Add testing for neptune

The modules already support the click events natively.

Makefile

@@ -6,7 +6,7 @@ ansible = venv/bin/ansible-playbook
 ansible_run = $(activate) && ansible-playbook --inventory localhost, --diff --verbose ./playbook.yml ${ANSIBLE_EXTRA_ARGS}
 
 .PHONY: all
-all: $(ansible)
+all: | venv $(ansible)
 	$(ansible_run)
 
 .PHONY: dryrun

_machines/ares.yml

@@ -13,10 +13,15 @@ users:
   mail: hannes@hkoerber.de
   git_gpg_sign: false
   gpg_agent: true
-  gpg_keys:
-    master_key: "0xB5C002530C6A2053"
+  gpg_agent_for_ssh: true
+  gpg_key:
+    email: hannes@hkoerber.de
+    id: "0xB5C002530C6A2053"
+    fingerprint: "973AE48D71B76735C4712B5BB5C002530C6A2053"
+  enable_passwordstore: true
   environment:
     MACHINE_HAS_NEXTCLOUD: "true"
+  has_yubikey: true
 
 screen:
   1: DisplayPort-0
@@ -30,6 +35,8 @@ screen:
   9: DisplayPort-0
   0: DisplayPort-0
 
+screencfgs: []
+
 workspace:
 
 environment:
@@ -39,6 +46,6 @@ environment:
   MACHINE_HAS_STEAM: "true"
   MACHINE_HAS_DISCORD: "true"
   MACHINE_HAS_RESTIC_BACKUP: "false"
-  MACHINE_DEFAULT_SCREENPROFILE: "ares"
+  MACHINE_HAS_ELEMENT: "true"
   MACHINE_RESOLUTION_X: "2560"
   MACHINE_RESOLUTION_Y: "1440"

_machines/neptune.yml

@@ -0,0 +1,75 @@
+font_size: 11
+letter_space: 0
+terminal_binary: alacritty
+
+users:
+- name: hannes-work
+  group: hannes-work
+  vt: 1
+  firefox_profiles:
+    - name: default
+      manage_css: true
+    - name: meet
+      manage_css: false
+  mail: hannes.koerber@tradebyte.com
+  git_gpg_sign: false
+  gpg_agent: false
+  gpg_agent_for_ssh: false
+  environment:
+    MACHINE_HAS_NEXTCLOUD: "false"
+    MACHINE_HAS_RESTIC_BACKUP: "true"
+    MACHINE_HAS_ELEMENT: "false"
+    MACHINE_HAS_KEEPASSX: "true"
+  has_yubikey: false
+- name: hannes-private
+  group: hannes-private
+  vt: 2
+  firefox_profiles:
+    - name: default
+      manage_css: true
+  mail: hannes@hkoerber.de
+  git_gpg_sign: false
+  gpg_agent: true
+  gpg_agent_for_ssh: true
+  gpg_key:
+    email: hannes@hkoerber.de
+    id: "0xB5C002530C6A2053"
+    fingerprint: "973AE48D71B76735C4712B5BB5C002530C6A2053"
+  enable_passwordstore: true
+  environment:
+    MACHINE_HAS_NEXTCLOUD: "true"
+    MACHINE_HAS_RESTIC_BACKUP: "false"
+    MACHINE_HAS_ELEMENT: "true"
+    MACHINE_HAS_KEEPASSX: "false"
+  has_yubikey: true
+
+screen:
+  1: DP-1-1
+  2: DP-1-1
+  3: DP-1-2
+  4: DP-1-2
+  5: DP-1-2
+  6: DP-1-2
+  7: eDP-1
+  8: eDP-1
+  9: eDP-1
+  0: eDP-1
+
+workspace:
+  1: www
+  2: www
+  3: term-local
+  4: term-remote
+  7: comm
+  8: pass
+  9: music
+  10: pim
+
+screencfgs:
+  - name: three-screens
+    key: F3
+
+environment:
+  MACHINE_TYPE: "laptop"
+  MACHINE_RESOLUTION_X: "1920"
+  MACHINE_RESOLUTION_Y: "1080"

_machines/tb-hak.yml

@@ -1,6 +1,6 @@
 font_size: 11
 letter_space: 0
-terminal_binary: urxvt
+terminal_binary: alacritty
 
 users:
 - name: hannes-work
@@ -12,18 +12,29 @@ users:
   mail: hannes.koerber@tradebyte.com
   git_gpg_sign: false
   gpg_agent: false
+  gpg_agent_for_ssh: false
   environment:
     MACHINE_HAS_NEXTCLOUD: "false"
+    MACHINE_HAS_RESTIC_BACKUP: "true"
+    MACHINE_HAS_ELEMENT: "false"
+  has_yubikey: false
 - name: hannes-private
   group: tpp
   vt: 2
   mail: hannes@hkoerber.de
   git_gpg_sign: false
   gpg_agent: true
-  gpg_keys:
-    master_key: "0xB5C002530C6A2053"
+  gpg_agent_for_ssh: true
+  gpg_key:
+    email: hannes@hkoerber.de
+    id: "0xB5C002530C6A2053"
+    fingerprint: "973AE48D71B76735C4712B5BB5C002530C6A2053"
+  enable_passwordstore: true
   environment:
     MACHINE_HAS_NEXTCLOUD: "true"
+    MACHINE_HAS_RESTIC_BACKUP: "false"
+    MACHINE_HAS_ELEMENT: "true"
+  has_yubikey: true
 
 screen:
   1: DP-1-1
@@ -47,9 +58,12 @@ workspace:
   9: music
   10: pim
 
+screencfgs:
+  - name: three-screens
+    key: F3
+
 environment:
   MACHINE_TYPE: "laptop"
   MACHINE_HAS_KEEPASSX: "true"
-  MACHINE_HAS_RESTIC_BACKUP: "true"
   MACHINE_RESOLUTION_X: "1920"
   MACHINE_RESOLUTION_Y: "1080"

alacritty/alacritty.yml.j2

@@ -21,7 +21,7 @@
   # each instance of Alacritty. If it is not present, alacritty will
   # check the local terminfo database and use `alacritty` if it is
   # available, otherwise `xterm-256color` is used.
-  #TERM: alacritty
+  TERM: xterm-256color
 
 window:
   # Window dimensions (changes require restart)
@@ -78,7 +78,7 @@ window:
   #title: Alacritty
 
   # Allow terminal applications to change Alacritty's window title.
-  #dynamic_title: true
+  dynamic_title: true
 
   # Window class (Linux/BSD only):
   #class:

autostart/autostart.target.j2

@@ -6,7 +6,10 @@ Wants=blueman.service
 Wants=discord.service
 Wants=dpms.service
 Wants=dunst.service
-Wants=firefox.service
+Wants=element.service
+{% for profile in user.firefox_profiles|default([]) %}
+Wants=firefox@{{ profile.name }}.service
+{% endfor %}
 Wants=gpg-agent.service
 Wants=gnome-keyring.service
 Wants=keepassx.service
@@ -18,6 +21,7 @@ Wants=pasystray.service
 Wants=redshift.service
 Wants=restic.timer
 Wants=screencfg.service
+Wants=signal.service
 Wants=spotify.service
 Wants=steam.service
 Wants=touchpad.service

autostart/services/blueman.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/blueman-applet
+ExecStart=/usr/bin/env blueman-applet
+PassEnvironment=DISPLAY

autostart/services/discord.service

@@ -2,7 +2,8 @@
 BindsTo=autostart.target
 After=windowmanager.target
 
-ConditionEnvironment=MACHINE_HAS_DISCORD=true
+ConditionPathExists=%h/.var/run/features/discord
 
 [Service]
-ExecStart=/usr/bin/discord
+ExecStart=/usr/bin/env discord
+PassEnvironment=DISPLAY

autostart/services/dpms.service

@@ -4,5 +4,6 @@ After=windowmanager.target
 
 [Service]
 Type=oneshot
-ExecStart=xset s off
-ExecStart=xset dpms 0 0 300
+ExecStart=/usr/bin/env xset s off
+ExecStart=/usr/bin/env xset dpms 0 0 300
+PassEnvironment=DISPLAY

autostart/services/dunst.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/dunst -config %h/.config/dunstrc
+ExecStart=/usr/bin/env dunst -config %h/.config/dunstrc
+PassEnvironment=DISPLAY

autostart/services/element.service

@@ -0,0 +1,10 @@
+[Unit]
+BindsTo=autostart.target
+After=windowmanager.target
+After=i3.service
+
+ConditionPathExists=%h/.var/run/features/element
+
+[Service]
+ExecStart=/usr/bin/env element-desktop
+PassEnvironment=DISPLAY

autostart/services/firefox@.service

@@ -0,0 +1,7 @@
+[Unit]
+BindsTo=autostart.target
+After=windowmanager.target
+
+[Service]
+ExecStart=/usr/bin/env firefox --setDefaultBrowser -P %i
+PassEnvironment=DISPLAY

autostart/services/gnome-keyring.service

@@ -4,3 +4,4 @@ After=windowmanager.target
 
 [Service]
 ExecStart=/usr/bin/env gnome-keyring-daemon --start --foreground --components secrets
+PassEnvironment=DISPLAY

autostart/services/gpg-agent.service

@@ -1,7 +1,9 @@
 [Unit]
 BindsTo=autostart.target
 After=windowmanager.target
+ConditionPathExists=%h/.var/run/features/gpg_agent
 
 [Service]
 Type=forking
-ExecStart=/usr/bin/gpg-agent --homedir %h/.gnupg --no-detach --daemon
+ExecStart=/usr/bin/env gpg-agent --homedir %h/.gnupg --no-detach --daemon
+PassEnvironment=DISPLAY

autostart/services/i3.service

@@ -1,5 +1,6 @@
 [Service]
-Type=exec
-ExecStart=i3 --config %h/.i3/config
+Type=simple
+ExecStart=/usr/bin/env i3 --config %h/.i3/config
+PassEnvironment=DISPLAY
 
 Restart=no

autostart/services/keepassx.service

@@ -1,7 +1,8 @@
 [Unit]
 BindsTo=autostart.target
 After=windowmanager.target
-ConditionEnvironment=MACHINE_HAS_KEEPASSX=true
+ConditionPathExists=%h/.var/run/features/keepassx
 
 [Service]
-ExecStart=/usr/bin/keepassx --keyfile %h/.secret/main.key %h/.secret/main.kdbx
+ExecStart=/usr/bin/env keepassx --keyfile %h/.secret/main.key %h/.secret/main.kdbx
+PassEnvironment=DISPLAY

autostart/services/keyboard.service

@@ -4,6 +4,7 @@ After=windowmanager.target
 
 [Service]
 Type=oneshot
-ExecStart=/usr/bin/setxkbmap -layout de -variant nodeadkeys
-ExecStart=/usr/bin/xset r rate 150 50
+ExecStart=/usr/bin/env setxkbmap -layout de -variant nodeadkeys
+ExecStart=/usr/bin/env xset r rate 150 50
 RemainAfterExit=true
+PassEnvironment=DISPLAY

autostart/services/laptop-lid.service

@@ -1,8 +1,8 @@
 [Unit]
 BindsTo=autostart.target
 After=windowmanager.target
-
-ConditionEnvironment=MACHINE_TYPE=laptop
+ConditionPathExists=%h/.var/run/features/machine_is_laptop
 
 [Service]
-ExecStart=/usr/bin/bash -c 'grep "^${ACPI_LID_NAME}.*enabled" /proc/acpi/wakeup && echo " ${ACPI_LID_NAME}" | sudo tee /proc/acpi/wakeup'
+ExecStart=/usr/bin/env bash -c 'grep "^${ACPI_LID_NAME}.*enabled" /proc/acpi/wakeup && echo " ${ACPI_LID_NAME}" | sudo tee /proc/acpi/wakeup'
+PassEnvironment=DISPLAY

autostart/services/nextcloud.service

@@ -3,7 +3,11 @@ BindsTo=autostart.target
 After=windowmanager.target
 After=gnome-keyring.service
 
-ConditionEnvironment=MACHINE_HAS_NEXTCLOUD=true
+ConditionPathExists=%h/.var/run/features/nextcloud
 
 [Service]
-ExecStart=/usr/bin/nextcloud --background
+ExecStart=/usr/bin/env nextcloud --background
+PassEnvironment=DISPLAY
+
+MemoryHigh=20%
+MemoryMax=30%

autostart/services/nm-applet.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/nm-applet
+ExecStart=/usr/bin/env nm-applet
+PassEnvironment=DISPLAY

autostart/services/pasystray.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/pasystray
+ExecStart=/usr/bin/env pasystray
+PassEnvironment=DISPLAY

autostart/services/redshift.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/redshift-gtk -c %h/.config/redshift.conf
+ExecStart=/usr/bin/env redshift-gtk -c %h/.config/redshift.conf
+PassEnvironment=DISPLAY

autostart/services/restic.service

@@ -1,7 +1,8 @@
 [Unit]
-ConditionEnvironment=MACHINE_HAS_RESTIC_BACKUP=true
+ConditionPathExists=%h/.var/run/features/restic_backup
 
 [Service]
 Type=oneshot
 ExecStart=%h/bin/restic-backup
 RemainAfterExit=true
+PassEnvironment=DISPLAY

autostart/services/restic.timer

@@ -3,6 +3,4 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Timer]
-OnCalendar=Mon..Fri 09:00:00
 OnCalendar=Mon..Fri 12:00:00
-OnCalendar=Mon..Fri 16:00:00

autostart/services/screencfg.service

@@ -1,7 +1,6 @@
 [Unit]
 BindsTo=autostart.target
 After=windowmanager.target
-ConditionEnvironment=MACHINE_DEFAULT_SCREENPROFILE
 
 [Service]
 Type=oneshot
@@ -9,5 +8,6 @@ Type=oneshot
 
 # > The command to execute may contain spaces, but control characters are not
 # > allowed.
-ExecStart=bash -c '%h/.screencfg/${MACHINE_DEFAULT_SCREENPROFILE}.sh'
+ExecStart=/usr/bin/env screencfg "%h/.screencfg/%H/default.yml"
 RemainAfterExit=true
+PassEnvironment=DISPLAY

autostart/services/signal.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/firefox --setDefaultBrowser -P default
+ExecStart=/usr/bin/env signal-desktop
+PassEnvironment=DISPLAY

autostart/services/spotify.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/spotify
+ExecStart=/usr/bin/env spotify
+PassEnvironment=DISPLAY

autostart/services/steam.service

@@ -3,7 +3,8 @@ BindsTo=autostart.target
 After=windowmanager.target
 After=i3.service
 
-ConditionEnvironment=MACHINE_HAS_STEAM=true
+ConditionPathExists=%h/.var/run/features/steam
 
 [Service]
-ExecStart=/usr/bin/steam
+ExecStart=/usr/bin/env steam
+PassEnvironment=DISPLAY

autostart/services/touchpad.service

@@ -1,17 +1,18 @@
 [Unit]
 BindsTo=autostart.target
 After=windowmanager.target
-ConditionEnvironment=MACHINE_TYPE=laptop
+ConditionPathExists=%h/.var/run/features/machine_is_laptop
 
 [Service]
 Type=oneshot
-ExecStart=/usr/bin/synclient VertEdgeScroll=0
-ExecStart=/usr/bin/synclient VertTwoFingerScroll=1
-ExecStart=/usr/bin/synclient MaxSpeed=2.2
-ExecStart=/usr/bin/synclient AccelFactor=0.08
-ExecStart=/usr/bin/synclient TapButton1=1
-ExecStart=/usr/bin/synclient CoastingSpeed=0
-ExecStart=/usr/bin/synclient PalmDetect=1
-ExecStart=/usr/bin/synclient PalmMinWidth=20
-ExecStart=/usr/bin/synclient PalmMinZ=1
+ExecStart=/usr/bin/env synclient VertEdgeScroll=0
+ExecStart=/usr/bin/env synclient VertTwoFingerScroll=1
+ExecStart=/usr/bin/env synclient MaxSpeed=2.2
+ExecStart=/usr/bin/env synclient AccelFactor=0.08
+ExecStart=/usr/bin/env synclient TapButton1=1
+ExecStart=/usr/bin/env synclient CoastingSpeed=0
+ExecStart=/usr/bin/env synclient PalmDetect=1
+ExecStart=/usr/bin/env synclient PalmMinWidth=20
+ExecStart=/usr/bin/env synclient PalmMinZ=1
 RemainAfterExit=true
+PassEnvironment=DISPLAY

autostart/services/wallpaper.service

@@ -1,4 +1,5 @@
 [Service]
 Type=oneshot
-ExecStart=/usr/bin/setrandom --recursive --onlylarge --mode=stretch /usr/share/wallpapers
+ExecStart=/usr/bin/env setrandom --recursive --onlylarge --mode=stretch /usr/share/wallpapers
 RemainAfterExit=true
+PassEnvironment=DISPLAY

autostart/services/xresources.service

@@ -4,5 +4,6 @@ After=windowmanager.target
 
 [Service]
 Type=oneshot
-ExecStart=/usr/bin/xrdb -merge -I%h %h/.Xresources
+ExecStart=/usr/bin/env xrdb -merge -I%h %h/.Xresources
 RemainAfterExit=true
+PassEnvironment=DISPLAY

autostart/services/yubikey-touch-detector.service

@@ -3,4 +3,5 @@ BindsTo=autostart.target
 After=windowmanager.target
 
 [Service]
-ExecStart=/usr/bin/yubikey-touch-detector -libnotify
+ExecStart=/usr/bin/env yubikey-touch-detector -libnotify
+PassEnvironment=DISPLAY

bin/screencfg

@@ -31,7 +31,7 @@ args = parser.parse_args()
 config_path = args.config
 
 try:
-    config = yaml.load(open(config_path))
+    config = yaml.safe_load(open(config_path))
 except FileNotFoundError:
     fail("File {0} not found".format(config_path))
 
@@ -54,6 +54,8 @@ for output in config['outputs']:
         # cmd.append('--auto')
         for k, v in output['opts'].items():
             cmd.extend(['--{}'.format(k), str(v)])
+        for k,v  in output.get('set', {}).items():
+            cmd.extend(['--set', k, v])
 
 run(cmd)
 run(['i3-msg', 'restart'])

detect-missing-packages.py

@@ -0,0 +1,19 @@
+#!/usr/bin/env python3
+
+import yaml
+from pprint import pprint
+
+package_file = "./packages.yml"
+
+apps = yaml.safe_load(open(package_file, 'r'))
+
+missing_config = {}
+
+for appname, appconfig in apps['packages']['list'].items():
+    for distro, packagelist in appconfig.items():
+        if len(packagelist) == 0:
+            if distro not in missing_config.keys():
+                missing_config[distro] = []
+            missing_config[distro].append(appname)
+
+print(yaml.dump(missing_config))

dotfiles.yml

@@ -14,6 +14,7 @@ dotfiles:
     to: .gnupg/dirmngr.conf
   - from: gnupg/gpg-agent.conf
     to: .gnupg/gpg-agent.conf
+    template: true
   - from: gnupg/gpg.conf
     to: .gnupg/gpg.conf
     template: true
@@ -60,8 +61,10 @@ dotfiles:
     to: .config/rofi/config
   - from: gtk/gtk-3.0.ini
     to: .config/gtk-3.0/settings.ini
+    template: true
   - from: gtk/gtkrc-2.0
     to: .gtkrc-2.0
+    template: true
   - from: qt/qt5ct.conf
     to: .config/qt5ct/qt5ct.conf
   - from: screencfg

dunst/dunstrc.j2

@@ -29,7 +29,7 @@
     # the top and down respectively.
     # The width can be negative.  In this case the actual width is the
     # screen width minus the width defined in within the geometry option.
-    geometry = "300x10-20+20"
+    geometry = "300x10-20-40"
 
     # Show how many messages are currently hidden (because of geometry).
     indicate_hidden = yes

git/gitconfig.j2

@@ -3,7 +3,7 @@
     email = {{ user.mail }}
     useConfigOnly = true
 {% if user.git_gpg_sign|bool %}
-    signingkey = {{ user.gpg_keys.master_key }}
+    signingkey = {{ user.gpg_key.id }}
 {% endif %}
 [github]
     user = hakoerber
@@ -113,6 +113,7 @@
     requireForce = true
 [pull]
     rebase = true
+    ff = only
 
 [url "ssh://git@code.hkoerber.de:2222/"]
     insteadOf = https://code.hkoerber.de/

gnupg/gpg-agent.conf.j2

@@ -4,6 +4,8 @@ default-cache-ttl-ssh 60480000
 max-cache-ttl 34560000
 max-cache-ttl-ssh 34560000
 
+{% if user.gpg_agent_for_ssh %}
 enable-ssh-support
+{% endif %}
 
 pinentry-program /usr/bin/pinentry-qt

gpgkeys/hannes@hkoerber.de.gpg.asc

@@ -0,0 +1,109 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=553W
+-----END PGP PUBLIC KEY BLOCK-----

gtk/gtk-3.0.ini.j2

@@ -1,7 +1,7 @@
 [Settings]
 gtk-theme-name=Breeze
 gtk-icon-theme-name=breeze-dark
-gtk-font-name=Cantarell 11
+gtk-font-name=DejaVu Sans {{ machine.font_size|int - 2 }}
 gtk-cursor-theme-name=breeze_cursors
 gtk-cursor-theme-size=0
 gtk-toolbar-style=GTK_TOOLBAR_BOTH

gtk/gtkrc-2.0.j2

@@ -1,10 +1,9 @@
 # DO NOT EDIT! This file will be overwritten by LXAppearance.
 # Any customization should be done in ~/.gtkrc-2.0.mine instead.
 
-include "/home/hannes/.gtkrc-2.0.mine"
 gtk-theme-name="Breeze"
 gtk-icon-theme-name="breeze-dark"
-gtk-font-name="Cantarell 11"
+gtk-font-name="DejaVu Sans {{ machine.font_size|int - 2 }}"
 gtk-cursor-theme-name="breeze_cursors"
 gtk-cursor-theme-size=0
 gtk-toolbar-style=GTK_TOOLBAR_BOTH

i3/config.j2

@@ -77,8 +77,8 @@
     set $focus_parent q
     set $focus_child  a
 
-    set $floating_toggle   Shift+space
-    set $focus_mode_toggle space
+    set $floating_toggle   Shift+p
+    set $focus_mode_toggle p
 
     set $prev_on_output u
     set $next_on_output i
@@ -93,6 +93,8 @@
 
     set $kill Shift+Q
 
+    set $screenshot o
+
 
 ################################################################################
 ### WORKSPACE ASSIGNMENTS ######################################################
@@ -120,6 +122,7 @@ assign [class="^Google-chrome$"] $workspace7
 assign [class="^Chromium$"] $workspace7
 assign [class="^discord"] $workspace7
 assign [class="^Steam"] $workspace5
+for_window [class="^Steam$"] move to workspace $workspace5
 
 assign [class="^dota2$"] $workspace10
 assign [class="^Wine$"] $workspace10
@@ -212,15 +215,17 @@ assign [class="^Wine$"] $workspace10
     bindsym F2 exec --no-startup-id ~/.i3/scripts/screenmenu
 
     bindsym $mod+F1 exec --no-startup-id ~/.i3/scripts/i3exit lock
-    bindsym $mod+F2 exec --no-startup-id screencfg ~/.screencfg/all.yml ; exec systemctl --user restart keyboard.service
-    bindsym $mod+F3 exec --no-startup-id screencfg ~/.screencfg/laptop.yml ; exec systemctl --user restart keyboard.service
+    bindsym $mod+F2 exec --no-startup-id screencfg ~/.screencfg/{{ ansible_hostname }}/default.yml ; exec systemctl --user restart keyboard.service
+    {% for screencfg in machine.screencfgs -%}
+    bindsym $mod+{{ screencfg.key }} exec --no-startup-id screencfg ~/.screencfg/{{ ansible_hostname }}/{{ screencfg.name }}.yml ; exec systemctl --user restart keyboard.service
+    {% endfor -%}
     bindsym $mod+F4 exec --no-startup-id ~/.i3/scripts/i3exit suspend
     bindsym $mod+Home exec --no-startup-id ~/.i3/scripts/shutdown-menu
 
-    bindsym $mod+Shift+v exec --no-startup-id redshift-toggle
+    bindsym $mod+$screenshot exec --no-startup-id sh -c 'maim | xclip -selection clipboard -t image/png'
+    bindsym $mod+Shift+$screenshot exec --no-startup-id sh -c 'maim --select | xclip -selection clipboard -t image/png'
 
-    bindsym $mod+Shift+$scratchpad move scratchpad
-    bindsym $mod+$scratchpad scratchpad show
+    bindsym $mod+Shift+v exec --no-startup-id redshift-toggle
 
     bindsym $mod+$pim_toggle \
         unmark _destination; \
@@ -336,10 +341,8 @@ bindsym XF86AudioPrev exec $scriptdir/spotify-control previous
 bindsym XF86MonBrightnessUp   exec --no-startup-id xbacklight -inc 8 ; exec --no-startup-id $scriptdir/update-status
 bindsym XF86MonBrightnessDown exec --no-startup-id xbacklight -dec 8 ; exec --no-startup-id $scriptdir/update-status
 
-bindsym $mod+o exec --no-startup-id xautorandr ; exec --no-startup-id kill -SIGUSR2 $(cat $RUNDIR/wallchanger.$XDG_SESSION_ID.pid)'"
-bindsym $mod+p exec --no-startup-id kill -SIGUSR1 $(cat $RUNDIR/wallchanger.$XDG_SESSION_ID.pid)
-
 bindsym $mod+m exec --no-startup-id $scriptdir/pa-volume mute-toggle-mic
+bindsym $mod+space exec --no-startup-id $scriptdir/pa-volume mute-toggle-mic
 
 ##############################################################################
 ### BARS #######################################################################

i3/i3status.conf.j2

@@ -19,10 +19,12 @@ general {
 }
 
 
+order += spotify
+{% if user.has_yubikey %}
 order += "yubikey"
+{% endif %}
 order += "volume_status output"
 order += "volume_status input"
-order += spotify
 order += "wifi"
 order += "external_script presentation_mode"
 order += "systemd redshift"
@@ -57,7 +59,6 @@ systemd spotify {
     unit = "spotify.service"
     user = true
     format = "  "
-    on_click 1 = "exec $HOME/.i3/scripts/toggle-app spotify"
     color_bad = '#F4Bf75'
     color_degraded = '#F4Bf75'
 }
@@ -109,7 +110,6 @@ volume_status output {
     thresholds = []
     command = "pactl"
     color_muted = '#FFFFFF'
-    on_click 1 = "exec $HOME/.i3/scripts/pa-volume mute-toggle"
 }
 
 volume_status input {
@@ -120,5 +120,4 @@ volume_status input {
     command = "pactl"
     color_muted = '#FFFFFF'
     is_input = True
-    on_click 1 = "exec $HOME/.i3/scripts/pa-volume mute-toggle-mic"
 }

install.sh

@@ -11,6 +11,8 @@ set -o nounset
 DOTDIR="/var/lib/dotfiles"
 _SCRIPT_DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
 
+git submodule update --init
+
 if [[ "$(readlink "${_SCRIPT_DIR}")" != "${DOTDIR}" ]] && [[ "${_SCRIPT_DIR}" != "${DOTDIR}" ]] ; then
     if [[ -e "${DOTDIR}" ]] ; then
         2>&1 printf "${DOTDIR} already exists. This seems unsafe.\n"
@@ -47,9 +49,7 @@ sudowrap() {
 
 _install() {
     _package="$1" ; shift
-    if [[ $NAME == "Fedora" ]] ; then
-        sudowrap dnf install --assumeyes "${_package}"
-    elif [[ $NAME == "Ubuntu" ]] ; then
+    if [[ $NAME == "Ubuntu" ]] ; then
         sudowrap apt-get install --assume-yes "${_package}"
     elif [[ $NAME == "Arch Linux" ]] ; then
         sudowrap pacman -S --noconfirm "${_package}"
@@ -63,6 +63,7 @@ _install() {
 if ! command -v python3 >/dev/null ; then
     printf 'Python3 not installed, installing ...\n'
     _install "python3"
+    _install "python3-venv"
     printf 'Done\n'
 fi
 

packages.yml

@@ -1,19 +1,10 @@
 packages:
   list:
     build-essentials:
-      fedora:
-        - autoconf
-        - automake
-        - gcc-c++
-        - gcc
-        - ctags
-        - cmake
-        - libtool
-        - elfutils-libelf-devel
-        - maven
       ubuntu:
         - build-essential
         - exuberant-ctags
+        - cmake
       archlinux:
         - gcc
         - ctags
@@ -21,35 +12,24 @@ packages:
         - maven
         - base-devel
     golang:
-      fedora: ["golang", "glibc-static"]
       ubuntu: ["golang-go"]
       archlinux: ["go"]
     make:
-      fedora: ["make"]
       ubuntu: ["make"]
       archlinux: ["make"]
     gdb:
-      fedora: ["gdb"]
       ubuntu: ["gdb"]
       archlinux: ["gdb"]
     strace:
-      fedora: ["strace"]
       ubuntu: ["strace"]
       archlinux: ["strace"]
     sudo:
-      fedora: ["sudo"]
       ubuntu: ["sudo"]
       archlinux: ["sudo"]
     apt:
-      fedora: []
       ubuntu: ["apt-file"]
-      archlinux: []
+      archlinux: [""]
     xorg:
-      fedora:
-        - '@base-x'
-        - xorg-x11-drv-synaptics-legacy
-        - xorg-x11-drv-libinput
-        - libinput
       ubuntu: []
       archlinux:
         - xorg-server
@@ -61,449 +41,362 @@ packages:
         - xorg-xset
         - xorg-xinit
     dmenu:
-      fedora: ["dmenu"]
       ubuntu: ["dmenu"]
       archlinux: ["dmenu"]
     ansible:
-      fedora: ["ansible"]
       ubuntu: ["ansible"]
       archlinux: ["ansible"]
     xdotool:
-      fedora: ["xdotool"]
       ubuntu: ["xdotool"]
       archlinux: ["xdotool"]
     arandr:
-      fedora: ["arandr"]
       ubuntu: ["arandr"]
       archlinux: ["arandr"]
     borgbackup:
-      fedora: ["borgbackup"]
       ubuntu: ["borgbackup"]
       archlinux: ["borgbackup"]
     docker:
-      fedora: ["docker"]
-      ubuntu: ["docker.io"]
+      ubuntu: ["docker.io", "containerd", "docker-compose"]
       archlinux: ["docker", "docker-compose"]
     font-awesome:
-      fedora: ["fontawesome-fonts", "fontawesome-fonts-web"]
       ubuntu: ["fonts-font-awesome"]
       archlinux: ["ttf-font-awesome"]
     font-inconsolata:
-      fedora: ["levien-inconsolata-fonts"]
       ubuntu: ["fonts-inconsolata"]
       archlinux: ["ttf-inconsolata"]
     font-dejavu:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["fonts-dejavu"]
       archlinux: ["ttf-dejavu"]
     font-libertine:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["fonts-linuxlibertine"]
       archlinux: ["ttf-linux-libertine"]
     font-emoji:
-      fedora: []
       ubuntu: []
       archlinux: ["noto-fonts-emoji"]
     git:
-      fedora: ["git", "gitk"]
       ubuntu: ["git", "git-extras", "gitk", "git-email"]
       # tk required for gitk
       archlinux: ["git", "tk"]
     htop:
-      fedora: ["htop"]
       ubuntu: ["htop"]
       archlinux: ["htop"]
     feh:
-      fedora: ["feh"]
       ubuntu: ["feh"]
       archlinux: ["feh"]
     i3:
-      fedora: ["i3"]
       ubuntu: ["i3"]
       archlinux: ["i3-wm"]
     i3lock:
-      fedora: ["i3lock"]
       ubuntu: ["i3lock"]
       archlinux: ["i3lock"]
     pluma:
-      fedora: ["pluma"]
       ubuntu: ["pluma"]
       archlinux: ["pluma"]
     vim:
-      fedora: ["vim-enhanced"]
       ubuntu: ["vim"]
       archlinux: ["gvim"]
     neovim:
-      fedora: ["neovim", "python3-neovim"]
       ubuntu: ["neovim"]
       archlinux: ["neovim", "python-pynvim"]
     network-manager-applet:
-      fedora: ["network-manager-applet"]
       ubuntu: []
       archlinux: ["network-manager-applet"]
     pasystray:
-      fedora: ["pasystray"]
       ubuntu: ["pasystray"]
       archlinux: ["pasystray"]
     redshift:
-      fedora: ["redshift-gtk"]
       ubuntu: ["redshift-gtk"]
       archlinux: ["redshift"]
     pavucontrol:
-      fedora: ["pavucontrol"]
       ubuntu: ["pavucontrol"]
       archlinux: ["pavucontrol-qt"]
     pinentry-qt:
-      fedora: ["pinentry", "pinentry-curses", "pinentry-qt"]
       ubuntu: ["pinentry-curses", "pinentry-qt"]
       archlinux: ["pinentry"]
     pinta:
-      fedora: ["pinta"]
       ubuntu: ["pinta"]
       archlinux: ["pinta"]
     py3status:
-      fedora: ["py3status", "python3-pytz", "python3-tzlocal"]
-      ubuntu: ["py3status", "python3-arrow", "python3-tzlocal"]
+      ubuntu: ["py3status", "python3-arrow", "python3-tzlocal", "python3-pydbus"]
       archlinux: ["py3status", "python-pytz", "python-tzlocal", "python-dbus", "python-pydbus"]
     pass:
-      fedora: ["pass"]
       ubuntu: ["pass"]
       archlinux: ["pass", "passff-host"]
     keepassx:
-      fedora: ["keepassx"]
       ubuntu: ["keepassx"]
       archlinux: []
     urxvt:
-      fedora: ["rxvt-unicode-256color"]
       ubuntu: ["rxvt-unicode-256color"]
       archlinux: ["rxvt-unicode"]
     alacritty:
-      fedora: []
       ubuntu: []
       archlinux: ["alacritty"]
     tmux:
-      fedora: ["tmux"]
       ubuntu: ["tmux"]
       archlinux: ["tmux"]
     screen:
-      fedora: ["screen"]
       ubuntu: ["screen"]
       archlinux: ["screen"]
     zsh:
-      fedora: ["zsh", "zsh-syntax-highlighting"]
       ubuntu: ["zsh", "zsh-syntax-highlighting"]
       archlinux: ["zsh", "zsh-syntax-highlighting", "zsh-autosuggestions", "zsh-completions"]
     zathura:
-      fedora: ["zathura-pdf-mupdf"]
       ubuntu: ["zathura", "zathura-pdf-poppler"]
       archlinux: ["zathura", "zathura-pdf-poppler"]
+    pdf:
+      ubuntu: ["ghostscript", "enscript"]
+      archlinux: ["ghostscript", "enscript"]
     pandoc:
-      fedora: ["pandoc"]
       ubuntu: ["pandoc"]
       archlinux: ["pandoc", "texlive-core", "texlive-fontsextra", "texlive-latexextra"]
     libvirt:
-      fedora: ["virt-manager", "libvirt-client"]
-      ubuntu: ["virt-manager", "libvirt-bin"]
-      archlinux: ["virt-manager", "libvirt"]
+      ubuntu: ["virt-manager", "libvirt-daemon"]
+      archlinux: ["virt-manager", "libvirt", "dnsmasq", "ebtables"]
     firefox:
-      fedora: ["firefox"]
       ubuntu: ["firefox"]
       archlinux: ["firefox"]
     ranger:
-      fedora: ["ranger"]
       ubuntu: ["ranger"]
       archlinux: ["ranger"]
     thunar:
-      fedora: ["thunar"]
       ubuntu: ["thunar"]
       archlinux: ["thunar"]
     unclutter:
-      fedora: ["unclutter"]
       ubuntu: ["unclutter"]
       archlinux: ["unclutter"]
-    chromium:
-      fedora: ["chromium"]
-      ubuntu: ["chromium-browser"]
-      archlinux: ["chromium"]
     libreoffice:
-      fedora: ["libreoffice", "libreoffice-langpack-de", "libreoffice-langpack-en"]
       ubuntu: ["libreoffice"]
       archlinux: ["libreoffice-fresh", "libreoffice-fresh-de"]
     qt-theming:
-      fedora: ["breeze-cursor-theme", "breeze-icon-theme"]
-      ubuntu: ["breeze-cursor-theme", "breeze-icon-theme", "breeze"]
+      ubuntu: ["breeze-cursor-theme", "breeze-icon-theme", "breeze", "qt5ct"]
       archlinux: ["breeze", "breeze-icons", "breeze-grub", "qt5ct"]
     gtk-theming:
-      fedora: ["breeze-gtk"]
-      ubuntu: ["gtk3-engines-breeze"]
+      ubuntu: ["gtk3-engines-breeze", "lxappearance"]
       archlinux: ["breeze-gtk", "lxappearance"]
     xcompmgr:
-      fedora: ["xcompmgr"]
       ubuntu: ["xcompmgr"]
       archlinux: ["xcompmgr"]
     python:
-      fedora: ["python", "python3-devel"]
       ubuntu: ["python3", "python3-pip", "python3-venv", "virtualenv", "pylint3"]
       archlinux: ["python3"]
+    python-modules:
+      ubuntu: []
+      archlinux:
+        - python-ruamel-yaml
+        - python-gitpython
+        - python-semver
     xbacklight:
-      fedora: ["xbacklight"]
       ubuntu: ["xbacklight"]
       archlinux: ["xorg-xbacklight"]
     wireshark:
-      fedora: ["wireshark"]
       ubuntu: ["wireshark", "wireshark-qt"]
       archlinux: ["wireshark-cli", "wireshark-qt"]
     dia:
-      fedora: ["dia"]
       ubuntu: ["dia"]
       archlinux: ["dia"]
-    shutter:
-      fedora: ["shutter"]
-      ubuntu: ["shutter"]
-      archlinux: []
     nmap:
-      fedora: ["nmap"]
       ubuntu: ["nmap"]
       archlinux: ["nmap"]
     openvpn:
-      fedora: ["openvpn"]
       ubuntu: ["openvpn"]
       archlinux: ["openvpn"]
     curl:
-      fedora: ["curl"]
       ubuntu: ["curl"]
       archlinux: ["curl"]
     wget:
-      fedora: ["wget"]
       ubuntu: ["wget"]
       archlinux: ["wget"]
     tree:
-      fedora: ["tree"]
       ubuntu: ["tree"]
       archlinux: ["tree"]
     which:
-      fedora: ["which"]
       ubuntu: []
       archlinux: ["which"]
     zip:
-      fedora: ["zip"]
       ubuntu: ["zip", "unzip"]
       archlinux: ["zip", "unzip"]
     traceroute:
-      fedora: ["traceroute"]
       ubuntu: ["traceroute"]
       archlinux: ["traceroute"]
     tcpdump:
-      fedora: ["tcpdump"]
       ubuntu: ["tcpdump"]
       archlinux: ["tcpdump"]
     tar:
-      fedora: ["tar"]
       ubuntu: ["tar"]
       archlinux: ["tar"]
     rsync:
-      fedora: ["rsync"]
       ubuntu: ["rsync"]
       archlinux: ["rsync"]
     net-tools:
-      fedora: ["net-tools"]
       ubuntu: ["net-tools"]
       archlinux: ["net-tools"]
     ntfs:
-      fedora: ["ntfs-3g", "ntfsprogs"]
       ubuntu: ["ntfs-3g"]
       archlinux: ["ntfs-3g"]
     lsof:
-      fedora: ["lsof"]
       ubuntu: ["lsof"]
       archlinux: ["lsof"]
     iptables:
-      fedora: ["iptables"]
       ubuntu: ["iptables"]
       archlinux: ["iptables"]
     pwgen:
-      fedora: ["pwgen"]
       ubuntu: ["pwgen"]
       archlinux: ["pwgen"]
     gpg:
-      fedora: ["gnupg2", "paperkey", "yubikey-manager"]
-      ubuntu: ["gnupg2"]
+      ubuntu: ["gnupg2", "pcscd", "scdaemon"]
       archlinux: ["gnupg", "paperkey", "yubikey-manager", "yubikey-touch-detector"]
     networkmanager:
-      fedora: ["NetworkManager", "NetworkManager-wifi"]
-      ubuntu: ["network-manager", "network-manager-openvpn", "network-manager-openconnect"]
+      ubuntu: ["network-manager", "network-manager-openvpn", "network-manager-openconnect", "network-manager-openconnect-gnome"]
       archlinux: ["networkmanager"]
     pulseaudio:
-      fedora: ["pulseaudio", "pulseaudio-utils"]
       ubuntu: ["pulseaudio", "pulseaudio-utils"]
       archlinux: ["pulseaudio", "pulseaudio-alsa"]
     iw:
-      fedora: ["iw"]
       ubuntu: ["iw"]
       archlinux: ["iw"]
     cowsay:
-      fedora: ["cowsay"]
       ubuntu: ["cowsay"]
       archlinux: ["cowsay"]
     ruby:
-      fedora: ["ruby", "ruby-devel", "rubygem-bundler"]
       ubuntu: ["ruby", "ruby-dev", "ruby-bundler"]
       archlinux: ["ruby"]
     lxc:
-      fedora: ["lxc"]
       ubuntu: ["lxc"]
       archlinux: ["lxc"]
     acpi:
-      fedora: ["acpi"]
       ubuntu: ["acpid"]
       archlinux: ["acpi", "acpid"]
     npm:
-      fedora: ["npm"]
       ubuntu: ["npm"]
       archlinux: ["npm"]
     xdg:
-      fedora: ["xdg-utils"]
       ubuntu: ["xdg-utils"]
       archlinux: ["xdg-utils"]
     docs:
-      fedora: ["man-pages"]
       ubuntu: ["manpages"]
       archlinux: ["man-pages"]
     compton:
-      fedora: ["compton"]
       ubuntu: ["compton"]
       archlinux: []
     dunst:
-      fedora: ["dunst"]
       ubuntu: ["dunst"]
       archlinux: ["dunst"]
     cloc:
-      fedora: ["cloc"]
       ubuntu: ["cloc"]
       archlinux: ["cloc"]
     bluetooth:
-      fedora: []
       ubuntu: ["blueman"]
       archlinux: ["bluez", "bluez-tools", "blueman"]
     autorandr:
-      fedora: []
       ubuntu: ["autorandr"]
       archlinux: ["autorandr"]
     bwm-ng:
-      fedora: []
       ubuntu: ["bwm-ng"]
       archlinux: ["bwm-ng"]
     virtualbox:
-      fedora: []
       ubuntu: ["virtualbox"]
-      archlinux: []
+      archlinux: ["virtualbox"]
     ssh:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["ssh"]
       archlinux: ["openssh"]
     sshfs:
-      fedora: []
       ubuntu: ["sshfs"]
       archlinux: ["sshfs"]
     expect:
-      fedora: []
       ubuntu: ["expect"]
       archlinux: ["expect"]
     inotify:
-      fedora: []
       ubuntu: ["inotify-tools"]
       archlinux: ["inotify-tools"]
     rclone:
-      fedora: ["rclone"]
       ubuntu: ["rclone"]
       archlinux: ["rclone"]
     dnf:
-      fedora: ["python3-dnf"]
       ubuntu: []
       archlinux: []
     rust:
-      fedora: []
       ubuntu: ["rustc", "cargo"]
       archlinux: ["rust"]
     musescore:
-      fedora: []
-      ubuntu: ["musescore"]
+      ubuntu: ["musescore3"]
       archlinux: ["musescore"]
     sipcalc:
-      fedora: []
       ubuntu: ["sipcalc"]
       archlinux: ["sipcalc"]
     rofi:
-      fedora: []
       ubuntu: ["rofi"]
       archlinux: ["rofi"]
     anki:
-      fedora: ["anki"]
       ubuntu: ["anki"]
       archlinux: ["anki"]
     imv:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["imv"]
       archlinux: ["imv"]
     pacman:
-      fedora: []
       ubuntu: []
       archlinux: ["pacman", "pacman-contrib"]
     steam:
-      fedora: []
       ubuntu: []
       archlinux: ["steam"]
     man:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["man"]
       archlinux: ["man-db", "man-pages"]
     discord:
-      fedora: []
       ubuntu: []
       archlinux: ["discord"]
     nextcloud:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["nextcloud-desktop"]
       archlinux: ["nextcloud-client"]
     kwallet:
-      fedora: []
       ubuntu: []
       archlinux: ["kwallet", "kwalletmanager"]
     wallpapers:
-      fedora: []
       ubuntu: []
       archlinux: ["elementary-wallpapers", "deepin-community-wallpapers"]
     wallutils:
-      fedora: []
       ubuntu: []
       archlinux: ["wallutils"]
     pv:
-      fedora: ["pv"]
       ubuntu: ["pv"]
       archlinux: ["pv"]
     stress:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["stress"]
       archlinux: ["stress"]
     mpris:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["playerctl"]
       archlinux: ["playerctl"]
     imagemagick:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["imagemagick"]
       archlinux: ["imagemagick"]
     mpv:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["mpv"]
       archlinux: ["mpv"]
     gnome-keyring:
-      fedora: []
-      ubuntu: []
+      ubuntu: ["gnome-keyring"]
       archlinux: ["gnome-keyring"]
+    element:
+      ubuntu: []
+      archlinux: ["element-desktop"]
+    maim:
+      ubuntu: ["maim"]
+      archlinux: ["maim"]
+    mkinitcpio:
+      ubuntu: []
+      archlinux: ["mkinitcpio"]
+    terraform:
+      ubuntu: []
+      archlinux: ["terraform"]
+    synclient:
+      ubuntu: ["xserver-xorg-input-synaptics"]
+      archlinux: ["xf86-input-synaptics"]
+    ncdu:
+      ubuntu: ["ncdu"]
+      archlinux: ["ncdu"]
 
   remove:
     mousepad:
-      fedora: ["mousepad"]
       ubuntu: ["mousepad"]
       archlinux: ["mousepad"]
+    chrome:
+      ubuntu: ["google-chrome-stable"]
+      archlinux: []

playbook.yml

@@ -17,7 +17,7 @@
 
     - name: Check for valid distro
       assert:
-        that: distro in ('fedora', 'ubuntu', 'archlinux')
+        that: distro in ('ubuntu', 'archlinux')
 
     - block:
       - block:
@@ -43,26 +43,6 @@
           become: true
         when: distro == 'ubuntu'
 
-      - block:
-        - name: Update dnf cache
-          dnf:
-            update_cache: true
-          become: true
-
-        - name: Upgrade system
-          dnf:
-            name: '*'
-            state: latest
-            update_cache: false
-          become: true
-
-        - name: Remove unused packages
-          dnf:
-            autoremove: true
-            update_cache: false
-          become: true
-        when: distro == 'fedora'
-
       - block:
         - name: enable multilib repository
           blockinfile:
@@ -82,7 +62,7 @@
         - name: install pacman-contrib for paccache
           package:
             name: pacman-contrib
-            state: installed
+            state: present
           become: true
 
         - name: Clean cache
@@ -93,24 +73,15 @@
         when: distro == 'archlinux'
       tags: [update_system]
 
-    - name: install selinux specials on fedora
-      dnf:
-        state: installed
-        name:
-          - python3-libselinux
-          - policycoreutils-python-utils
-      become: true
-      when: distro == 'fedora'
-
     - block:
       - name: install sudo
         package:
-          state: installed
+          state: present
           name: sudo
 
       - name: install dependencies for paru
         package:
-          state: installed
+          state: present
           name:
             - base-devel
             - git
@@ -208,7 +179,7 @@
       - name: install packages
         package:
           name: "{{ packages|json_query(query) }}"
-          state: installed
+          state: present
         become: true
         vars:
           query: "{{ 'list.*.%s[]'|format(distro) }}"
@@ -246,7 +217,7 @@
       - name: install lz4
         package:
           name: lz4
-          state: installed
+          state: present
         become: true
 
       - name: use lz4 for mkinitcpio compression
@@ -259,11 +230,6 @@
           - rebuild initrd
       when: distro == 'archlinux'
 
-    - set_fact:
-        disable_services:
-          - sshd
-      when: distro == 'fedora'
-
     - set_fact:
         disable_services:
           - ssh
@@ -283,16 +249,6 @@
       become: true
       when: manage_services|default(true)|bool
 
-    - set_fact:
-        enable_services:
-          - NetworkManager
-          # does not work with fedora 31 due to the switch to cgroups v2:
-          # https://github.com/docker/cli/issues/2104
-          # https://bugzilla.redhat.com/show_bug.cgi?id=1746355#c1
-          # - docker
-          - libvirtd
-      when: distro == 'fedora'
-
     - set_fact:
         enable_services:
           - NetworkManager
@@ -377,7 +333,7 @@
             - lib32-libva-mesa-driver
             - mesa-vdpau
             - lib32-mesa-vdpau
-          state: installed
+          state: present
         become: true
 
       - name: set AMDGPU options
@@ -399,6 +355,128 @@
         - distro == 'archlinux'
         - machine.gpu is defined and machine.gpu == 'amd'
 
+    - block:
+      - name: install alacritty build dependencies
+        package:
+          state: present
+          # https://github.com/alacritty/alacritty/blob/master/INSTALL.md#debianubuntu
+          name:
+            - cmake
+            - pkg-config
+            - libfreetype6-dev
+            - libfontconfig1-dev
+            - libxcb-xfixes0-dev
+            - libxkbcommon-dev
+            - python3
+        become: true
+
+      - name: stat alacritty binary
+        stat:
+          path: /usr/local/bin/alacritty
+        register: alacritty_binary
+
+      - name: create temporary directory for alacritty build
+        tempfile:
+          state: directory
+        register: alacritty_build_tempdir
+        when: not alacritty_binary.stat.exists
+
+      - name: build alacritty
+        command: cargo install alacritty --root ./out
+        args:
+          chdir: "{{ alacritty_build_tempdir.path }}"
+        when: not alacritty_binary.stat.exists
+
+      - name: install alacritty
+        command: mv "{{ alacritty_build_tempdir.path }}/out/bin/alacritty" /usr/local/bin/alacritty
+        become: true
+        when: not alacritty_binary.stat.exists
+
+      - name: clean up build directory
+        file:
+          path: "{{ alacritty_build_tempdir.path }}"
+          state: absent
+        when: not alacritty_binary.stat.exists
+
+      when: distro == 'ubuntu'
+      tags: [alacritty]
+
+    - block:
+      - name: stat yubikey-touch-detector binary
+        stat:
+          path: /usr/local/bin/yubikey-touch-detector
+        register: yubikey_touch_detector_binary
+
+      - name: create temporary directory for yubikey-touch-detector build
+        tempfile:
+          state: directory
+        register: yubikey_touch_detector_build_tempdir
+        when: not yubikey_touch_detector_binary.stat.exists
+
+      - name: build yubikey-touch-detector
+        shell: env GOPATH=$(pwd) go get -u github.com/maximbaz/yubikey-touch-detector
+        args:
+          chdir: "{{ yubikey_touch_detector_build_tempdir.path }}"
+        when: not yubikey_touch_detector_binary.stat.exists
+
+      - name: install yubikey-touch-detector
+        command: >
+          mv
+          "{{ yubikey_touch_detector_build_tempdir.path }}/bin/yubikey-touch-detector"
+          /usr/local/bin/yubikey-touch-detector
+        become: true
+        when: not yubikey_touch_detector_binary.stat.exists
+
+      - name: clean up build directory
+        file:
+          path: "{{ yubikey_touch_detector_build_tempdir.path }}"
+          state: absent
+        when: not yubikey_touch_detector_binary.stat.exists
+
+      when: distro == 'ubuntu'
+      tags: [yubikey-touch-detector]
+
+    - block:
+      - name: add spotify apt key
+        apt_key:
+          url: "https://download.spotify.com/debian/pubkey_0D811D58.gpg"
+          id: "D1742AD60D811D58"
+        become: true
+
+      - name: add spotify repository
+        apt_repository:
+          repo: "deb http://repository.spotify.com stable non-free"
+          filename: spotify
+        become: true
+
+      - name: install spotify
+        apt:
+          name: spotify-client
+          update_cache: true
+        become: true
+      when: distro == 'ubuntu'
+      tags: [spotify]
+
+    - block:
+      - name: add signal apt key
+        apt_key:
+          url: "https://updates.signal.org/desktop/apt/keys.asc"
+          id: "D980A17457F6FB06"
+        become: true
+
+      - name: add signal repository
+        apt_repository:
+          repo: "deb https://updates.signal.org/desktop/apt xenial main"
+          filename: spotify
+        become: true
+
+      - name: install signal
+        apt:
+          name: signal-desktop
+          update_cache: true
+        become: true
+      when: distro == 'ubuntu'
+      tags: [signal]
 
     - name: create dotfiles group
       group:
@@ -407,11 +485,21 @@
       become: true
       become_user: root
 
+    - name: create dotfiles user
+      user:
+        name: dotfiles
+        home: /var/lib/dotfiles
+        create_home: false
+        shell: /bin/bash
+        system: true
+      become: true
+      become_user: root
+
     - name: create dotfiles directory
       file:
         state: directory
         path: /var/lib/dotfiles
-        owner: nobody
+        owner: dotfiles
         group: dotfiles
         mode: '0775' # group needs write access!
       become: true

qt/qt5ct.conf

@@ -1,14 +1,9 @@
 [Appearance]
-color_scheme_path=/usr/share/qt5ct/colors/airy.conf
 custom_palette=false
 icon_theme=breeze
 standard_dialogs=default
 style=Fusion
 
-[Fonts]
-fixed=@Variant(\0\0\0@\0\0\0\x1e\0\x44\0\x65\0j\0\x61\0V\0u\0 \0L\0G\0\x43\0 \0S\0\x61\0n\0s@(\0\0\0\0\0\0\xff\xff\xff\xff\x5\x1\0\x32\x10)
-general=@Variant(\0\0\0@\0\0\0\x1e\0\x44\0\x65\0j\0\x61\0V\0u\0 \0L\0G\0\x43\0 \0S\0\x61\0n\0s@(\0\0\0\0\0\0\xff\xff\xff\xff\x5\x1\0\x32\x10)
-
 [Interface]
 activate_item_on_single_click=1
 buttonbox_layout=0
@@ -23,6 +18,3 @@ stylesheets=@Invalid()
 toolbutton_style=4
 underline_shortcut=1
 wheel_scroll_lines=3
-
-[SettingsWindow]
-geometry=@ByteArray(\x1\xd9\xd0\xcb\0\x3\0\0\0\0\0\0\0\0\0\x16\0\0\t\xff\0\0\x5\x88\0\0\0\0\0\0\0\x16\0\0\t\xff\0\0\x5\x88\0\0\0\0\0\0\0\0\n\0\0\0\0\0\0\0\0\x16\0\0\t\xff\0\0\x5\x88)

requirements.txt

@@ -1,13 +1,12 @@
-ansible==2.10.4
-ansible-base==2.10.3
-cffi==1.14.4
-cryptography==3.2.1
-ipaddress==1.0.23
-Jinja2==2.11.2
+ansible==4.6.0
+ansible-core==2.11.5
+cffi==1.14.6
+cryptography==35.0.0
+Jinja2==3.0.1
 jmespath==0.10.0
-MarkupSafe==1.1.1
-packaging==20.7
+MarkupSafe==2.0.1
+packaging==21.0
 pycparser==2.20
 pyparsing==2.4.7
-PyYAML==5.3.1
-six==1.15.0
+PyYAML==5.4.1
+resolvelib==0.5.4

screencfg/ares.sh

@@ -1,5 +0,0 @@
-#!/usr/bin/env bash
-
-set -o xtrace
-
-xrandr --output DisplayPort-0 --mode 2560x1440 --primary --rate 144.00 --set TearFree on

screencfg/ares/default.yml

@@ -0,0 +1,8 @@
+reset: true
+outputs:
+  - name: DisplayPort-0
+    opts:
+      mode: 2560x1440
+      rate: "144.00"
+    set:
+      TearFree: "on"

screencfg/neptune/default.yml

@@ -0,0 +1,14 @@
+reset: false
+outputs:
+  - name: eDP-1
+    primary: True
+    opts:
+      mode: 1920x1080
+      scale: 1x1
+      pos: "0x0" # beware of hex
+  - name: DP-1-1
+    disable: true
+  - name: DP-1-2
+    disable: true
+  - name: DP-1-3
+    disable: true

screencfg/neptune/three-screens.yml

@@ -0,0 +1,18 @@
+reset: true
+outputs:
+  - name: eDP-1
+    opts:
+      mode: 1920x1080
+      scale: 0.7x0.7
+      pos: "0x0" # beware of hex
+  - name: DP-3
+    primary: True
+    opts:
+      mode: 1920x1080
+      right-of: eDP-1
+    reset: true
+  - name: DP-4
+    opts:
+      mode: 1920x1080
+      right-of: DP-3
+    reset: true

screencfg/tb-hak/default.yml

@@ -0,0 +1,14 @@
+reset: false
+outputs:
+  - name: eDP-1
+    primary: True
+    opts:
+      mode: 1920x1080
+      scale: 1x1
+      pos: "0x0" # beware of hex
+  - name: DP-1-1
+    disable: true
+  - name: DP-1-2
+    disable: true
+  - name: DP-1-3
+    disable: true

screencfg/tb-hak/three-screens.yml

@@ -0,0 +1,18 @@
+reset: true
+outputs:
+  - name: eDP-1
+    opts:
+      mode: 1920x1080
+      scale: 0.7x0.7
+      pos: "0x0" # beware of hex
+  - name: DP-1-1
+    primary: True
+    opts:
+      mode: 1920x1080
+      right-of: eDP-1
+    reset: true
+  - name: DP-1-2
+    opts:
+      mode: 1920x1080
+      right-of: DP-1-1
+    reset: true

test-in-docker.sh

@@ -4,7 +4,8 @@ set -o nounset
 set -o errexit
 
 tmpdir="$(mktemp -d)"
-tmpdir=/tmp/dotfiles
+
+trap "rm -rf ${tmpdir}" EXIT
 
 git archive --format tar --output "${tmpdir}/dotfiles.tar" HEAD
 
@@ -17,24 +18,58 @@ git submodule foreach 'bash -x -c "
 
 gzip -k -f -v "${tmpdir}/dotfiles.tar"
 
-exit 1
+test_ares() {
+    if [[ -d "/var/cache/pacman/pkg/" ]] ; then
+        dockeropts=(-v "/var/cache/pacman/pkg/:/var/cache/pacman/pkg_host/")
+    fi
+    docker pull docker.io/library/archlinux:base
+    docker run \
+        -ti \
+        --rm \
+        -v ${tmpdir}/dotfiles.tar.gz:/tmp/dotfiles.tar.gz:ro \
+        --mount type=tmpfs,destination=/var/cache/pacman/pkg/ \
+        "${dockeropts[@]}" \
+        --hostname ares \
+        docker.io/library/archlinux:base \
+        sh -c '
+            set -o errexit
 
-docker pull docker.io/library/archlinux:base
-docker run -ti --rm -v ${tmpdir}/dotfiles.tar.gz:/tmp/dotfiles.tar.gz:ro --hostname ares docker.io/library/archlinux:base sh -c '"
-    set -o errexit
+            # Uncomment CacheDir and append the host pacman cache as cachedir
+            # At worst, the cache directory will be ignored if it does not exist
+            # Pacman will always prefer the first cache directory, so newly downloaded
+            # packages will stay in the container
+            sed -i '"'"'s/^#\?\(CacheDir.*\)/\1\nCacheDir = \/var\/cache\/pacman\/pkg_host\//'"'"' /etc/pacman.conf
 
-    pacman -Syu --noconfirm python3
-    cd $(mktemp -d)
-    tar xf /tmp/dotfiles.tar.gz -C .
-    ANSIBLE_EXTRA_ARGS="-e manage_services=false" ./install.sh
-    read -p "Done, [return] to continue "
-'
+            pacman -Syu --noconfirm python3
+            cd $(mktemp -d)
+            tar xf /tmp/dotfiles.tar.gz -C .
+            ANSIBLE_EXTRA_ARGS="-e manage_services=false" ./install.sh
+            read -p "Done, [return] to continue "
+        '
+}
 
-docker pull docker.io/library/ubuntu:18.04
-docker run -ti --rm -v ${tmpdir}/dotfiles.tar.gz:/tmp/dotfiles.tar.gz:ro --hostname tb-hak docker.io/library/ubuntu:18.04 sh -c '
-    set -o errexit
+test_tb_hak() {
+    docker pull docker.io/library/ubuntu:18.04
+    docker run -ti --rm -v ${tmpdir}/dotfiles.tar.gz:/tmp/dotfiles.tar.gz:ro --hostname tb-hak docker.io/library/ubuntu:18.04 sh -c '
+        set -o errexit
 
-    cd $(mktemp -d)
-    tar xf /tmp/dotfiles.tar.gz -C .
-    ANSIBLE_EXTRA_ARGS="-e manage_services=false" ./install.sh
-'
+        cd $(mktemp -d)
+        tar xf /tmp/dotfiles.tar.gz -C .
+        ANSIBLE_EXTRA_ARGS="-e manage_services=false" ./install.sh
+    '
+}
+
+test_neptune() {
+    docker pull docker.io/library/ubuntu:20.04
+    docker run -ti --rm -v ${tmpdir}/dotfiles.tar.gz:/tmp/dotfiles.tar.gz:ro --hostname neptune docker.io/library/ubuntu:20.04 sh -c '
+        set -o errexit
+
+        cd $(mktemp -d)
+        tar xf /tmp/dotfiles.tar.gz -C .
+        ANSIBLE_EXTRA_ARGS="-e manage_services=false" ./install.sh
+    '
+}
+
+test_ares
+test_tb_hak
+test_neptune

tmux/tmux.conf

@@ -1,5 +1,5 @@
 set -g default-command "${SHELL}"
-set -g default-terminal "${TERMBIN}"
+set -g default-terminal "xterm-256color"
 
 set -g set-titles on
 set -g set-titles-string '#S'

user.yml

@@ -27,16 +27,6 @@
   when: distro == 'ubuntu'
   tags: [always]
 
-- set_fact:
-    user_groups:
-      - libvirt
-      - wheel
-      - vboxusers
-      - wireshark
-      - docker
-  when: distro == 'fedora'
-  tags: [always]
-
 - set_fact:
     user_groups:
       - libvirt
@@ -46,6 +36,7 @@
       - docker
       - sudonopw
       - games
+      - kvm
   when: distro == 'archlinux'
   tags: [always]
 
@@ -67,17 +58,29 @@
   become: true
   become_user: root
 
+- name: create systemd directory
+  file:
+    state: directory
+    path: "{{ item }}"
+    owner: "{{ user.name }}"
+    group: "{{ user_group_name }}"
+  loop:
+    - "/home/{{ user.name }}/.config/"
+    - "/home/{{ user.name }}/.config/systemd/"
+    - "/home/{{ user.name }}/.config/systemd/user/"
+
+# No way to use the `systemd` module here, as it needs a logind
+# session. So we have to handle the symlinks for masking ourselves.
 - name: disable and mask systemd user units
-  systemd:
-    name: "{{ item }}"
-    enabled: false
-    masked: true
-    scope: user
+  file:
+    state: link
+    dest: "/home/{{ user.name }}/.config/systemd/user/{{ item }}"
+    src: "/dev/null"
   with_items:
-    - gpg-agent.service
     - gpg-agent.socket
     - gpg-agent-browser.socket
     - gpg-agent-ssh.socket
+    - gpg-agent-extra.socket
 
 - name: create directory for getty autologin
   file:
@@ -254,8 +257,6 @@
       owner: "{{ user.name }}"
       group: "{{ user_group_name }}"
     with_items:
-      - name: terraform
-        optpath: terraform
       - name: hugo
         optpath: hugo
       - name: drone
@@ -309,12 +310,15 @@
     changed_when: vim_plugins_stdout.stdout_lines|length != 0
 
   - name: compile youcompleteme
+    # --force-sudo is required, as the script refuses to run
+    # in a sudo environment (i.e. if the SUDO_USER env variable
+    # is set). But of course, ansible uses that to assume the
+    # other user. It's fine.
     shell: |
       cd ~/.local/share/nvim/plugged/YouCompleteMe/
-      python3 ./install.py # --go-completer
+      python3 ./install.py --force-sudo
     args:
-      creates: ~/.local/share/nvim/plugged/YouCompleteMe/third_party/ycmd/ycm_core.so
-    when: vim_plugins_stdout.stdout_lines|length != 0 or true
+      creates: "{{ lookup('fileglob', '~/.local/share/nvim/plugged/YouCompleteMe/third_party/ycmd/ycm_core.*so') }}"
 
 - block:
   - name: firefox - create chrome directory
@@ -384,6 +388,11 @@
         dest: "{{ tempdir.path }}/PortfolioPerformance"
         remote_src: true
 
+    - name: clean up temp directory
+      file:
+        path: "{{ tempdir.path }"
+        state: absent
+
     - name: install portfolio performance
       synchronize:
         src: "{{ tempdir.path }}/PortfolioPerformance"
@@ -392,7 +401,9 @@
         checksum: true
         delete: true
 
-    when: not stat_portfolio_performance_installation.stat.exists
+    when:
+      - not stat_portfolio_performance_installation.stat.exists
+      - not ansible_check_mode
 
   - name: link portfolio performance
     file:
@@ -409,7 +420,7 @@
 - block:
   - name: set kubectl version
     set_fact:
-      kubectl_version: v1.20.1
+      kubectl_version: v1.22.2
 
   - name: get current stable version
     uri:
@@ -425,10 +436,10 @@
       kubectl_outdated: "{{ kubectl_version != kubectl_stable_version }}"
 
   - name: warn if not on stable version
-    debug:
+    fail:
       msg: "installing kubectl {{ kubectl_version }}, stable version would be {{ kubectl_stable_version }}"
-    changed_when: kubectl_outdated is sameas true
     when: kubectl_outdated is sameas true
+    ignore_errors: True
 
   - name: get kubectl
     get_url:
@@ -447,6 +458,70 @@
   tags:
     - kubectl
 
+- block:
+  - name: set terraform version
+    set_fact:
+      terraform_version: 1.0.2
+
+  - name: stat current terraform binary
+    stat:
+      path: "/home/{{ user.name }}/.opt/terraform-v{{ terraform_version }}"
+    register: terraform_binary
+
+  - name: create temporary download directory for terraform
+    tempfile:
+      state: directory
+    register: terraform_download_dir
+    when: not terraform_binary.stat.exists
+
+  - name: get terraform
+    get_url:
+      url: "https://releases.hashicorp.com/terraform/{{ terraform_version }}/terraform_{{ terraform_version }}_linux_amd64.zip"
+      dest: "{{ terraform_download_dir.path }}/terraform.zip"
+    when: not terraform_binary.stat.exists
+
+  - name: unpack terraform zip
+    unarchive:
+      src: "{{ terraform_download_dir.path }}/terraform.zip"
+      dest: "{{ terraform_download_dir.path }}/"
+      remote_src: true
+    when: not terraform_binary.stat.exists
+
+  - name: install terraform
+    command: mv "{{ terraform_download_dir.path }}/terraform" /home/{{ user.name }}/.opt/terraform-v{{ terraform_version }}
+    when: not terraform_binary.stat.exists
+
+  - name: clean up download directory
+    file:
+      path: "{{ terraform_download_dir.path }}"
+      state: absent
+    when: not terraform_binary.stat.exists
+
+  - name: link terraform
+    file:
+      src: /home/{{ user.name }}/.opt/terraform-v{{ terraform_version }}
+      dest: /home/{{ user.name }}/.optbin/terraform
+      state: link
+
+  - name: get terraform version info
+    command: /home/{{ user.name }}/.optbin/terraform version -json
+    register: terraform_version_output
+    changed_when: false
+
+  - name: parse terraform version output
+    set_fact:
+      terraform_outdated: "{{ (terraform_version_output.stdout | from_json()).terraform_outdated }}"
+    changed_when: false
+
+  - name: warn if terraform is outdated
+    fail:
+      msg: "current terraform v{{ terraform_version }} is out of date"
+    when: terraform_outdated is sameas true
+    ignore_errors: True
+
+  tags:
+    - terraform
+
 - name: handle autostart units
   block:
   - name: create systemd user directory
@@ -469,5 +544,57 @@
       group: "{{ user_group_name }}"
     with_fileglob: /var/lib/dotfiles/autostart/services/*
 
+  - name: get state of autostart.target
+    stat:
+      path: "/home/{{ user.name }}/.config/systemd/user/autostart.target"
+    register: autostart_target_stat
+
+  - name: remove invalid autostart.target
+    file:
+      path: "/home/{{ user.name }}/.config/systemd/user/autostart.target"
+      state: absent
+    when:
+      - autostart_target_stat.stat.exists
+      - not autostart_target_stat.stat.isreg
+
+  - name: deploy autostart.target
+    template:
+      src: ./autostart/autostart.target.j2
+      dest: "/home/{{ user.name }}/.config/systemd/user/autostart.target"
+      owner: "{{ user.name }}"
+      group: "{{ user_group_name }}"
+      force: true
+      follow: false
+
   tags:
     - autostart
+
+- block:
+  - name: import gpg key
+    command: gpg --import ./gpgkeys/{{ user.gpg_key.email }}.gpg.asc
+    register: gpg_import_output
+    changed_when: not ("unchanged" in gpg_import_output.stderr)
+
+  - name: trust gpg key
+    shell: "gpg --import-ownertrust <<< {{ user.gpg_key.fingerprint }}:6"
+    args:
+      executable: /bin/bash # required for <<<
+    register: gpg_trust_output
+    changed_when: gpg_trust_output.stderr_lines|length > 0
+
+  when: user.gpg_key is defined
+  tags: [gpg]
+
+- block:
+  - name: stat passwordstore checkout
+    stat:
+      path: /home/{{ user.name }}/.password-store
+    register: passwordstore_checkout
+  - name: check out passwordstore repository
+    git:
+      dest: /home/{{ user.name }}/.password-store
+      repo: ssh://git@code.hkoerber.de:2222/hannes/passwordstore.git
+      accept_hostkey: true
+    when: not passwordstore_checkout.stat.exists
+  when: user.enable_passwordstore|default(false) is sameas true
+  tags: [passwordstore]

vim/vimrc

@@ -47,7 +47,7 @@ Plug 'rodjek/vim-puppet'
 Plug 'suan/vim-instant-markdown'
 "Plug 'marshallward/vim-restructuredtext'
 "Plug 'vim-syntastic/syntastic'
-Plug 'ElmCast/elm-vim'
+"Plug 'ElmCast/elm-vim'
 Plug 'avh4/elm-format'
 
 Plug 'fatih/vim-go', { 'do': ':GoUpdateBinaries' }

x/xinitrc

@@ -20,6 +20,7 @@ fi
 
 start_wm() {
     log "starting i3"
+    systemctl --user import-environment
     systemctl --user start windowmanager.target
     sleep 1
     systemctl --user start autostart.target

zsh/zprofile.j2

@@ -19,7 +19,6 @@ export PATH
 export EDITOR="nvim"
 export VISUAL="nvim"
 export BROWSER="firefox"
-export TERMBIN="{{ machine.terminal_binary }}"
 
 export PAGER="less"
 export LESS="FRX"
@@ -39,9 +38,6 @@ export LC_COLLATE=C
 
 export DOTFILES=~/dotfiles
 
-export GOPATH=~/dev/go
-export GOROOT=/usr/lib/go
-
 export PATH=$PATH:$(go env GOPATH)/bin
 
 export ACPI_LID_NAME=LID
@@ -55,6 +51,23 @@ umask 0022
 export {{ k }}="{{ v }}"
 {% endfor %}
 
+export FEATURE_DIR="${RUNDIR}/features/"
+rm -rf "${FEATURE_DIR}"/
+mkdir -p "${FEATURE_DIR}"
+
+[[ $MACHINE_HAS_NEXTCLOUD     == "true" ]] && touch "${FEATURE_DIR}"/nextcloud
+[[ $MACHINE_HAS_KEEPASSX      == "true" ]] && touch "${FEATURE_DIR}"/keepassx
+[[ $MACHINE_HAS_STEAM         == "true" ]] && touch "${FEATURE_DIR}"/steam
+[[ $MACHINE_HAS_DISCORD       == "true" ]] && touch "${FEATURE_DIR}"/discord
+[[ $MACHINE_HAS_RESTIC_BACKUP == "true" ]] && touch "${FEATURE_DIR}"/restic_backup
+[[ $MACHINE_HAS_ELEMENT       == "true" ]] && touch "${FEATURE_DIR}"/element
+
+[[ $MACHINE_TYPE == "laptop" ]] && touch "${FEATURE_DIR}"/machine_is_laptop
+
+{% if user.gpg_agent %}
+touch "${FEATURE_DIR}"/gpg_agent
+{% endif %}
+
 # Make all environment variables also usable in the systemd user instancee
 systemctl --user import-environment
 

zsh/zshrc.d/20_aliases.sh

@@ -68,8 +68,8 @@ alias twa="task add"
 alias twd="task done"
 alias inbox="task add +inbox"
 
-alias yaml2json="python -c 'import sys, yaml, json; json.dump(yaml.load(sys.stdin), sys.stdout, indent=4)'"
-alias json2yaml="python -c 'import sys, yaml, json; yaml.safe_dump(json.loads(sys.stdin.read()), stream=sys.stdout)'"
+alias yaml2json="python3 -c 'import sys, yaml, json; json.dump(yaml.safe_load(sys.stdin), sys.stdout, indent=4)'"
+alias json2yaml="python3 -c 'import sys, yaml, json; yaml.safe_dump(json.loads(sys.stdin.read()), stream=sys.stdout)'"
 
 alias currentbranch='git rev-parse --abbrev-ref HEAD'
 
@@ -89,6 +89,8 @@ alias sysu="systemctl --user"
 
 alias gpg=gpg2
 
+alias alacritty="alacritty --config-file $HOME/.config/alacritty.yml"
+
 gitmaster() {
     git stash push -m gitmaster-$(date -uIseconds) -u || return 1
     _branch=$(git rev-parse --abbrev-ref HEAD)
@@ -241,10 +243,6 @@ man() {
         man "$@"
 }
 
-embiggen() {
-    enscript --no-header --media=A4 --landscape --font="DejaVuSansMono30" -o - | ps2pdf - | zathura -
-}
-
 resolvecd() {
     cd "$(readlink -f $(pwd))"
 }

zsh/zshrc.d/40_functions.sh

@@ -141,7 +141,7 @@ man() {
 }
 
 embiggen() {
-    enscript --no-header --media=A4 --landscape --font="DejaVuSansMono30" -o - | ps2pdf - | zathura -
+    enscript --no-header --media=A4 --landscape --font="DejaVuSansMono30" -o - 2>/dev/null | ps2pdf - | zathura -
 }
 
 resolvecd() {