yellow\u$reset@$grey\h$reset "
+
+# Setup environment variables
+export PATH=$HOME/.local/bin:$PATH
+if command -v nvim > /dev/null; then
+  export EDITOR=nvim
+elif command -v vim > /dev/null; then
+  export EDITOR=vim
+elif command -v vi > /dev/null; then
+  export EDITOR=vi
+fi

roles/bat/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: bat
     state: latest

roles/bat/tasks/deb.yaml

@@ -2,6 +2,7 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/sharkdp/bat/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -50,6 +51,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{bat_deb}}'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: installed_version is not defined or installed_version != latest_version

roles/cider/tasks/main.yaml

@@ -0,0 +1,15 @@
+---
+- assert:
+    that: ansible_os_family != 'Darwin'
+
+- name: install chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: Cider
+    state: latest
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows'
+  become: true
+  flatpak:
+    name: sh.cider.Cider

roles/curl/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: curl
     state: latest

roles/fd/tasks/main.yaml

@@ -0,0 +1,26 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: fd-find
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: fd-find
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: fd
+    state: latest
+
+- name: install Chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: fd
+    state: latest

roles/ferdium/tasks/Windows.yaml

@@ -0,0 +1,14 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: ferdium
+    state: latest
+
+- set_fact:
+    ferdium_exe: 'C:/Program Files/Ferdium/Ferdium.exe'
+
+- name: create start menu shortcut
+  win_shortcut:
+    src: '{{ferdium_exe}}'
+    dest: '{{ansible_env.ProgramData}}/Microsoft/Windows/Start Menu/Programs/Ferdium.lnk'
+    icon: '{{ferdium_exe}},0'

roles/ferdium/tasks/main.yaml

@@ -0,0 +1,16 @@
+---
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew_cask:
+    name: ferdium
+    state: latest
+
+- when: ansible_os_family == 'Windows'
+  include_tasks: Windows.yaml
+
+- name: install flatpak package
+  when: ansible_os_family != 'Windows' and
+        ansible_os_family != 'Darwin'
+  become: true
+  flatpak:
+    name: org.ferdium.Ferdium

roles/firefox/tasks/Ubuntu.yaml

@@ -0,0 +1,52 @@
+---
+- name: remove snap package
+  become: true
+  snap:
+    name: firefox
+    state: absent
+
+- name: create keyrings directory
+  become: true
+  file:
+    path: /etc/apt/keyrings
+    mode: '755'
+    state: directory
+
+- name: install mozilla repo keyring
+  become: true
+  get_url:
+    url: https://packages.mozilla.org/apt/repo-signing-key.gpg
+    dest: /etc/apt/keyrings/packages.mozilla.org.asc
+  environment: '{{proxy_environment}}'
+
+- name: add mozilla apt repo
+  become: true
+  copy:
+    content: >-
+      deb [signed-by=/etc/apt/keyrings/packages.mozilla.org.asc]
+      https://packages.mozilla.org/apt mozilla main
+    dest: /etc/apt/sources.list.d/mozilla.list
+
+- name: pin mozilla package
+  become: true
+  copy:
+    content: |
+      Package: *
+      Pin: origin packages.mozilla.org
+      Pin-Priority: 1000
+    dest: /etc/apt/preferences.d/mozilla
+
+- name: install mozilla package
+  become: true
+  apt:
+    name: firefox
+    state: latest
+    allow_downgrade: true
+    update_cache: true
+
+- name: install gnome shell integration
+  when: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+  become: true
+  apt:
+    name: chrome-gnome-shell
+    state: latest

roles/firefox/tasks/main.yaml

@@ -1,2 +1,5 @@
 ---
-- include_tasks: '{{ansible_os_family}}.yaml'
+- include_tasks: Windows.yaml
+  when: ansible_os_family == 'Windows'
+- include_tasks: Ubuntu.yaml
+  when: ansible_distribution == 'Ubuntu'

roles/flatpak/tasks/Debian.yaml

@@ -0,0 +1,6 @@
+---
+- name: install apt package
+  become: true
+  apt:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: flatpak
+    state: latest

roles/flatpak/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'
+
+- name: add flathub repository remote
+  become: true
+  flatpak_remote:
+    name: flathub
+    state: present
+    flatpakrepo_url: https://dl.flathub.org/repo/flathub.flatpakrepo

roles/fonts/tasks/Linux.yaml

@@ -17,6 +17,7 @@
 - name: get latest release
   uri:
     url: https://api.github.com/repos/ryanoasis/nerd-fonts/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -36,6 +37,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/share/fonts/tmp.zip'
+  environment: '{{proxy_environment}}'
 
 - name: install Caskaydia Cove Nerd Font
   when: needs_installed

roles/fonts/tasks/Windows.yaml

@@ -0,0 +1,5 @@
+---
+- name: install chocolatey package
+  win_chocolatey:
+    name: nerd-fonts-CascadiaCode
+    state: latest

roles/fonts/tasks/main.yaml

@@ -1,5 +1,7 @@
 ---
 - when: ansible_os_family == 'Darwin'
   include_tasks: 'Darwin.yaml'
+- when: ansible_os_family == 'Windows'
+  include_tasks: 'Windows.yaml'
 - when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
   include_tasks: 'Linux.yaml'

roles/fzf/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: fzf
     state: latest

roles/gh/tasks/Debian.yaml

@@ -15,6 +15,7 @@
     url: https://cli.github.com/packages/githubcli-archive-keyring.gpg
     dest: /usr/share/keyrings/githubcli-archive-keyring.gpg
     mode: 0644
+  environment: '{{proxy_environment}}'
 
 - name: add apt repository list
   become: true

roles/gh/tasks/RedHat.yaml

@@ -1,9 +1,10 @@
 ---
-- name: add yum repository
+- name: add dnf repository
   become: true
   get_url:
     url: https://cli.github.com/packages/rpm/gh-cli.repo
     dest: /etc/yum.repos.d/gh-cli.repo
+  environment: '{{proxy_environment}}'
 
 - name: install dnf package
   become: true

roles/git/tasks/Windows-installer.yaml

@@ -2,6 +2,7 @@
 - name: get json containing all releases
   win_uri:
     url: 'https://api.github.com/repos/git-for-windows/git/releases/tags/v{{git_version}}.windows.1'
+    headers: '{{github_auth_headers}}'
     return_content: true
   register: git_release
 
@@ -18,6 +19,7 @@
   win_get_url:
     url: '{{git_asset.browser_download_url}}'
     dest: '{{git_installer_path}}'
+  environment: '{{proxy_environment}}'
 
 - name: run installer command
   win_command:

roles/git/tasks/Windows.yaml

@@ -31,17 +31,13 @@
 - include_tasks: Windows-installer.yaml
   when: git_run_installer
 
-# - name: clone config repos
-#   win_git:
-#     repo: '{{item.repo}}'
-#     dest: '{{ansible_env.USERPROFILE}}\.config\{{item.name}}'
-#     version: master
-#   with_items: '{{git_config_repos}}'
-# - win_owner:
-#     path: '{{ansible_env.USERPROFILE}}\.config\{{item.name}}'
-#     user: Benie
-#     recurse: true
-#   with_items: '{{git_config_repos}}'
+# NOTE: If this is failing on first install of git, restart the sshd service.
+- name: clone config repos
+  win_git:
+    repo: '{{item.repo}}'
+    dest: '{{ansible_env.USERPROFILE}}/.config/{{item.name}}'
+    version: master
+  with_items: '{{git_config_repos}}'
 
 # - TODO: install pip packages
 #   win_pip:

roles/gitea/tasks/Linux.yaml

@@ -0,0 +1,50 @@
+---
+- name: stat tea executable
+  stat:
+    path: '{{tea_package_exe}}'
+  register: tea
+
+- name: get installed version
+  when: tea.stat.exists
+  command: '{{tea_package_exe}} --version'
+  register: tea_version_string
+
+- name: extract version number
+  when: tea.stat.exists
+  set_fact:
+    installed_version: "{{tea_version_string.stdout |
+      regex_search('^.*(\\d+\\.\\d+\\.\\d+).*golang.*$', '\\1') }}"
+
+- name: get latest release json
+  uri:
+    url: https://gitea.com/api/v1/repos/gitea/tea//releases/latest
+  register: latest
+
+- name: check installed version
+  set_fact:
+    install_required: >
+      {{not tea.stat.exists or latest.json.name != 'v' + installed_version[0]}}
+    asset: '{{latest.json.assets | json_query(tea_asset_query)}}'
+
+- name: create package directory
+  when: install_required
+  become: true
+  file:
+    state: directory
+    path: '{{tea_package_dir}}/bin'
+
+- name: download package
+  when: install_required
+  become: true
+  get_url:
+    url: '{{asset.browser_download_url}}'
+    dest: '{{tea_package_exe}}'
+    mode: '0755'
+  environment: '{{proxy_environment}}'
+
+- name: install package
+  when: install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{tea_package_dir}}'

roles/gitea/tasks/main.yaml

@@ -0,0 +1,12 @@
+---
+- when: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+  include_tasks: Linux.yaml
+
+- when: ansible_os_family == 'Windows'
+  include_tasks: Windows.yaml
+
+- name: install homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: tea
+    state: latest

roles/gitea/vars/main.yaml

@@ -0,0 +1,4 @@
+---
+tea_package_dir: /usr/local/stow/tea
+tea_package_exe: '{{tea_package_dir}}/bin/tea'
+tea_asset_query: '[?contains(name, `tea-`)] | [?contains(name, `linux-amd64`)] | [0]'

roles/glab/tasks/Debian.yaml

@@ -48,6 +48,7 @@
   get_url:
     url: '{{asset.url}}'
     dest: '{{tempdir.path}}/glab.deb'
+  environment: '{{proxy_environment}}'
 
 - name: install .deb file
   when: glab_version is not defined or glab_version != latest_version

roles/gnome-shell/tasks/main.yaml

@@ -0,0 +1,30 @@
+---
+- assert:
+    that: "'GNOME' in ansible_env.XDG_CURRENT_DESKTOP"
+
+- name: install gnome-tweaks
+  become: true
+  package:
+    name: gnome-tweaks
+    state: latest
+
+# NOTE: Use this command to see default keybindings
+# gsettings list-recursively | grep -i -E 'media-keys|keybindings'
+# NOTE: Use this command to inspect the current state of the custom keybindings
+# dconf dump / | sed -n '/\[org.gnome.settings-daemon.plugins.media-keys/,/^$/p'
+
+# TODO: List of custom-keybindings
+# [org/gnome/settings-daemon/plugins/media-keys]
+# custom-keybindings=['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/']
+
+# TODO: 1Password Quick Access
+# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0]
+# binding='<Shift><Alt>space'
+# command='1password --quick-access'
+# name='1Password Quick Access'
+
+# TODO: Guake toggle - this requires removing a default binding
+# [org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1]
+# binding='<Super>space'
+# command='guake-toggle'
+# name='Guake Toggle'

roles/guake/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- assert:
+    that: ansible_os_family != 'Darwin' and ansible_os_family != 'Windows'
+
+- name: install package
+  become: true
+  package:
+    name: guake
+    state: latest

roles/hiddenbar/tasks/main.yaml

@@ -0,0 +1,8 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: install homebrew package
+  homebrew_cask:
+    name: hiddenbar
+    state: latest

roles/jp/tasks/Darwin.yaml

@@ -2,6 +2,7 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/jmespath/jp/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -39,3 +40,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{jp_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/jp/tasks/RedHat.yaml

@@ -19,6 +19,7 @@
 - name: get latest release
   uri:
     url: 'https://api.github.com/repos/jmespath/jp/releases/latest'
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if jp needs installed
@@ -49,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/jp'
     mode: '0755'
+  environment: '{{proxy_environment}}'

roles/kitty/tasks/Darwin.yaml

@@ -0,0 +1,5 @@
+---
+- name: install homebrew package
+  homebrew_cask:
+    name: kitty
+    state: latest

roles/kitty/tasks/Debian.yaml

@@ -1,6 +1,98 @@
 ---
-- name: install apt package
+- name: remove apt package
   become: true
   apt:
     name: kitty
-    state: latest
+    state: absent
+
+- name: get latest version
+  uri:
+    url: https://api.github.com/repos/kovidgoyal/kitty/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    kitty_latest_version: '{{latest.json.tag_name[1:]}}'
+    kitty_exe: /usr/local/bin/kitty
+    kitty_package_dir: /usr/local/stow/kitty
+
+- name: check if already installed
+  stat:
+    path: '{{kitty_exe}}'
+  register: kitty
+
+- name: get installed version
+  when: kitty.stat.exists
+  command: '{{kitty_exe}} --version'
+  register: kitty_version
+  changed_when: false
+
+- when: kitty.stat.exists
+  set_fact:
+    kitty_install_version:
+      '{{kitty_version.stdout | regex_replace("^.*(\d+\.\d+\.\d+).*$", "\1")}}'
+
+- set_fact:
+    kitty_asset_query: >
+      [? contains(name,
+        `kitty-{{kitty_latest_version}}-{{ansible_architecture}}.txz`)] | [0]
+
+- set_fact:
+    kitty_install_required: >
+      {{ kitty_install_version is not defined or
+        kitty_latest_version != kitty_install_version }}
+    kitty_asset: "{{ latest.json.assets | json_query(kitty_asset_query) }}"
+
+- name: uninstall package
+  when: kitty_install_required and kitty.stat.exists
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{kitty_package_dir}}'
+
+- name: remove outdated package
+  when: kitty_install_required and kitty.stat.exists
+  become: true
+  file:
+    state: absent
+    path: '{{kitty_package_dir}}'
+
+- set_fact:
+    kitty_package_archive: '{{kitty_package_dir}}/{{kitty_asset.name}}'
+
+- name: create package directory
+  become: true
+  file:
+    state: directory
+    path: '{{kitty_package_dir}}'
+
+- name: download package
+  when: kitty_install_required
+  become: true
+  get_url:
+    url: '{{kitty_asset.browser_download_url}}'
+    dest: '{{kitty_package_archive}}'
+  environment: '{{proxy_environment}}'
+
+- name: decompress package
+  when: kitty_install_required
+  become: true
+  unarchive:
+    src: '{{kitty_package_archive}}'
+    dest: '{{kitty_package_dir}}'
+    owner: root
+    group: staff
+
+- name: remove package archive
+  when: kitty_install_required
+  become: true
+  file:
+    state: absent
+    path: '{{kitty_package_archive}}'
+
+- name: install package
+  when: kitty_install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{kitty_package_dir}}'

roles/llvm/tasks/Debian.yaml

@@ -1,5 +1,17 @@
 ---
+- name: slurp /etc/os-release
+  slurp:
+    src: /etc/os-release
+  register: os_release_slurp
+- set_fact:
+    os_release: "{{ os_release_slurp.content |
+        b64decode | trim() | replace('=', ': ') | from_yaml }}"
+
+- include_tasks: Ubuntu.yaml
+  when: "'ID_LIKE' in os_release and os_release.ID_LIKE == 'ubuntu debian'"
+
 - name: install apt packages
+  when: "'ID_LIKE' not in os_release"
   become: true
   apt:
     name:

roles/llvm/tasks/Linux Mint.yaml

@@ -1,2 +0,0 @@
----
-- include_tasks: Ubuntu.yaml

roles/llvm/tasks/Pop!_OS.yaml

@@ -1,2 +0,0 @@
----
-- include_tasks: Ubuntu.yaml

roles/llvm/tasks/Ubuntu.yaml

@@ -2,6 +2,7 @@
 - name: get latest stable github release
   uri:
     url: https://api.github.com/repos/llvm/llvm-project/releases/latest
+    headers: '{{github_auth_headers}}'
   register: llvm_latest
 
 - name: read /etc/os-release
@@ -56,6 +57,7 @@
   get_url:
     url: https://apt.llvm.org/llvm-snapshot.gpg.key
     dest: '{{keyring}}'
+  environment: '{{proxy_environment}}'
 
 - name: add upstream deb repository
   become: true

roles/llvm/tasks/main.yaml

@@ -1,5 +1,2 @@
 ---
 - include_tasks: '{{ansible_os_family}}.yaml'
-  when: ansible_os_family in ['Darwin', 'Windows']
-- include_tasks: '{{ansible_distribution}}.yaml'
-  when: ansible_os_family not in ['Darwin', 'Windows']

roles/macos/tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+- assert:
+    that: ansible_os_family == 'Darwin'
+
+- name: disable creation of .DS_Store in directories
+  osx_defaults:
+    domain: com.apple.desktopservices
+    key: DSDontWriteNetworkStores
+    value: 'true'

roles/neovim/tasks/Darwin.yaml

@@ -6,6 +6,12 @@
     state: latest
 
 - set_fact:
-    neovim_pip_packages: '{{neovim_pip_packages + ["pynvim"]}}'
+    neovim_pip_packages: >
+      {{
+          neovim_pip_packages + [
+            "pynvim",
+            "greenlet"
+          ]
+      }}
 
 - include_tasks: Unix.yaml

roles/neovim/tasks/Debian.yaml

@@ -1,18 +1,136 @@
 ---
-- name: add neovim stable ppa
-  when: ansible_distribution == 'Ubuntu' and
-        ansible_distribution_version == '20.04'
-  become: true
-  apt_repository:
-    repo: ppa:neovim-ppa/stable
-    update_cache: true
+# Don't neovim packages because they are all behind, even Debian unstable.
+# Instead use the latest pre-build Linux package from GitHub, then stow them
+# into /usr/local.
 
-- name: install apt package
+- name: remove apt package
+  become: true
+  apt:
+    name: neovim
+    state: absent
+
+- set_fact:
+    old_package_dir: '/usr/local/lib/nvim/nvim-linux64'
+
+- name: check if old package directory exists
+  stat:
+    path: '{{old_package_dir}}'
+  register: old_package
+
+- name: uninstall package from old directory
+  when: old_package.stat.exists
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{old_package_dir}}'
+
+- name: remove old package directory
+  when: old_package.stat.exists
+  become: true
+  file:
+    state: absent
+    path: '{{old_package_dir}}'
+
+- name: install gnu stow for managing tar.gz package
   become: true
   apt:
     name:
-      - neovim
-      - python3-neovim
+      - stow
     state: latest
 
+- name: install python provider pip package
+  pip:
+    name: pynvim
+    state: latest
+
+- name: stat installed executable
+  stat:
+    path: /usr/local/bin/nvim
+  register: nvim
+
+- name: get installed version
+  when: nvim.stat.exists
+  command: nvim --version
+  register: nvim_version
+  changed_when: false
+
+- when: nvim.stat.exists
+  set_fact:
+    installed_version: '{{nvim_version.stdout_lines[0][5:]}}'
+
+- name: get latest version
+  uri:
+    url: https://api.github.com/repos/neovim/neovim/releases/latest
+    headers: '{{github_auth_headers}}'
+  register: latest
+
+- set_fact:
+    install_required:
+      '{{installed_version is not defined or
+         installed_version != latest.json.tag_name}}'
+    asset_query: '[?contains(name, `nvim-linux64.tar.gz`)]'
+    package_dir: '/usr/local/stow/nvim'
+- set_fact:
+    uninstall_required: '{{nvim.stat.exists and install_required}}'
+    asset: '{{latest.json.assets | json_query(asset_query)}}'
+    package_path: '{{package_dir}}/{{latest.json.name}}'
+
+- name: uninstall old package from /usr/local
+  when: uninstall_required
+  become: true
+  command:
+    cmd: 'stow --delete --target /usr/local .'
+    chdir: '{{package_dir}}/nvim-linux64'
+
+- name: remove old package
+  become: true
+  when: uninstall_required
+  file:
+    path: '{{package_dir}}/nvim-linux64'
+    state: absent
+
+- name: create package directory
+  become: true
+  file:
+    path: '{{package_dir}}'
+    state: directory
+
+- name: download package archive
+  when: install_required
+  become: true
+  get_url:
+    url: '{{asset[0].browser_download_url}}'
+    dest: '{{package_path}}'
+  environment: '{{proxy_environment}}'
+
+- name: extract package archive
+  when: install_required
+  become: true
+  unarchive:
+    src: '{{package_path}}'
+    dest: '{{package_dir}}'
+
+- name: remove downloaded archive
+  when: install_required
+  become: true
+  file:
+    path: '{{package_path}}'
+    state: absent
+
+- name: move man to share/man
+  when: install_required
+  become: true
+  command:
+    argv:
+      - mv
+      - '{{package_dir}}/nvim-linux64/man'
+      - '{{package_dir}}/nvim-linux64/share'
+
+- name: install package to /usr/local
+  when: install_required
+  become: true
+  command:
+    cmd: 'stow --no-folding --target /usr/local .'
+    chdir: '{{package_dir}}/nvim-linux64'
+
 - include_tasks: Unix.yaml

roles/neovim/tasks/Unix.yaml

@@ -4,9 +4,9 @@
 
 - name: clone config repo
   git:
-    repo: git@code.infektor.net:config/vim.git
+    repo: git@code.infektor.net:config/nvim.git
     dest: '{{vim_config_dir}}'
-    version: master
+    version: main
 
 - name: install pip packages
   pip:

roles/neovim/tasks/Windows-plugins.yaml

@@ -26,6 +26,13 @@
     file_type: directory
   register: found_plugins
 
+- set_fact:
+    backslashes: '\\'
+    forwardslash: '/'
+- set_fact:
+    managed_plugins: "{{managed_plugins | replace(backslashes, forwardslash)}}"
+    found_plugins: "{{found_plugins | replace(backslashes, forwardslash)}}"
+
 - name: remove found plugins which are not in the managed list
   win_file:
     path: '{{item.path}}'

roles/neovim/tasks/Windows.yaml

@@ -8,20 +8,12 @@
 - set_fact:
     vim_config_dir: '{{ansible_env.LOCALAPPDATA}}\nvim'
 
-# - name: clone config repo
-#   win_git:
-#     repo: git@code.infektor.net:config/vim.git
-#     dest: '{{vim_config_dir}}'
-#     branch: master
-#     # clone: false
-#     update: true
-# - win_owner:
-#     path: '{{vim_config_dir}}'
-#     user: Benie
-#     recurse: true
+- name: clone config repo
+  win_git:
+    repo: git@code.infektor.net:config/nvim.git
+    dest: '{{vim_config_dir}}'
+    branch: main
 
-# - TODO: neovim set repo email
-#   win_git_config:
 # - TODO: neovim install pip packages
 #   win_pip:
 #     name: '{{neovim_pip_packages}}'
@@ -47,10 +39,18 @@
     src: '{{vim_config_dir}}/tasks.yaml'
     dest: vim_config_tasks.yaml
     flat: true
+  changed_when: false
 
 - when: config_repo_tasks.stat.exists
   include_tasks: vim_config_tasks.yaml
 
+- name: remove fetched tasks
+  file:
+    state: absent
+    path: vim_config_tasks.yaml
+  changed_when: false
+  delegate_to: localhost
+
 - when: ansible_os_family != "Windows" and
         plugin_dir is defined and plugins is defined
   include_tasks: 'Unix-plugins.yaml'

roles/nodejs/tasks/Debian.yaml

@@ -13,6 +13,7 @@
   get_url:
     url: 'https://nodejs.org/dist/{{latest.json[0].version}}/node-{{latest.json[0].version}}-linux-x64.tar.gz'
     dest: ~/.local/src/node/node.tar.gz
+  environment: '{{proxy_environment}}'
 
 - name: extract downloaded package
   unarchive:

roles/nodejs/tasks/RedHat.yaml

@@ -1,6 +1,6 @@
 ---
-- name: install yum package
+- name: install dnf package
   become: true
-  yum:
+  dnf:
     name: nodejs
     state: latest

roles/obsidian/tasks/Linux.yaml

@@ -1,75 +1,32 @@
 ---
-# TODO: Prefer Flatpak over AppImage if available
+- name: install flatpak package
+  become: true
+  flatpak:
+    name: md.obsidian.Obsidian
 
-- name: stat symlink
+# Remove old appimage if it exists
+- name: stat appimage symlink
   stat:
     path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
   register: symlink_file
-
-- name: get latest release
-  uri:
-    url: https://api.github.com/repos/obsidianmd/obsidian-releases/releases/latest
-  register: latest
-
 - set_fact:
-    appimage: 'Obsidian-{{latest.json.name}}.AppImage'
-- set_fact:
-    filepath: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     iconpath: 'share/icons/hicolor/512x512/apps/obsidian.png'
-    asset_query: '[?contains(name, `{{appimage}}`)] | [0]'
-- set_fact:
-    needs_installed:
-      '{{not symlink_file.stat.exists or symlink_file.stat.lnk_source != filepath}}'
-    asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
-
-- name: download latest version
-  get_url:
-    url: '{{asset.browser_download_url}}'
-    dest: '{{filepath}}'
-    mode: '0755'
-
-- name: create directories
+- name: remove appimage icon file
   file:
-    path: '{{item}}'
-    state: directory
-  with_items:
-    - '{{ansible_env.HOME}}/.local/bin'
-    - '{{ansible_env.HOME}}/.local/share/icons/hicolor/512x512/apps'
-
-- name: create symlink
-  file:
-    src: '{{filepath}}'
-    dest: '{{ansible_env.HOME}}/.local/bin/Obsidian'
-    state: link
-
-- name: extract squashfs-root for app icon
-  when: needs_installed
-  command:
-    cmd: '{{ansible_env.HOME}}/.local/bin/Obsidian --appimage-extract'
-    chdir: '/tmp'
-
-- name: copy icon file
-  when: needs_installed
-  copy:
-    src: '/tmp/squashfs-root/usr/{{iconpath}}'
     dest: '{{ansible_env.HOME}}/.local/{{iconpath}}'
-
-- name: remove squashfs-root directory
-  when: needs_installed
-  file:
-    path: '/tmp/squashfs-root'
     state: absent
-
-- name: create desktop file
-  template:
-    src: obsidian.desktop.j2
+- name: remove appimage desktop file
+  file:
     dest: '{{ansible_env.HOME}}/.local/share/applications/obsidian-obsidian.desktop'
-  notify: install desktop menu
-
+    state: absent
 - name: remove old appimage
-  when: needs_installed and symlink_file.stat.exists
+  when: "'lnk_source' in symlink_file.stat"
   file:
     path: '{{symlink_file.stat.lnk_source}}'
     state: absent
+- name: remove appimage symlink
+  file:
+    path: '{{ansible_env.HOME}}/.local/bin/Obsidian'
+    state: absent
 
 - include_tasks: Unix.yaml

roles/obsidian/tasks/Windows.yaml

@@ -12,7 +12,3 @@
     repo: git@github.com:kbenzie/notes.git
     dest: '{{obsidian_notes_repo}}'
     branch: main
-- win_owner:
-    path: '{{obsidian_notes_repo}}'
-    user: Benie
-    recurse: true

roles/obsidian/templates/obsidian.desktop.j2

@@ -3,7 +3,7 @@ Name=Obsidian
 Exec={{ansible_env.HOME}}/.local/bin/Obsidian
 Terminal=false
 Type=Application
-Icon=obsidian
+Icon={{ansible_env.HOME}}/.local/{{iconpath}}
 StartupWMClass=Obsidian
 X-AppImage-Version={{latest.json.name}}
 Comment=Private and flexible note‑taking app that adapts to the way you think. 

roles/podman/tasks/main.yaml

@@ -0,0 +1,26 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: podman
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: podman
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: podman-desktop
+    state: latest
+
+- name: install Chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: podman-desktop
+    state: latest

roles/powershell/tasks/main.yaml

@@ -5,13 +5,9 @@
 
 - name: clone config repos
   win_git:
-    repo: git@code.infektor.net:config/WindowsPowerShell.git
+    repo: https://code.infektor.net/config/WindowsPowerShell.git
     dest: '{{powershell_config_dir}}'
     branch: master
-- win_owner:
-    path: '{{powershell_config_dir}}'
-    user: Benie
-    recurse: true
 
 - name: install chocolatey package
   win_chocolatey:

roles/python/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install yum packages
+- name: install dnf packages
   become: true
-  yum:
+  dnf:
     name:
       - python3
       - python3-pip

roles/python/tasks/Unix.yaml

@@ -1,10 +1,14 @@
 ---
-- name: install config repo
-  git:
-    repo: git@code.infektor.net:config/python.git
-    dest: ~/.config/python
+- name: stat old config repo
+  stat:
+    path: ~/.config/python/.git
+  register: config_python_git
 
-# TODO: set repo email
+- name: remove old config repo
+  when: config_python_git.stat.exists
+  file:
+    state: absent
+    dest: ~/.config/python
 
 - name: create config directories
   file:
@@ -15,34 +19,45 @@
     - ~/.config/ipython/profile_default
     - ~/.config/pip
 
-# Ensure that pip.conf exists before ever installing pip packages since
-# Debian has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip
-# install --user` unless configured otherwise.
-- name: create symbolic links
+- name: stat pip.conf
+  stat:
+    path: ~/.config/pip/pip.conf
+  register: pip_conf
+
+- name: remove pip.conf if its a symbolic link
+  when: pip_conf.stat.islnk
   file:
-    state: link
-    src: '{{item.src}}'
-    dest: '{{item.dest}}'
-  with_items:
-    - src: ~/.config/python/flake8
-      dest: ~/.config/flake8
-    - src: ~/.config/python/pylintrc
-      dest: ~/.pylintrc
-    - src: ~/.config/python/ipython_config.py
-      dest: ~/.config/ipython/profile_default/ipython_config.py
-    - src: ~/.config/python/pip.conf
-      dest: ~/.config/pip/pip.conf
+    state: absent
+    path: ~/.config/pip/pip.conf
+
+# Ensure that pip.conf exists before ever installing pip packages since Debian
+# has enabled `EXTERNALLY-MANAGED` from PEP 668 which breaks `pip install
+# --user` unless configured otherwise.
+- name: create user pip.conf from template
+  template:
+    src: pip.conf.j2
+    dest: ~/.config/pip/pip.conf
+
+# TODO: Also configure pip to disable `EXTERNALLY-MANAGED` globally?
+
+- name: stat old ipython_config.py
+  stat:
+    path: ~/.config/ipython/profile_default/ipython_config.py
+  register: ipython_config_py
+
+- name: remove ipython_conifg.py if its a symbolic link
+  when: ipython_config_py.stat.islnk
+  file:
+    state: absent
+    path: ~/.config/ipython/profile_default/ipython_config.py
+
+- name: create ipython config from template
+  template:
+    src: ipython_config.py
+    dest: ~/.config/ipython/profile_default/ipython_config.py
 
 - name: install pip packages
   pip:
     name: '{{python_pip_packages}}'
     state: latest
     extra_args: --user
-
-- name: create directories
-  file:
-    state: directory
-    dest: '{{item}}'
-  with_items:
-    - ~/.config/ipython/profile_default
-    - ~/.config/pip

roles/python/tasks/Windows.yaml

@@ -6,7 +6,6 @@
     state: latest
 
 # TODO: - name: install config repo
-# TODO: - name: set repo email
 # TODO: - name: install pip packages
 # TODO: - name: create config directories/files
 

roles/python/templates/ipython_config.py

@@ -0,0 +1 @@
+c.TerminalInteractiveShell.editing_mode = 'vi'

roles/python/templates/pip.conf.j2

@@ -0,0 +1,8 @@
+[global]
+break-system-packages = true
+{% if ansible_env.http_proxy is defined %}
+proxy = {{ ansible_env.http_proxy }}
+{% endif %}
+
+[list]
+format=columns

roles/ripgrep/tasks/main.yaml

@@ -0,0 +1,26 @@
+---
+- name: install apt package
+  when: ansible_os_family == 'Debian'
+  become: true
+  apt:
+    name: ripgrep
+    state: latest
+
+- name: install dnf package
+  when: ansible_os_family == 'RedHat'
+  become: true
+  dnf:
+    name: ripgrep
+    state: latest
+
+- name: install Homebrew package
+  when: ansible_os_family == 'Darwin'
+  homebrew:
+    name: ripgrep
+    state: latest
+
+- name: install Chocolatey package
+  when: ansible_os_family == 'Windows'
+  win_chocolatey:
+    name: ripgrep
+    state: latest

roles/rpmfusion/tasks/main.yaml

@@ -0,0 +1,31 @@
+---
+- assert:
+    that: ansible_os_family == 'RedHat' and ansible_distribution == 'Fedora'
+
+- name: install rpm fusion free gpg key
+  become: true
+  rpm_key:
+    key: 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-free-fedora-2020'
+    state: present
+
+- name: install rpmfusion free repository
+  become: true
+  dnf:
+    name:
+      'https://mirrors.rpmfusion.org/free/fedora/rpmfusion-free-release-{{ansible_distribution_major_version}}.noarch.rpm'
+    state: present
+    validate_certs: no
+
+- name: install rpmfusion non-free gpg key
+  become: true
+  rpm_key:
+    key: 'https://rpmfusion.org/keys?action=AttachFile&do=get&target=RPM-GPG-KEY-rpmfusion-nonfree-fedora-2020'
+    state: present
+
+- name: install rpmfusion non-free repository
+  become: true
+  dnf:
+    name:
+      'https://mirrors.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-{{ansible_distribution_major_version}}.noarch.rpm'
+    state: present
+    validate_certs: no

roles/system-info/tasks/Darwin.yaml

@@ -1,4 +1,25 @@
 ---
-# TODO:
-# cp $script_dir/system-info.plist ~/Library/LaunchAgents/system-info.plist
-# launchctl load -w ~/Library/LaunchAgents/system-info.plist
+- name: get list of running launchd services
+  command: launchctl list
+  register: launchd_running_services
+  changed_when: false
+
+- name: determine if system-info is currently running
+  set_fact:
+    system_info_debug: true
+    system_info_plist_path: '{{ansible_env.HOME}}/Library/LaunchAgents/system-info.plist'
+    system_info_running: "{{'system-info' in launchd_running_services.stdout}}"
+
+- name: install system-info launchd plist
+  template:
+    src: system-info.plist.j2
+    dest: '{{system_info_plist_path}}'
+  register: system_info_plist
+
+- name: unload running system-info launchd service
+  when: system_info_plist.changed and system_info_running
+  command: 'launchctl unload -w {{system_info_plist_path}}'
+
+- name: load system-info launchd service
+  when: system_info_plist.changed or not system_info_running
+  command: 'launchctl load -w {{system_info_plist_path}}'

roles/system-info/templates/system-info.plist.j2

@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+  <dict>
+    <key>Label</key>
+    <string>system-info</string>
+    <key>EnvironmentVariables</key>
+    <dict>
+      <key>PATH</key>
+      <string>/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
+    </dict>
+    <key>Program</key>
+    <string>{{ansible_env.HOME}}/.config/tmux/system-info/system-info-macOS.sh</string>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+  </dict>
+</plist>

roles/tmux/tasks/Darwin.yaml

@@ -18,6 +18,7 @@
   get_url:
     url: https://gist.githubusercontent.com/nicm/ea9cf3c93f22e0246ec858122d9abea1/raw/37ae29fc86e88b48dbc8a674478ad3e7a009f357/tmux-256color
     dest: ~/tmux-256color
+  environment: '{{proxy_environment}}'
 
 - name: compile terminal info
   when: terminfo_exists.rc == 1

roles/tmux/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install yum packages
+- name: install dnf packages
   become: true
-  yum:
+  dnf:
     name:
       - tmux
       - sysstat

roles/tmux/tasks/main.yaml

@@ -5,8 +5,9 @@
   git:
     repo: git@code.infektor.net:config/tmux.git
     dest: ~/.config/tmux
-    version: master
+    version: main
 
-# TODO: - name: set repo email
-
-- include_tasks: ~/.config/tmux/tasks.yaml
+- name: run install script
+  command: ~/.config/tmux/install.sh
+  register: tmux_install
+  changed_when: "'changed' in tmux_install.stdout"

roles/ulauncher/tasks/Debian.yaml

@@ -0,0 +1,32 @@
+---
+- name: install keyring
+  when: ansible_distribution == 'Debian'
+  become: true
+  get_url:
+    url: '{{ulauncher_keyring_url}}'
+    dest: '{{ulauncher_keyring_path}}'
+    mode: '0644'
+    force: true
+  environment: '{{proxy_environment}}'
+
+- name: add apt sources list
+  when: ansible_distribution == 'Debian'
+  become: true
+  copy:
+    content: >-
+      deb [signed-by={{ulauncher_keyring_path}}]
+      http://ppa.launchpad.net/agornostal/ulauncher/ubuntu
+      {{ansible_distribution_release}} main"
+    dest: '{{ulauncher_apt_sources_list_path}}'
+
+- name: add ppa repository
+  when: ansible_distribution != 'Debian'
+  become: true
+  apt_repository:
+    repo: ppa:agornostal/ulauncher
+
+- name: install apt package
+  become: true
+  apt:
+    name: ulauncher
+    state: latest

roles/ulauncher/tasks/RedHat.yaml

@@ -0,0 +1,6 @@
+---
+- name: install dnf package
+  become: true
+  dnf:
+    name: ulauncher
+    state: latest

roles/ulauncher/tasks/main.yaml

@@ -0,0 +1,2 @@
+---
+- include_tasks: '{{ansible_os_family}}.yaml'

roles/ulauncher/vars/main.yaml

@@ -0,0 +1,4 @@
+---
+ulauncher_keyring_url: http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x59ebde772980c381ca13fa59faf1020699503176
+ulauncher_keyring_path: /usr/share/keyrings/ulauncher-archive-keyring.gpg
+ulauncher_apt_list_path: /etc/apt/sources.list.d/ulauncher.list

roles/webcatalog/tasks/Linux.yaml

@@ -28,6 +28,7 @@
     url: 'https://cdn-2.webcatalog.io/webcatalog/{{appimage}}'
     dest: '{{ansible_env.HOME}}/.local/bin/{{appimage}}'
     mode: '0755'
+  environment: '{{proxy_environment}}'
 
 - name: create directories
   file:

roles/wsl/tasks/main.yaml

@@ -1,5 +1,6 @@
 ---
 - name: create wsl.conf
+  become: true
   template:
     src: templates/wsl.conf.j2
     dest: /etc/wsl.conf
@@ -34,28 +35,6 @@
     dest: external
     state: directory
 
-- name: clone ansible win_git module
-  git:
-    repo: https://github.com/tivrobo/ansible-win_git.git
-    dest: external/ansible-win_git
-    version: master
-
-- set_fact:
-    modules_dir: ~/.config/local/modules
-
-- name: create ansible modules directory
-  file:
-    dest: '{{modules_dir}}'
-    state: directory
-
-- name: copy win_git files to ansible modules directory
-  copy:
-    src: '~/.config/local/external/ansible-win_git/{{item}}'
-    dest: '{{modules_dir}}/{{item}}'
-  with_items:
-    - win_git.ps1
-    - win_git.py
-
 - name: read /etc/resolv.conf file contents
   set_fact:
     resolv_conf: '{{lookup("ansible.builtin.file", "/etc/resolv.conf")}}'

roles/xremap/tasks/main.yaml

@@ -1,7 +1,8 @@
 ---
 - assert:
-    that: ansible_env.XDG_CURRENT_DESKTOP == "GNOME" and
-          ansible_env.XDG_SESSION_TYPE == "wayland"
+    that: >
+      'GNOME' in ansible_env.XDG_CURRENT_DESKTOP and
+      ansible_env.XDG_SESSION_TYPE == 'wayland'
 
 - set_fact:
     install_dir: '{{ansible_env.HOME}}/.local/bin'
@@ -29,18 +30,21 @@
 - name: get latest release
   uri:
     url: https://api.github.com/repos/k0kubun/xremap/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if install needed
   set_fact:
     needs_installed:
       '{{not executable.stat.exists or installed_version != latest.json.name}}'
+    xdg_current_desktop:
+      "{{ansible_env.XDG_CURRENT_DESKTOP | regex_replace('(.*:)?(.*)', '\\2')}}"
 
 - name: construct asset query
   set_fact:
     asset_query: >
       [?contains(name, `xremap-linux-{{ansible_architecture}}-{{
-                     ansible_env.XDG_CURRENT_DESKTOP | lower}}.zip`)] | [0]
+                     xdg_current_desktop | lower}}.zip`)] | [0]
 - name: get release asset
   set_fact:
     asset: '{{latest.json.assets | to_json | from_json | json_query(asset_query)}}'
@@ -59,6 +63,7 @@
   get_url:
     url: '{{asset.browser_download_url}}'
     dest: '{{install_dir}}/xremap.zip'
+  environment: '{{proxy_environment}}'
 
 - name: extract release archive
   when: needs_installed
@@ -81,6 +86,14 @@
     append: true
     groups: input
 
+- name: load the uinput kernel module
+  when: ansible_os_family == 'Debian'
+  become: true
+  copy:
+    content: |
+      uinput
+    dest: /etc/modules-load.d/uinput.conf
+
 # TODO: This works for on Fedora, author uses it on Ubuntu so I assume Debian
 # will work too. Arch and other distros are potentially different see the docs
 # https://github.com/k0kubun/xremap

roles/yq/tasks/Debian.yaml

@@ -2,6 +2,7 @@
 - name: get latest github release
   uri:
     url: https://api.github.com/repos/mikefarah/yq/releases/latest
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - set_fact:
@@ -35,3 +36,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{yq_exe}}'
     mode: +x
+  environment: '{{proxy_environment}}'

roles/yq/tasks/RedHat.yaml

@@ -19,6 +19,7 @@
 - name: get latest release
   uri:
     url: 'https://api.github.com/repos/mikefarah/yq/releases/latest'
+    headers: '{{github_auth_headers}}'
   register: latest
 
 - name: determine if yq needs installed
@@ -49,3 +50,4 @@
     url: '{{asset.browser_download_url}}'
     dest: '{{ansible_env.HOME}}/.local/bin/yq'
     mode: '0755'
+  environment: '{{proxy_environment}}'

roles/zsh/tasks/RedHat.yaml

@@ -1,7 +1,7 @@
 ---
-- name: install yum packages
+- name: install dnf packages
   become: true
-  yum:
+  dnf:
     name:
       - zsh
       - pinentry-tty

roles/zsh/tasks/main.yaml

@@ -5,77 +5,12 @@
   git:
     repo: git@code.infektor.net:config/zsh.git
     dest: ~/.config/zsh
-    version: master
+    version: main
 
-- name: clone plugin repos
-  git:
-    repo: '{{item.repo}}'
-    dest: '{{item.dest}}'
-  with_items:
-    - repo: https://github.com/zsh-users/zsh-autosuggestions.git
-      dest: ~/.config/zsh/zsh-autosuggestions
-    - repo: https://github.com/zsh-users/zsh-history-substring-search.git
-      dest: ~/.config/zsh/zsh-history-substring-search
-    - repo: https://github.com/zsh-users/zsh-syntax-highlighting.git
-      dest: ~/.config/zsh/zsh-syntax-highlighting
-    - repo: https://github.com/zsh-users/zsh-completions.git
-      dest: ~/.config/zsh/zsh-completions
-  loop_control:
-    label: '{{item.repo | regex_search("https://github.com/(.*)\.git$", "\1")}}'
-
-- name: create directories
-  file:
-    state: directory
-    dest: '{{item}}'
-  with_items:
-    - ~/.local/bin
-    - ~/.local/share/zsh/site-functions
-
-- name: create symbolic links
-  file:
-    state: link
-    src: '{{item.src}}'
-    dest: '{{item.dest}}'
-  with_items:
-    - src: ~/.config/zsh/zlogin
-      dest: ~/.zlogin
-    - src: ~/.config/zsh/zlogout
-      dest: ~/.zlogout
-    - src: ~/.config/zsh/zprofile
-      dest: ~/.zprofile
-    - src: ~/.config/zsh/zshenv
-      dest: ~/.zshenv
-    - src: ~/.config/zsh/zshrc
-      dest: ~/.zshrc
-    - src: ~/.config/zsh/prompt_fresh_setup
-      dest: ~/.local/share/zsh/site-functions/prompt_fresh_setup
-    - src: ~/.config/zsh/build/_build-dir
-      dest: ~/.local/share/zsh/site-functions/_build-dir
-    - src: ~/.config/zsh/sandbox/_sandbox
-      dest: ~/.local/share/zsh/site-functions/_sandbox
-    - src: ~/.config/zsh/layout/_layout
-      dest: ~/.local/share/zsh/site-functions/_layout
-    - src: ~/.config/zsh/notes/_note
-      dest: ~/.local/share/zsh/site-functions/_note
-    - src: ~/.config/zsh/cmake-uninstall
-      dest: ~/.local/bin/cmake-uninstall
-    - src: ~/.config/zsh/$
-      dest: ~/.local/bin/$
-  loop_control:
-    label: '{{item.dest}}'
-
-- name: list commands with available completions
-  command:
-    zsh {{ansible_env.HOME}}/.config/zsh/list-commands-with-available-completions.zsh
-  changed_when: false
-  register: completion_commands
-
-- name: install completions for available commands
-  file:
-    state: link
-    src: '~/.config/zsh/zsh-completions/src/_{{item}}'
-    dest: '~/.local/share/zsh/site-functions/_{{item}}'
-  with_items: '{{completion_commands.stdout}}'
+- name: run install script
+  command: ~/.config/zsh/install.zsh
+  register: zsh_install
+  changed_when: "'changed' in zsh_install.stdout"
 
 - name: get absolute path
   shell: command -v zsh