Move log functions to shared.

facts/general/system.yml

@@ -1,7 +1,7 @@
 ---
 # Define file, folder, and other facts per OS.
 
-- name: General | Facts | System | Global
+- name: General | Facts | System | Global [1/2]
   set_fact:
     lynis_install_dir: /usr/local/src/lynis
     dwm_install_dir: /usr/local/src/dwm
@@ -10,7 +10,11 @@
     x_desktops: /usr/share/xsessions
     git_repo_http: https://{{ git_host }}/{{ git_user }}/{{ git_project }}
     git_repo_ssh: ssh://git@{{ git_host }}:{{ git_ssh_port }}/{{ git_user }}/{{ git_project }}
+    shared_rc_install_dir: /usr/local/src/env-shared
 
+- name: General | Facts | System | Global [2/2]
+  set_fact:
+    shared_rc_bin: "{{ shared_rc_install_dir }}/bin-shared"
 
 - name: General | Facts | System | Linux
   set_fact:

files/scripts/compress_audio.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 # 2023-12-04 Hyperling
-# Lower resolution of audio and convert to mp3. Also
+# Lower the resolution of audio and convert to mp3.
 # Also see: compress-video.sh
 
 ## Setup ##
@@ -36,7 +36,8 @@ function usage() {
 		  Compress audio to mp3. Can handle folders and work recursively.
 
 		Parameters:
-		  -q QUALITY : Integer for the maximum length of either media dimension.
+		  -q QUALITY : Integer for audio bitrate to transcode to.
+		               Defaults to 256k. No lower than 192k suggested.
 		  -l LOCATION : The specific media or folder which needs compressed.
 		  -r : Recursively shrink media based on the location passed.
 		  -f : Force the media to be shrunk even if a file already exists for it.

tasks/general/acct_mgmt/provision_config.yml

@@ -101,22 +101,48 @@
       ;            Slows down the rate of services such as telegraf and cron.
       ;              Default: false
       ;
-      ;;;;;;;;;;;;;;;;;;;;         Server Shortcut          ;;;;;;;;;;;;;;;;;;;;
+      ;;;;;;;;;;;;;;;;;;;;         Server Shortcuts         ;;;;;;;;;;;;;;;;;;;;
       ;
       ; For typing `prod` and getting straight to a server, like in env-termux.
       ;
-      ; prod_host : Branch to use on this machine.
+      ; Imagine the command:
+      ;   `ssh prod_user@prod_host:prod_port`
+      ;
+      ; prod_host : Hostname for the production server.
       ;               Example: myserver.com, mywebhost.net
       ;               Default: hyperling.com
       ;
-      ; prod_port : Provide the git host that the machine should poll.
+      ; prod_port : Port for the production server.
       ;               Example: 22, 222, 2222
       ;               Default: 22
       ;
-      ; prod_user : Port of the server host to use for SSH requests.
+      ; prod_user : Username for accessing the production server.
       ;               Example: jim, bob, jeff, anne
       ;               Default: user
       ;
+      ; For pushing MASTER directories to an SFTP server with `send-master`.
+      ;
+      ; Imagine the command:
+      ;   `rsync -auPhz --delete -e 'ssh -p prod_data_port' ./mydata-MASTER/ \
+      ;       prod_data_user@prod_data_host:/prod_data_dir/mydata-clone
+      ;   `
+      ;
+      ; prod_data_host : Branch to use on this machine.
+      ;                    Example: sftp.myserver.com, sftp.mywebhost.net
+      ;                    Default: hyperling.com
+      ;
+      ; prod_data_port : Provide the git host that the machine should poll.
+      ;                    Example: 22, 222, 2222
+      ;                    Default: 22
+      ;
+      ; prod_data_user : Port of the server host to use for SSH requests.
+      ;                    Example: jim, bob, jeff, anne
+      ;                    Default: user
+      ;
+      ; prod_data_dir : Port of the server host to use for SSH requests.
+      ;                   Example: /srv/sftp/
+      ;                   Default: /srv/sftp/
+      ;
       [global]
     marker: '; {mark} MANAGED BY ANSIBLE | Generic Config'
     state: present
@@ -143,6 +169,10 @@
     prod_host: "{{ lookup('ini', 'prod_host   file={{gen_file}} default=hyperling.com') }}"
     prod_port: "{{ lookup('ini', 'prod_port   file={{gen_file}} default=22') }}"
     prod_user: "{{ lookup('ini', 'prod_user   file={{gen_file}} default=user') }}"
+    prod_data_host: "{{ lookup('ini', 'prod_data_host   file={{gen_file}} default=hyperling.com') }}"
+    prod_data_port: "{{ lookup('ini', 'prod_data_port   file={{gen_file}} default=22') }}"
+    prod_data_user: "{{ lookup('ini', 'prod_data_user   file={{gen_file}} default=user') }}"
+    prod_data_dir: "{{ lookup('ini', 'prod_data_dir   file={{gen_file}} default=/srv/sftp') }}"
 
 - name: General | Account Management | Provisioning Configuration | General | Boolean Check | Swap Block
   set_fact:
@@ -171,6 +201,10 @@
     - { 'prod_host': "{{ prod_host }}" }
     - { 'prod_port': "{{ prod_port }}" }
     - { 'prod_user': "{{ prod_user }}" }
+    - { 'prod_data_host': "{{ prod_data_host }}" }
+    - { 'prod_data_port': "{{ prod_data_port }}" }
+    - { 'prod_data_user': "{{ prod_data_user }}" }
+    - { 'prod_data_dir': "{{ prod_data_dir }}" }
 
 
 ## Workstation ##

tasks/general/acct_mgmt/users.yml

@@ -127,7 +127,7 @@
     alias_cp: alias cp='cp -v'
     alias_mv: alias mv='mv -v'
     alias_rm: alias rm='echo "Use mv ~/TRASH/ instead!"'
-    export_path_additions: export PATH="~/bin:"{{ global_bin }}":$PATH"
+    export_path_additions: export PATH="~/bin:"{{ global_bin }}":"{{ shared_rc_bin }}":$PATH"
     function_wttr: |
       function weather() {
         # 20210301 - Someone showed me an awesome weather API! Had to implement it!
@@ -157,18 +157,7 @@
       # 20251201 - Add colors.
       # This helps to determine the color palette numbers:
       #  https://robotmoon.com/bash-prompt-generator/
-      PURPLE=`tput setaf 5`
+      # Colors have been moved to env-shared project's .rc_shared file.
-      ORANGE=`tput setaf 214`
-      GREEN=`tput setaf 2`
-
-      RED=`tput setaf 9`
-      SCARLET=`tput setaf 1`
-      YELLOW=`tput setaf 226` # 11 does not seem to work
-
-      GRAY=`tput setaf 8`
-
-      RESET=`tput sgr0`
-      BOLD=`tput bold`
 
       if [[ "$USER" == "root" || $UID == 0 ]]; then
         CLR_BRACKETS=$BOLD$YELLOW
@@ -302,6 +291,7 @@
       }
       function goodbye {
         update -yg
+        bye
       }
     metasploit_aliases: |
       alias metasploit="msfconsole"
@@ -729,8 +719,6 @@
         done
         echo -e "\nDone!\n"
       }
-    alias_clone: |
-      alias clone="rsync -auPhz --delete --exclude '.gradle' --exclude 'app/build'"
     export_hyperling: |
       export HYPERLING6="2a07:e03:3:80::1"
       export HYPERLING4="185.130.47.173"
@@ -740,8 +728,19 @@
       if [[ -e $DOCKER_SOURCE && $LOGNAME == "root" ]]; then
         source $DOCKER_SOURCE
       fi
-    alias_scan: |
+    export_prod:
-      alias scan="nmap -A -p- --script=vuln"
+      export PROD_HOST="{{ prod_host }}"
+      export PROD_PORT="{{ prod_port }}"
+      export PROD_USER="{{ prod_user }}"
+
+      export PROD_GIT_HOST="{{ git_host }}"
+      export PROD_GIT_PORT="{{ git_ssh_port }}"
+      export PROD_GIT_USER="{{ git_user }}"
+
+      export PROD_DATA_HOST="{{ prod_data_host }}"
+      export PROD_DATA_PORT="{{ prod_data_port }}"
+      export PROD_DATA_USER="{{ prod_data_user }}"
+      export PROD_DATA_DIR="{{ prod_data_dir }}"
     alias_prod: |
       alias prod="ssh -p {{ prod_port }} {{ prod_user }}@{{ prod_host }}"
     function_clean_code: |
@@ -822,23 +821,12 @@
       alias chmod='chmod -c'
     alias_iftop: |
       alias iftop='sudo iftop'
-    alias_ls: |
-      alias l='ls'
-      alias ll='ls -alh'
-      alias lh='ls -ash'
     alias_progs: |
       alias progs='ps -ef'
     alias_nethogs: |
       alias nethogs='sudo nethogs'
     alias_ansible_facts: |
       alias ansible-facts='ansible localhost -m setup --connection=local'
-    function_now: |
-      function now {
-        date "+%Y%m%d-%H%M%S"
-      }
-      function today {
-        date "+%Y%m%d"
-      }
     function_backup: |
       export BACKUP_DIR="/srv/backup"
       function backup {
@@ -904,13 +892,6 @@
       alias prod-backup="pull_prod_backups"
       alias pull-prod="pull_prod_backups"
       alias prod-pull="pull_prod_backups"
-    function_log: |
-      function log {
-        echo -e "$1"
-      }
-      function blog {
-        echo -e "\n\n$1\n\n"
-      }
     function_debian_upgrade: |
       function debian-upgrade {
         typeset -l OLD NEW
@@ -1114,6 +1095,10 @@
         done;
       }
       alias try="loop "
+    source_shared: |
+      if [ -f ~/.rc_shared ]; then
+        source ~/.rc_shared
+      fi
 
 
 - name: General | Account Management | Users | Files | Common Variable
@@ -1135,6 +1120,7 @@
       export domain="{{ domain }}"
 
       {{ export_path_additions }}
+      {{ source_shared }}
       {{ alias_cp }}
       {{ alias_mv }}
       {{ alias_rm }}
@@ -1168,10 +1154,9 @@
       {{ function_code_reseed }}
       {{ function_clean_filenames }}
       {{ function_clean_filenames_tree }}
-      {{ alias_clone }}
       {{ export_hyperling }}
       {{ source_docker_env }}
-      {{ alias_scan }}
+      {{ export_prod }}
       {{ alias_prod }}
       {{ function_clean_code }}
       {{ alias_kill_battery }}
@@ -1180,14 +1165,11 @@
       {{ function_ansible_vars }}
       {{ alias_permission_commands }}
       {{ alias_iftop }}
-      {{ alias_ls }}
       {{ alias_progs }}
       {{ alias_nethogs }}
       {{ alias_ansible_facts }}
-      {{ function_now }}
       {{ function_backup }}
       {{ function_pull_prod_backups }}
-      {{ function_log }}
       {{ function_debian_upgrade }}
       {{ function_ebook_convert }}
       {{ alias_sudo }}
@@ -1234,31 +1216,6 @@
   ignore_errors: yes
   when: user_root.home != "" and user_user.home != ""
 
-- name: General | Account Management | Users | Files | .vimrc
-  blockinfile:
-    path: "{{ item }}/.vimrc"
-    block: |
-      " Turn off syntax, flashy lights, etc. Make VIM into a basic editor.
-      syntax off
-      set nohlsearch
-      set noautoindent noautowrite noshowmatch wrapmargin=0 report=1 ts=3
-      set ignorecase
-
-      " Turn off auto-commenting.
-      autocmd Filetype * set fo-=c fo-=r fo-=o
-
-      " qq shortcut for immediately exiting all files without saving.
-      nnoremap qq :qa!<cr>
-    marker: '" {mark} MANAGED BY ANSIBLE | vimrc'
-    state: present
-    create: yes
-    backup: yes
-  loop:
-    - "{{ user_root.home }}"
-    - "{{ user_user.home }}"
-  ignore_errors: yes
-  when: user_root.home != "" and user_user.home != ""
-
 - name: General | Account Management | Users | Files | Ownership
   file:
     path: "{{ user_user.home }}/{{ item }}"
@@ -1267,7 +1224,6 @@
   loop:
     - .bashrc
     - .zshrc
-    - .vimrc
 
 
 - name: General | Account Management | Users | Files | Helper Functions (Reset)
@@ -1283,3 +1239,50 @@
     mode: 0755
   with_fileglob:
     - "functions/*.function"
+
+
+- name: General | Account Management | Users | env-shared | Download
+  git:
+    repo: https://git.hyperling.com/me/env-shared
+    version: "{{ branch }}"
+    dest: "{{ shared_rc_install_dir }}"
+    clone: true
+    force: true
+    update: true
+  ignore_errors: yes
+
+- name: General | Account Management | Users | env-shared | Install | .rc_shared
+  copy:
+    src: "{{ shared_rc_install_dir }}/rc_shared.sh"
+    dest: "{{ item }}/.rc_shared"
+    owner: root
+    group: "{{ root_group }}"
+    mode: 0755
+  loop:
+    - "{{ user_root.home }}"
+    - "{{ user_user.home }}"
+  ignore_errors: yes
+  when: user_root.home != "" and user_user.home != ""
+
+- name: General | Account Management | Users | env-shared | Install | .vimrc
+  copy:
+    src: "{{ shared_rc_install_dir }}/vimrc.vim"
+    dest: "{{ item }}/.vimrc"
+    owner: root
+    group: "{{ root_group }}"
+    mode: 0755
+  loop:
+    - "{{ user_root.home }}"
+    - "{{ user_user.home }}"
+  ignore_errors: yes
+  when: user_root.home != "" and user_user.home != ""
+
+- name: General | Account Management | Users | env-shared | Permissions
+  file:
+    path: "{{ user_user.home }}/{{ item }}"
+    owner: "{{ user }}"
+    mode: '0755'
+  loop:
+    - .rc_shared
+    - .vimrc
+  ignore_errors: yes

tasks/general/software/metasploit.yml

@@ -6,6 +6,11 @@
     metasploit_installer: msfinstall
   when: ansible_system in ("Linux", "Darwin")
 
+- name: General | Software | Metasploit | Check Install Status
+  stat:
+    path: /usr/bin/msfconsole
+  register: metasploit_status
+
 - name: General | Software | Metasploit | Refresh Apt Files
   shell: "{{ item }}"
   loop:
@@ -13,7 +18,8 @@
     - "mv -fv /usr/share/keyrings/metasploit-framework.gpg /tmp/apt/metasploit-framework.gpg.old"
     - "mv -fv /etc/apt/sources.list.d/metasploit-framework.list /tmp/apt/metasploit-framework.list.old"
     - "mv -fv /etc/apt/preferences.d/pin-metasploit.pref /tmp/apt/pin-metasploit.pref.old"
-  when: ansible_system in ("Linux")
+  when: ansible_system in ("Linux") and
+        not metasploit_status.stat.exists
   ignore_errors: true
 
 - name: General | Software | Metasploit | Install
@@ -24,4 +30,5 @@
     - "mkdir -p {{ global_bin }}"
     - "mv -fv ./msfinstall {{ global_bin }}/{{ metasploit_installer }}"
     - yes y | "{{ global_bin }}/{{ metasploit_installer }}"
-  when: ansible_system in ("Linux", "Darwin")
+  when: ansible_system in ("Linux", "Darwin") and
+        not metasploit_status.stat.exists

tasks/general/software/services.yml

@@ -98,14 +98,15 @@
 
 ## Bluetooth ##
 # Do people seriously depend on Bluetooth? Plug your devices in, silly!
+# Hehe, I use it now for a few rare things so disabling this for now.
 
-- name: General | Software | Services | Bluetooth | Disable
+#- name: General | Software | Services | Bluetooth | Disable
-  service:
+#  service:
-    name: "{{ bluetooth }}"
+#    name: "{{ bluetooth }}"
-    pattern: "{{ bluetooth_pattern }}"
+#    pattern: "{{ bluetooth_pattern }}"
-    state: stopped
+#    state: stopped
-    enabled: no
+#    enabled: no
-  ignore_errors: yes
+#  ignore_errors: yes
 
 ## NTP ##
 

tasks/workstation/linux/software/flatpaks.yml

@@ -45,11 +45,13 @@
       - { app: "app.grayjay.Grayjay", name: "grayjay", extra: "" }
       - { app: "com.github.xournalpp.xournalpp", name: "xournal", extra: "" }
       - { app: "network.loki.Session", name: "session", extra: "" }
+      - { app: "com.brave.Browser", name: "brave", extra: "" }
     flatpaks_coding:
       - { app: "com.vscodium.codium", name: "codium-flatpak", extra: "" }
       - { app: "com.google.AndroidStudio", name: "android-studio", extra: "" }
       - { app: "io.dbeaver.DBeaverCommunity", name: "dbeaver", extra: "" }
       - { app: "com.visualstudio.code-oss", name: "code-flatpak", extra: "" }
+      - { app: "org.gnome.Boxes", name: "boxes", extra: "" }
     flatpaks_editing_video:
       - { app: "org.shotcut.Shotcut", name: "shotcut", extra: "" }
       - { app: "com.obsproject.Studio", name: "obs", extra: "" }

tasks/workstation/shared/cron/shutdown.yml

@@ -0,0 +1,21 @@
+# TBD:
+# - Decide whether this should be added to local.yml since wall does not work with gnome-terminal.
+---
+
+- name: Workstation | Shared | Cron | Root | Shutdown Warnings
+  cron:
+    user: root
+    name: "Shutdown Warnings"
+    minute: "*"
+    hour: "19-23"
+    job: /usr/bin/wall "Shutting down soon! Please save your work!" && /usr/sbin/shutdown --show
+    state: present
+
+- name: Workstation | Shared | Cron | Root | Shutdown
+  cron:
+    user: root
+    name: "Shutdown"
+    minute: "*/5"
+    hour: "20-23"
+    job: /usr/sbin/shutdown -h 4
+    state: present

tasks/workstation/shared/settings/gnome.yml

@@ -173,6 +173,7 @@
 # End block for Dash To Dock.
 
 # Apply dconf settings through RC files due to distros without working psutil.
+# Use the command 'dconf watch /' then change settings to see find these values.
 - name: Workstation | Account Management | GNOME | Settings
   blockinfile:
     path: "{{ user_user.home }}/{{ item }}"
@@ -216,7 +217,7 @@
 
       dconf write /org/gnome/mutter/center-new-windows true && inc_dconf &&
 
-      dconf write /org/gnome/desktop/notifications/show-banners false && inc_dconf &&
+      dconf write /org/gnome/desktop/notifications/show-banners true && inc_dconf &&
       dconf write /org/gnome/desktop/notifications/application/org-gnome-evolution-alarm-notify/enable-sound-alerts false && inc_dconf &&
       dconf write /org/gnome/desktop/notifications/application/org-gnome-evolution-alarm-notify/enable false && inc_dconf &&
       dconf write /org/gnome/desktop/notifications/application/org-gnome-evolution/enable-sound-alerts false && inc_dconf &&
@@ -282,6 +283,68 @@
       #/org/gnome/terminal/legacy/profiles:/:b1dcc9dd-5262-4d8d-a863-c897e6d979b9/preserve-working-directory
       #'never'
 
+      ## Wellbeing ##
+
+      dconf write /org/gnome/desktop/screen-time-limits/daily-limit-enabled \
+        true && inc_dconf &&
+      dconf write /org/gnome/desktop/screen-time-limits/daily-limit-seconds \
+        "uint32 21600" && inc_dconf &&
+      dconf write /org/gnome/desktop/screen-time-limits/grayscale \
+        true && inc_dconf &&
+      dconf write /org/gnome/desktop/screen-time-limits/history-enabled \
+        true && inc_dconf &&
+
+      #dconf write /org/gnome/desktop/break-reminders/selected-breaks \
+      #  "['eyesight', 'movement']" && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/selected-breaks \
+        "['movement']" && inc_dconf &&
+
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/duration-seconds \
+      #  "uint32 180" && inc_dconf &&
+      #dconf write /org/g
+
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/duration-seconds \
+      #  "uint32 180" && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/interval-seconds \
+      #  "uint32 1800" && inc_dconf &&
+      #
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/countdown \
+      #  false && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/delay-seconds \
+      #  "uint32 180" && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/fade-screen \
+      #  true && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/notify \
+      #  false && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/notify-overdue \
+      #  false && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/notify-upcoming \
+      #  false && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/play-sound \
+      #  false && inc_dconf &&
+      #dconf write /org/gnome/desktop/break-reminders/eyesight/interval-seconds \
+      #  "uint32 1800" && inc_dconf &&
+
+      dconf write /org/gnome/desktop/break-reminders/movement/duration-seconds \
+        "uint32 180" && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/movement/interval-seconds \
+        "uint32 1800" && inc_dconf &&
+
+      dconf write /org/gnome/desktop/break-reminders/movement/countdown \
+        true && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/movement/delay-seconds \
+        "uint32 60" && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/movement/fade-screen \
+        true && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/movement/notify \
+        true && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/movement/notify-overdue \
+        true && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/movement/notify-upcoming \
+        true && inc_dconf &&
+      dconf write /org/gnome/desktop/break-reminders/movement/play-sound \
+        true && inc_dconf &&
+
       ## Success ##
 
       sleep 0 ||