llm, stop using pull=always because then network is required to start the container.

.ansible-lint

@@ -0,0 +1,23 @@
+# .ansible-lint
+---
+skip_list:
+  - command-instead-of-shell
+  - key-order[task]
+  - yaml[line-length]
+  - yaml[colons]
+  - jinja[spacing]
+  - name[missing]
+  - yaml[comments]
+  - yaml[commas]
+  - var-naming[pattern]
+  - yaml[braces]
+
+warn_list:
+  - literal-compare
+  - ignore-errors
+  - no-changed-when
+  - yaml[indentation]
+  - risky-file-permissions
+  - risky-shell-pipe
+  - fqcn[action-core]
+  - fqcn[action]

README.md

@@ -17,17 +17,27 @@ This information is as of 2025-11-21.
 
 ### Primary
 
-These are the operating systems used as my daily driver.
+These are the operating systems used as my dailies.
+
+#### Artix (`runit`)
+
+2026-08-04: Completed adapting playbooks and now using this as a daily driver.
+
+2026-07-31: Began experimenting and adapting playbooks using VMs.
 
 #### Debian Trixie
 
 This has been used as my primary server and workstation OS since at least 2024.
+
 The `apt` version of `ansible` in both Bookworm and Trixie are sufficient,
 no longer need to use `ansible` out of `pip`.
 
+Stopped using as a workstation on all devices by August 2026, still using as a server.
+
 ### Secondary
 
-These are tested via my Docker project's `ProvisionsTests` container but not currently used as daily drivers.
+These are tested via my Docker project's `ProvisionsTests` containers
+but not currently used as daily drivers. [TBD: Link]()
 
 #### Arch
 
@@ -54,6 +64,14 @@ TBD
 100%, but only if using a recent enough version of Ansible. `pip` usually has a
 better version than `apt`.
 
+#### Devuan (`runit`)
+
+2026-09-14: Abandoned, did not support virtualization on runit and felt slow / clunky to Artix.
+
+2026-08-13: Distribution is nearly fully dunctional.
+
+2026-07-30: Distribution has beed added with a few caveats:
+
 #### Ubuntu
 
 100%, both server and desktop.
@@ -88,14 +106,14 @@ terrible while updating. Ubuntu Rolling Rhino filled the gap.
 Workstation: 100%,
 Server: 100%
 
-## Suse Family
+### Suse Family
 
-### openSUSE Tumbleweed v2022-02-17
+#### openSUSE Tumbleweed v2022-02-17
 
 Generic: 100%,
 Workstation: 100%
 
-### openSUSE Leap 15.4
+#### openSUSE Leap 15.4
 
 Generic: 100%
 Workstation: Currently failing at `[Workstation | Linux | Flatpak Distro | Package Manager | Install From Repo]` with message `Problem: nothing provides libedataserver-1.2.so.24 needed by the to be installed evolution-data-server-32bit-3.34.4-3.3.1.x86_64`.
@@ -127,6 +145,8 @@ after update problems due to a long computer hiatus.
 
 Specifically for the Pinephone.
 
+## Unsupported
+
 ## Future Goals
 
 Eventually some of the scripts and install files will be put into the files

ansible.cfg

@@ -1,6 +1,7 @@
 [defaults]
 inventory=hosts
 interpreter_python=auto_silent
+inject_facts_as_vars=True
 
 [inventory]
 localhost_warning=False

facts/general/gather.yml

@@ -2,17 +2,16 @@
 # Facts that must be gathered after running tasks.
 
 - name: General | Facts | Gather | Locate bash
-  shell: which bash
+  ansible.builtin.shell: which bash
   register: bash_exec
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Facts | Gather | Locate ansible-pull
-  shell: which ansible-pull
+  ansible.builtin.shell: which ansible-pull
   register: ansible_pull_exec
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Facts | Gather | Locate zsh
-  shell: which zsh
+  ansible.builtin.shell: which zsh
   register: zsh_exec
-  ignore_errors: yes
+  ignore_errors: true
-

facts/general/package.yml

@@ -3,23 +3,34 @@
 # This file is for ALL systems and should not include UI components.
 
 - name: General | Facts | Package | Shared Defaults
-  set_fact:
+  ansible.builtin.set_fact:
     sshfs: sshfs
     tar: tar
     iftop: iftop
     nethogs: nethogs
     ntp_server: chrony
     dig: dig
-    neofetch: neofetch
+    neofetch: fastfetch
+    lightdm: lightdm
+    sddm: sddm
+    tmux: tmux
+    base_devel: htop # Placeholder for Arch package.
+    sendmail: msmtp
+    sendmail_mta: msmtp-mta
+    ca_certificates: ca-certificates
+    locate: mlocate
+    alsa: alsa-utils
+    stress: stress
+    jq: jq
 
 - name: General | Facts | Package | Parrot OS Fixes
-  set_fact:
+  ansible.builtin.set_fact:
     ansible_pkg_mgr: "apt"
     ansible_python_interpreter: "/usr/bin/python3"
   when: ansible_distribution == "Parrot OS"
 
 - name: General | Facts | Package | apt
-  set_fact:
+  ansible.builtin.set_fact:
     locate: locate
     opensshd: openssh-server
     microcode_amd: amd64-microcode
@@ -29,23 +40,20 @@
     dig: dnsutils
   when: ansible_pkg_mgr == "apt"
 
-- name: General | Facts | Package | apt | Debian Trixie
-  set_fact:
-    neofetch: fastfetch
-  when: ansible_pkg_mgr == "apt" and ansible_distribution_release == "trixie"
-
 - name: General | Facts | Package | pacman
-  set_fact:
+  ansible.builtin.set_fact:
     locate: mlocate
     opensshd: openssh
     microcode_amd: linux-firmware
     microcode_intel: intel-ucode
     cron: cronie
     encfs: encfs
+    dig: bind
+    base_devel: base-devel
   when: ansible_pkg_mgr == "pacman"
 
 - name: General | Facts | Package | FreeBSD
-  set_fact:
+  ansible.builtin.set_fact:
     sshfs: fusefs-sshfs
     locate: htop # Placeholder to prevent errors, locate built into FreeBSD.
     opensshd: htop # sshd comes installed on FreeBSD
@@ -56,13 +64,13 @@
     encfs: fusefs-encfs
   when: ansible_system == "FreeBSD"
 
-- name: General | Facts | Package | dnf (Fixes) # TBD: Fix + test package names: mlocate, dig, neofetch
+- name: General | Facts | Package | dnf (Fixes)
-  set_fact:
+  ansible.builtin.set_fact:
     ansible_pkg_mgr: dnf
   when: ansible_pkg_mgr in ("dnf5")
 
 - name: General | Facts | Package | dnf
-  set_fact:
+  ansible.builtin.set_fact:
     sshfs: fuse-sshfs
     locate: plocate
     opensshd: openssh
@@ -70,39 +78,37 @@
     microcode_intel: microcode_ctl
     cron: cronie
     encfs: fuse-encfs
+    dig: bind-utils
+    sendmail_mta: msmtp
   when: ansible_pkg_mgr == "dnf"
 
 - name: General | Facts | Package | zypper
-  set_fact:
+  ansible.builtin.set_fact:
     locate: plocate
     opensshd: openssh
     microcode_amd: ucode-amd
     microcode_intel: ucode-intel
     cron: cronie
     encfs: encfs
+    dig: bind-utils
   when: ansible_pkg_mgr == "zypper"
 
 
 - name: General | Facts | Package | Update Command | Helpers
-  set_fact:
+  ansible.builtin.set_fact:
     update_accept_var: '$accept'
     nix_days: 14
     ansible_distribution_file: "{{ prov_dir }}/ansible_distribution.txt"
     ansible_pkg_mgr_file: "{{ prov_dir }}/ansible_pkg_mgr.txt"
 
-- name: General | Facts | Package | Update Command | Helpers | pacman
-  set_fact:
-    update_accept_var: '--noconfirm'
-  when: ansible_pkg_mgr == "pacman"
-
 - name: General | Facts | Package | Update Command | Store Variables
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "echo '{{ ansible_distribution }}' > {{ ansible_distribution_file }}"
     - "echo '{{ ansible_pkg_mgr }}' > {{ ansible_pkg_mgr_file }}"
 
 - name: General | Facts | Package | Update Command
-  set_fact:
+  ansible.builtin.set_fact:
     update_package_manager: |
 
       distribution="`cat {{ ansible_distribution_file }}`"
@@ -148,11 +154,22 @@
 
         pacman)
           echo "*** Pacman ***"
-          if [[ "$accept" == "Y" ]]; then
+          auto_accept="{{ update_accept_var }}"
-            auto_accept="{{ update_accept_var }}"
+          if [[ "$auto_accept" == "-y" ]]; then
+            auto_accept="--noconfirm"
           fi
-          sudo pacman -Syyu $auto_accept ||
+
+          sudo pacman -Syu $auto_accept --overwrite '/usr/lib/node_modules/*' ||
           return 1
+          echo -e "\n"
+
+          if [[ "$LOGNAME" != "root" ]]; then
+            echo "*** AUR (yay) ***"
+            yay --sudoloop -Syu $auto_accept || return 2
+          else
+            echo "*** User is root, skipping AUR (yay) ***"
+          fi
+          echo -e "\n"
         ;;
 
         pkg | pkgng)
@@ -243,40 +260,45 @@
           fi
         ;;
       esac
-# End of update_package_manager
+    update_npm: |
+      if [[ `which npm` ]]; then
+        echo "*** NPM ***" &&
+        sudo npm update -g
+        echo -e "\n"
+      fi
 
 # Flatpaks
 - name: General | Facts | Package | Update Command | Flatpak | Check
-  shell: which flatpak
+  ansible.builtin.shell: which flatpak
   register: flatpak_exec
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Facts | Package | Update Command | Flatpak | Exists
-  set_fact:
+  ansible.builtin.set_fact:
     update_flatpak: |
       echo "*** Flatpak ***"
-      [[ -n {{ update_accept_var }} ]] && sudo flatpak repair
+      [[ -n "$accept" ]] && sudo flatpak repair
-      sudo flatpak uninstall --unused {{ update_accept_var }} &&
+      sudo flatpak uninstall --unused $accept &&
-      sudo flatpak update {{ update_accept_var }} ||
+      sudo flatpak update $accept ||
       return 1
   when: flatpak_exec is defined
     and flatpak_exec.failed is defined
     and not flatpak_exec.failed
 
 - name: General | Facts | Package | Update Command | Flatpak | Missing
-  set_fact:
+  ansible.builtin.set_fact:
     update_flatpak: |
       echo "*** Flatpak Not Installed ***"
   when: update_flatpak is not defined
 
 # Firmware
 - name: General | Facts | Package | Update Command | Firmware | Check
-  shell: which fwupdmgr
+  ansible.builtin.shell: which fwupdmgr
   register: fwupdmgr_exec
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Facts | Package | Update Command | Firmware | Exists
-  set_fact:
+  ansible.builtin.set_fact:
     update_firmware: |
       echo "*** Firmware ***"
       sudo fwupdmgr refresh --force &&
@@ -288,7 +310,7 @@
     and not fwupdmgr_exec.failed
 
 - name: General | Facts | Package | Update Command | Firmware | Missing
-  set_fact:
+  ansible.builtin.set_fact:
     update_firmware: |
       echo "*** Firmware Updater (fwupdmgr) Not Installed ***"
   when: update_firmware is not defined

facts/general/service.yml

@@ -2,7 +2,7 @@
 # Definitions for service management.
 
 - name: General | Facts | Service | All
-  set_fact:
+  ansible.builtin.set_fact:
     cups: cups
     cups_pattern: cupsd
     cups_browse: cups-browsed
@@ -18,19 +18,19 @@
     bluetooth_pattern: bluetooth
 
 - name: General | Facts | Service | Arch Linux
-  set_fact:
+  ansible.builtin.set_fact:
     crond: cronie
     crond_pattern: cronie
-  when: ansible_distribution in ("Archlinux")
+  when: ansible_pkg_mgr == "pacman"
 
 - name: General | Facts | Service | Fedora
-  set_fact:
+  ansible.builtin.set_fact:
     crond: crond
     crond_pattern: crond
   when: ansible_distribution in ("Fedora")
 
 - name: General | Facts | Service | Ubuntu Linux
-  set_fact:
+  ansible.builtin.set_fact:
     sshd: ssh
     sshd_pattern: ssh
   when: ansible_distribution == "Ubuntu"

facts/general/system.yml

@@ -1,41 +1,86 @@
 ---
 # Define file, folder, and other facts per OS.
 
-- name: General | Facts | System | Global
+- name: General | Facts | System | Global 01
-  set_fact:
+  ansible.builtin.set_fact:
-    lynis_install_dir: /usr/local/src/lynis
+    global_src: /usr/local/src
-    dwm_install_dir: /usr/local/src/dwm
-    st_install_dir: /usr/local/src/st
     global_bin: /usr/local/bin
     x_desktops: /usr/share/xsessions
-    git_repo_http: https://{{ git_host }}/{{ git_user }}/{{ git_project }}
+    git_repo_http: "https://{{ git_host }}/{{ git_user }}/{{ git_project }}"
-    git_repo_ssh: ssh://git@{{ git_host }}:{{ git_ssh_port }}/{{ git_user }}/{{ git_project }}
+    git_repo_ssh: "ssh://git@{{ git_host }}:{{ git_ssh_port }}/{{ git_user }}/{{ git_project }}"
+    notify_log: "ansible.notify.log"
+    runit_script_dir: /etc/runit/sv
+    runit_service_dir: /etc/runit/runsvdir/default
+    runit_service_script: run
+    runit_log_dir: log
+    global_log: /var/log
+    global_log_config: config
+    runit_finish_sleep: |
+      #!/bin/sh
+      exec 2>&1
+      # $1 is the exit code, $2 is the exit status byte (signal number if killed)
+      echo "FINISH: Service returned with exit code: $1 and status: $2"
 
+      sleep_long=10
+      sleep_short=1
+      if [[ "$1" != 0 ]]; then
+        echo "FINISH: Sleeping for $sleep_long seconds due to error..."
+        sleep $sleep_long
+      else
+        echo "FINISH: Sleeping for $sleep_short seconds."
+        sleep $sleep_short
+      fi
+    runit_log_config_1mb: |
+      s1000000 # rotate at 1 MB
+      n2       # keep 2 old files
+    runit_log_config_10mb: |
+      s10000000 # rotate at 10 MB
+      n2        # keep 2 old files
+    runit_log_config_100mb: |
+      s100000000 # rotate at 100 MB
+      n2         # keep 2 old files
+
+- name: General | Facts | System | Global 02
+  ansible.builtin.set_fact:
+    shared_rc_install_dir: "{{ global_src }}/env-shared"
+    notify_log_file: "/var/log/{{ notify_log }}"
+    notify_log_file_wip: "/tmp/{{ notify_log }}.wip"
+    lynis_install_dir: "{{ global_src }}/lynis"
+    dwm_install_dir: "{{ global_src }}/dwm"
+    st_install_dir: "{{ global_src }}/st"
+    runit_log_script: "{{ runit_service_script }}"
+
+- name: General | Facts | System | Global 03
+  ansible.builtin.set_fact:
+    shared_rc_bin: "{{ shared_rc_install_dir }}/bin-shared"
 
 - name: General | Facts | System | Linux
-  set_fact:
+  ansible.builtin.set_fact:
     rc_conf: /dev/null
     sudoers_install_dir: /etc/sudoers.d/
     sudoers_config: /etc/sudoers
     shutdown_command: sudo shutdown -h now
   when: ansible_system == "Linux"
 
-
 - name: General | Facts | System | FreeBSD
-  set_fact:
+  ansible.builtin.set_fact:
     rc_conf: /etc/rc.conf
     sudoers_install_dir: /usr/local/etc/sudoers.d/
     shutdown_command: sudo shutdown -p now
   when: ansible_system == "FreeBSD"
 
-
 - name: General | Facts | System | Report File Names
-  set_fact:
+  ansible.builtin.set_fact:
     lynis_report: "lynis_hardness_check.txt"
     nmap_report: "nmap_port_check.txt"
 
-
 - name: General | Facts | System | Ansible Branch
-  set_fact:
+  ansible.builtin.set_fact:
     branch: main
   when: branch is not defined
+
+- name: General | Facts | System | runit (Devuan)
+  ansible.builtin.set_fact:
+    runit_script_dir: /etc/sv
+    runit_service_dir: /etc/service
+  when: ansible_pkg_mgr == "apt"

facts/general/user.yml

@@ -2,12 +2,12 @@
 # Define users and groups per OS type.
 
 - name: General | Facts | User | Linux
-  set_fact:
+  ansible.builtin.set_fact:
     root_group: root
   when: ansible_system == "Linux"
 
 
 - name: General | Facts | User | FreeBSD
-  set_fact:
+  ansible.builtin.set_fact:
     root_group: wheel
   when: ansible_system == "FreeBSD"

facts/miner/config.yml

@@ -4,10 +4,10 @@
 ## Load Config File ##
 
 - name: Miner | Facts | Config File | Download
-  shell: "scp {{ file_server }}:{{ config_file_remote }} {{ config_file_local }}; chmod 700 {{ config_file_local }}"
+  ansible.builtin.shell: "scp {{ file_server }}:{{ config_file_remote }} {{ config_file_local }}; chmod 700 {{ config_file_local }}"
 
 - name: Miner | Facts | Config File | Load Wallets
-  set_fact:
+  ansible.builtin.set_fact:
     wallet_xmr: "{{ lookup('ini', 'xmr section={{config_section_wallet}} file={{config_file_local}}') }}"
     wallet_eth: "{{ lookup('ini', 'eth section={{config_section_wallet}} file={{config_file_local}}') }}"
 
@@ -15,9 +15,9 @@
 ## Verify ##
 
 - name: Miner | Facts | Config File | DEBUG
-  debug:
+  ansible.builtin.debug:
     var: "{{ item }}"
-  loop: 
+  loop:
     - wallet_xmr
     - wallet_eth
 
@@ -25,4 +25,4 @@
 ## Clean Up ##
 
 - name: Miner | Facts | Config File | Delete
-  shell: "mv {{ config_file_local }} ~/TRASH/"
+  ansible.builtin.shell: "mv {{ config_file_local }} ~/TRASH/"

facts/miner/pool.yml

@@ -2,7 +2,7 @@
 # Create arrays of pools per coin.
 
 - name: Miner | Facts | Pools
-  set_fact:
+  ansible.builtin.set_fact:
     nanopool_xmr:
       - { "priority": 1, "name": "xmr-us-east1.nanopool.org:14433" }
       - { "priority": 2, "name": "xmr-us-west1.nanopool.org:14433" }
@@ -34,7 +34,7 @@
 # CPU #
 
 - name: Miner | Facts | Pools | Set GPU to Nanopool Eth
-  set_fact:
+  ansible.builtin.set_fact:
     cpu_pool: "{{ nanopool_xmr }}"
   when: nanominer_cpu == "xmr" and nanominer_cpu_pool == "nanopool"
 
@@ -42,26 +42,26 @@
 # GPU #
 
 - name: Miner | Facts | Pools | Set GPU to Nanopool Eth
-  set_fact:
+  ansible.builtin.set_fact:
     gpu_pool: "{{ nanopool_eth }}"
   when: nanominer_gpu == "eth" and nanominer_gpu_pool == "nanopool"
 
 - name: Miner | Facts | Pools | Set GPU to Etherpool Eth
-  set_fact:
+  ansible.builtin.set_fact:
     gpu_pool: "{{ ethermine_eth }}"
   when: nanominer_gpu == "eth" and nanominer_gpu_pool == "etherpool"
 
 - name: Miner | Facts | Pools | Set GPU to F2Pool Eth
-  set_fact:
+  ansible.builtin.set_fact:
     gpu_pool: "{{ f2pool_eth }}"
   when: nanominer_gpu == "eth" and nanominer_gpu_pool == "f2pool"
-  
+
 
 
 ## Validate ##
 
 - name: Miner | Facts | Pools | DEBUG
-  debug:
+  ansible.builtin.debug:
     var: "{{ item }}"
   loop:
     - cpu_pool

facts/miner/system.yml

@@ -4,21 +4,21 @@
 ## Global ##
 
 - name: Miner | Facts | System | Global 1
-  set_fact:
+  ansible.builtin.set_fact:
     file_server: '{{ user }}@leet'
     check_alive_start: "[[ `ps -ef | grep -v 'grep' | grep -v '/bin/sh -c' | grep -v $$ | grep -c '"
     check_alive_end: "'` == '0' ]] &&"
     combined_log_file: "{{ user_mfn.home }}/log.txt"
 
 - name: Miner | Facts | System | Global 2
-  set_fact:
+  ansible.builtin.set_fact:
     use_combined_log_file: ">> {{ combined_log_file }} 2>&1"
 
 
 ## Config File ##
 
 - name: Miner | Facts | System | My Config File
-  set_fact:
+  ansible.builtin.set_fact:
     config_file_remote: "InstallFiles/Miners/miner.ini"
     config_file_local: "{{ user_mfn.home }}/miner.ini"
     config_section_wallet: wallet
@@ -31,20 +31,20 @@
 ## Nanominer ##
 
 - name: Miner | Facts | System | nanominer 1
-  set_fact:
+  ansible.builtin.set_fact:
     nanominer_home: "{{ user_mfn.home }}/nanominer"
     nanominer_version: "3.4.3" # Download link: https://github.com/nanopool/nanominer/releases
     nanominer_script: "{{ user_mfn.home }}/nanominer.sh"
 
 - name: Miner | Facts | System | nanominer 2
-  set_fact:
+  ansible.builtin.set_fact:
     nanominer_bin: "{{ nanominer_home }}/nanominer-linux-{{ nanominer_version }}"
     nanominer_tar_remote: "InstallFiles/Miners/nanominer/*{{ nanominer_version }}*.tar.gz"
     nanominer_config: "{{ nanominer_home }}/config.ini"
     nanominer_logs: "{{ nanominer_home}}/logs"
 
 - name: Miner | Facts | System | nanominer 3
-  set_fact:
+  ansible.builtin.set_fact:
     nanominer_tar_local: "{{ nanominer_bin }}.tar.gz"
     nanominer_exec: "{{ nanominer_bin }}/nanominer"
 
@@ -52,7 +52,7 @@
 ## Miner Array ##
 
 - name: Miner | Facts | System | Miner Array
-  set_fact:
+  ansible.builtin.set_fact:
     miners:
     - { "name": "xmr_stak_cpu", "enabled": '{{ (xmr_stak_cpu != false) }}', "command": "{{ user_mfn.home }}/xmr_stak_cpu.sh {{ use_combined_log_file }}" }
     - { "name": "ethminer",     "enabled": '{{ (ethminer != false) }}',     "command": "{{ user_mfn.home }}/ethminer.sh {{ use_combined_log_file }}" }

facts/server/system.yml

@@ -2,6 +2,6 @@
 # System related variables.
 
 - name: Facts | Server | System | FreeBSD
-  set_fact:
+  ansible.builtin.set_fact:
     ansible_python_interpreter: "/usr/local/bin/python3.8"
   when: ansible_system == "FreeBSD"

facts/workstation/package.yml

@@ -3,14 +3,14 @@
 # This is only for Workstation devices with UIs.
 
 - name: Workstation | Facts | Packages | Parrot OS Fixes
-  set_fact:
+  ansible.builtin.set_fact:
     ansible_pkg_mgr: "apt"
     ansible_python_interpreter: "/usr/bin/python3"
   when: ansible_distribution == "Parrot OS"
 
 
 - name: Workstation | Facts | Package | Consistent
-  set_fact:
+  ansible.builtin.set_fact:
     firefox: firefox
     firefox_esr: firefox-esr
     thunderbird: thunderbird
@@ -26,55 +26,122 @@
     dmenu: dmenu
     sassc: sassc
     ffmpeg: ffmpeg
+    wireless_tools: wireless-tools
+    macbook_wifi_driver: broadcom-sta-dkms
+    xz: xz
+    mesa: mesa
+    mesa_utils: mesa-utils
+    ninja: ninja
+    notify_send: libnotify
+    fyi: fyi
+    gtk3: gtk3
+    xz_libs: xz
+    cpp: libstdc++
+    c_libs: glibc
+    cpp_libs: libstdc++
+    z_libs: zlib
+    bzip: bzip2
+    dunst: dunst
+    android_jdk: openjdk
+    ncurses: ncurses
+    android_fastboot: fastboot
+    android_adb: adb
+    android_sdkmanager: sdkmanager
+    android_udev: android-udev
+    gnome_boxes: gnome-boxes
+    rhythmbox: rhythmbox
+    vlc: vlc
+    vlc_plugins: vlc-plugins-all
+    blueman: blueman
+    mpv: mpv
+    transmission_gtk: transmission-gtk
+    transmission_qt: transmission-qt
+    libreoffice: libreoffice
+    strawberry: strawberry
+    dict_en: hunspell-en_us
+    dict_es: hunspell-es_any
 
 
+- name: Workstation | Facts | Package | apt (All Distros)
+  ansible.builtin.set_fact:
+    xz: xz-utils
+    mesa: libglu1-mesa
+    mesa_utils: libglu1-mesa
+    ninja: ninja-build
+    notify_send: libnotify-bin
+    gtk3: libgtk-3-dev
+    xz_libs: liblzma-dev
+    cpp: libstdc++-12-dev
+    c_libs: libc6:amd64
+    cpp_libs: libstdc++6
+    z_libs: lib32z1
+    bzip: libbz2-1.0
+    android_jdk: default-jdk
+    ncurses: libncurses-dev
+    android_udev: android-udev-rules
+    vlc_plugins: libavcodec-extra
+  when: ansible_pkg_mgr == "apt"
+
 - name: Workstation | Facts | Package | Pop_OS!
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: true
     firefox_esr: firefox
   when: ansible_distribution == "Pop!_OS"
 
-
 - name: Workstation | Facts | Package | Ubuntu
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: true
     firefox_esr: firefox
     dmenu: suckless-tools
   when: ansible_distribution == "Ubuntu"
 
-
+- name: Workstation | Facts | Package | Debian & Devuan
-- name: Workstation | Facts | Package | Debian
+  ansible.builtin.set_fact:
-  set_fact:
     flatpak_distro: true
     dmenu: suckless-tools
-  when: ansible_distribution == "Debian"
+    firefox: firefox-esr
-
+  when: ansible_distribution in ("Debian", "Devuan")
 
 - name: Workstation | Facts | Package | Mint
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: true
     firefox_esr: firefox
   when: ansible_distribution == "Linux Mint"
 
-
 - name: Workstation | Facts | Package | Parrot OS
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: true
-    firefox_esr: firefox-esr
   when: ansible_distribution == "Parrot OS"
 
+- name: Workstation | Facts | Package | Apt w/o LibVirt
+  ansible.builtin.set_fact:
+    gnome_boxes: htop
+  when: ansible_pkg_mgr == "apt"
+    and ansible_service_mgr not in ("systemd", "sysvinit")
 
-- name: Workstation | Facts | Package | Arch + Manjaro
+
-  set_fact:
+- name: Workstation | Facts | Package | pacman (All Distros)
+  ansible.builtin.set_fact:
+    macbook_wifi_driver: broadcom-wl-dkms
+    android_jdk: jdk-openjdk
+    android_fastboot: android-tools
+    android_adb: android-tools
+    libreoffice: libreoffice-still
+  when: ansible_pkg_mgr == "pacman"
+
+- name: Workstation | Facts | Package | Arch / Manjaro / Artix
+  ansible.builtin.set_fact:
     flatpak_distro: true
-    firefox_esr: firefox
     psutil: python-psutil
-    appimagelauncher: appimagelauncher
+    #appimagelauncher: appimagelauncher # No longer in the repos, AUR.
-  when: ansible_distribution == "Archlinux"
+    font_awesome: ttf-font-awesome
+    wireless_tools: wireless_tools
+    nfs: nfs-utils
+  when: ansible_pkg_mgr == "pacman"
 
 
 - name: Workstation | Facts | Package | FreeBSD
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: false
     psutil: py38-psutil
     ansible_python_interpreter: "/usr/local/bin/python3.8"
@@ -84,7 +151,7 @@
 
 
 - name: Workstation | Facts | Package | Fedora
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: true
     firefox_esr: firefox
     font_awesome: python3-XStatic-Font-Awesome
@@ -94,7 +161,7 @@
 
 
 - name: Workstation | Facts | Package | openSUSE
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: true
     firefox_esr: firefox-esr-branding-openSUSE
     font_awesome: fontawesome-fonts
@@ -103,6 +170,6 @@
 
 
 - name: Workstation | Facts | Package | NixOS
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_distro: false
   when: ansible_distribution == "NixOS"

files/dwm/config.h

@@ -20,7 +20,7 @@ static const char *colors[][3]      = {
 };
 
 /* tagging */
-static const char *tags[] = { "1:", "2:", "3:", "4:", "5:", "6:", "7:", "8:", "9:" };
+static const char *tags[] = { "1 : ", "2 : ", "3 : ", "4 : ", "5 : ", "6 : ", "7 : ", "8 : ", "9 : " };
 
 static const Rule rules[] = {
 	/* xprop(1):
@@ -46,7 +46,7 @@ static const Layout layouts[] = {
 };
 
 /* key definitions */
-#define MODKEY Mod1Mask
+#define MODKEY Mod4Mask
 #define TAGKEYS(KEY,TAG) \
 	{ MODKEY,                       KEY,      view,           {.ui = 1 << TAG} }, \
 	{ MODKEY|ControlMask,           KEY,      toggleview,     {.ui = 1 << TAG} }, \
@@ -69,13 +69,16 @@ static const char *raisevolcmd[] = {"amixer","-q","sset","Master","1%+",NULL};
 static Key keys[] = {
 	/* modifier                     key        function        argument */
 	{ MODKEY,                       XK_p,      spawn,          {.v = dmenucmd } },
+	{ MODKEY,                       XK_d,      spawn,          {.v = dmenucmd } },
+	{ MODKEY,                       XK_b,      spawn,          {.v = dmenucmd } },
+	{ MODKEY,                       XK_space,      spawn,          {.v = dmenucmd } },
 	{ MODKEY|ShiftMask,             XK_Return, spawn,          {.v = termcmd } },
 	{ MODKEY,                       XK_Return, spawn,          {.v = termcmd } },
-	{ MODKEY,                       XK_b,      togglebar,      {0} },
+	//{ MODKEY,                       XK_b,      togglebar,      {0} },
 	{ MODKEY,                       XK_j,      focusstack,     {.i = +1 } },
 	{ MODKEY,                       XK_k,      focusstack,     {.i = -1 } },
 	{ MODKEY,                       XK_i,      incnmaster,     {.i = +1 } },
-	{ MODKEY,                       XK_d,      incnmaster,     {.i = -1 } },
+	//{ MODKEY,                       XK_d,      incnmaster,     {.i = -1 } },
 	{ MODKEY,                       XK_h,      setmfact,       {.f = -0.05} },
 	{ MODKEY,                       XK_l,      setmfact,       {.f = +0.05} },
 	{ MODKEY,                       XK_Return, zoom,           {0} },
@@ -84,8 +87,8 @@ static Key keys[] = {
 	{ MODKEY,                       XK_t,      setlayout,      {.v = &layouts[0]} },
 	{ MODKEY,                       XK_f,      setlayout,      {.v = &layouts[1]} },
 	{ MODKEY,                       XK_m,      setlayout,      {.v = &layouts[2]} },
-	{ MODKEY,                       XK_space,  setlayout,      {0} },
+	//{ MODKEY,                       XK_space,  setlayout,      {0} },
-	{ MODKEY|ShiftMask,             XK_space,  togglefloating, {0} },
+	//{ MODKEY|ShiftMask,             XK_space,  togglefloating, {0} },
 	{ MODKEY,                       XK_0,      view,           {.ui = ~0 } },
 	{ MODKEY|ShiftMask,             XK_0,      tag,            {.ui = ~0 } },
 	{ MODKEY,                       XK_comma,  focusmon,       {.i = -1 } },

files/functions/volume.function

@@ -31,8 +31,8 @@ function volume-usage {
 	EOF
 	return $1
 }
-alias volume-help="volume-usage"
+#alias volume-help="volume-usage"
-alias vol-h="volume-help"
+#alias vol-h="volume-help"
 
 function volume {
 
@@ -135,9 +135,9 @@ function volume {
 	echo "$0 $1 $2"
 	return 7
 }
-alias vol="volume "
+#alias vol="volume "
-alias vol-="volume - "
+#alias vol-="volume - "
-alias vol+="volume + "
+#alias vol+="volume + "
 
 function volume-display {
 	if [[ "$1" == "-v" || "$1" == "--verbose" || "$1" == "verbose" ]]; then
@@ -146,7 +146,7 @@ function volume-display {
 		amixer sget Master | egrep -o '[0-9]{1,3}%' | head -n 1
 	fi
 }
-alias "vol-d"="volume-display"
+#alias "vol-d"="volume-display"
 
 ## TBD/TODO ##
 

files/scripts/backup_system.sh

@@ -12,12 +12,16 @@ if [[ -z "$HOSTNAME" ]]; then
 fi
 
 EXTRA="$1"
-TAG="System"
 DATE="`date "+%Y%m%d-%H%M%S"`"
 BACKUP_DIR="/srv/backup"
 BASENAME="Backup"
+
+TAG="System"
 BACKUP="$BACKUP_DIR/$BASENAME.$DATE.$HOSTNAME.$TAG.zip"
 
+TAG2="Data"
+BACKUP2="${BACKUP//$TAG/$TAG2}"
+
 ## Initialization ##
 
 echo "*** Creating Backup Directory ***"
@@ -31,15 +35,19 @@ sudo chown -Rv root:root "$BACKUP_DIR"
 echo "*** Removing Old Backups ***"
 cd "$BACKUP_DIR"
 sudo mv -v "$BASENAME"*"$TAG"* TRASH/
+sudo mv -v "$BASENAME"*"$TAG2"* TRASH/
 sudo rm -v TRASH/*
 
 ## Main
 
+# System Backup
+
 echo "*** Creating backup at '$BACKUP' ***"
 sudo zip -rv "$BACKUP" \
 	/etc /var/{log,mail,spool} /srv /boot \
 	/usr/local/etc $EXTRA \
-	-x "/srv/backup/*" -x "/srv/sftp/*"
+	-x "/srv/backup/*" -x "/srv/sftp/*" \
+	-x "*/.gradle/" -x "*/app/build/*"
 status="$?"
 
 if [[ "$status" != 0 ]]; then
@@ -54,4 +62,27 @@ else
 	exit 1
 fi
 
+echo -e "\n\n"
+sleep 5
+
+# Data Backup
+
+echo "*** Creating backup at '$BACKUP2' ***"
+sudo zip -rv "$BACKUP2" \
+	/root /home /srv/sftp \
+	-x "*/.gradle/" -x "*/app/build/*"
+status="$?"
+
+if [[ "$status" != 0 ]]; then
+	echo "*** ERROR: Failed to create '$BACKUP2', file may be incorrect. ***"
+fi
+
+if [[ -e "$BACKUP2" ]]; then
+	ls -alh "$BACKUP2"
+	echo "*** '$BACKUP2' created successfully! ***"
+else
+	echo "*** '$BACKUP2' not found! ***"
+	exit 1
+fi
+
 exit 0

files/scripts/battery_nag.sh

@@ -0,0 +1,115 @@
+#!/usr/bin/env bash
+# 20260819 - Hyperling
+# Alert the user every so often once the battery is low.
+
+## Setup ##
+
+echo "`date` - Checking Active Programs"
+
+ps -ef | grep battery_nag.sh | grep -v grep | grep -v "sh -c" | grep -v kill | grep -v $$
+
+active=`ps -ef | grep battery_nag.sh | grep -v grep | grep -v "sh -c" | grep -v kill | grep -vc $$`
+if (( "$active" >= 1 )); then
+	echo "Program already running, exiting. Number of processes: $active"
+	exit 1
+fi
+
+echo "`date` - Loading Functions"
+
+which battery.function || {
+	echo "ERROR: Battery function not found, exiting."
+	exit 2
+}
+source battery.function
+
+## Params ##
+
+echo "`date` - Parsing Parameters"
+
+typeset -i alert sleep
+
+# Default to 20%.
+alert=20
+if [[ -n "$1" ]]; then
+	echo -n "alert changed from '$alert' "
+	alert="$1"
+	echo "to '$alert'"
+fi
+
+# Default to 5 minutes.
+sleep=300
+if [[ -n "$2" ]]; then
+	echo -n "sleep changed from '$sleep' "
+	sleep="$2"
+	echo "to '$sleep'"
+fi
+
+# Default to true.
+accelerate="Y"
+if [[ -n "$3" ]]; then
+	echo -n "accelerate changed from '$accelerate' "
+	accelerate="$3"
+	echo "to '$accelerate'"
+fi
+
+echo "Alerting when under ${alert}%."
+echo "Notifying every ${sleep} seconds."
+if [[ "$accelerate" == "Y" ]]; then
+	echo -n "Speeding up notifications as % gets lower."
+else
+	echo -n "Notifcations staying persistent."
+fi
+echo " (accelerate == $accelerate)"
+
+## Main ##
+
+echo "`date` - Starting Loop"
+
+while true; do
+
+	batt=`battery-display`
+	batt=${batt//%/}
+
+	if (( batt <= alert )); then
+		title="Battery is below ${alert}%"
+		message="Currently at ${batt}%"
+		cmd="`which fyi 2>/dev/null || which notify-send 2>/dev/null`"
+		if [[ -z "$cmd" ]]; then
+			echo "ERROR: No command found to send notification, exiting."
+			echo "Please install 'fyi' or 'notify-send' to use this script."
+			echo "If not using a DE, also ensure 'dunst' or similar is running."
+			exit 3
+		fi
+		echo "`date` - Attempting to report battery level at ${batt}."
+
+		$cmd "$title" "$message"
+		status="$?"
+
+		if [[ "$status" == 0 ]]; then
+			echo -n "`date` - Success! "
+		else
+			echo -n "`date` - ERROR: "
+		fi
+		echo "Nag returned status ${status}."
+	else
+		echo "`date` - Battery at ${batt}%, did not nag."
+	fi
+
+	time=$sleep
+	if [[ "$accelerate" == "Y" && $batt -lt $alert ]]; then
+		# Bash only returns whole numbers, so things like 20/11 only provide 1.
+		# Likewise, if the battery is full, 20/100 returns 0, which is bad. :)
+		if (( batt > 0 )); then
+			time=$(( time / (alert / batt) ))
+		else
+			time=10
+		fi
+	fi
+	# Showing a notification every 10 seconds makes it persistent.
+	# Any more than that casues multiple to stack which is unnecessary.
+	if (( time < 10 )); then
+		time=10
+	fi
+	echo "`date` - Sleeping for ${time}."
+	sleep $time
+done

files/scripts/compress_audio.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 # 2023-12-04 Hyperling
-# Lower resolution of audio and convert to mp3. Also
+# Lower the resolution of audio and convert to mp3.
 # Also see: compress-video.sh
 
 ## Setup ##
@@ -36,7 +36,8 @@ function usage() {
 		  Compress audio to mp3. Can handle folders and work recursively.
 
 		Parameters:
-		  -q QUALITY : Integer for the maximum length of either media dimension.
+		  -q QUALITY : Integer for audio bitrate to transcode to.
+		               Defaults to 256k. No lower than 192k suggested.
 		  -l LOCATION : The specific media or folder which needs compressed.
 		  -r : Recursively shrink media based on the location passed.
 		  -f : Force the media to be shrunk even if a file already exists for it.
@@ -181,8 +182,8 @@ $search "$location" | sort | while read media; do
 
 	if [[ -n "$delete" ]]; then
 		echo -n "  DELETE: "
-		if [[ -d ~/TRASH ]]; then
+		if [[ -d $HOME/TRASH ]]; then
-			mv -v "$media" ~/TRASH/
+			mv -v "$media" $HOME/TRASH/
 		else
 			rm -v "$media"
 		fi

files/scripts/compress_image.sh

@@ -15,6 +15,7 @@ size=2000
 
 # Strings
 tag="shrunk"
+use_tag="Y"
 date_YYYYMMDD="`date "+%Y%m%d"`"
 location="."
 search="ls"
@@ -28,7 +29,7 @@ function usage() {
 	# Parameters:
 	#   1) The exit status to use.
 	status=$1
-	echo "Usage: $PROG [-s SIZE] [-l LOCATION] [-A | [-r] [-f] [-d] [-c]] [-h] [-x] [-t]" >&2
+	echo "Usage: $PROG [-s SIZE] [-l LOCATION] [-A | [-r] [-f] [-d] [-c] [-e | -t] [-h] [-x] [-n]" >&2
 	cat <<- EOF
 		  Compress JPG or PNG image(s). Can handle folders and work recursively.
 
@@ -42,17 +43,18 @@ function usage() {
 		  -F : FORCE the image to be shrunk even if the file is already shrunk.
 		  -d : Delete the original image if the compressed image is smaller.
 		  -c : Clean the filename of underscores, dashes, 'IMG', etc.
+		  -e | -t : Format timestamp to the expanded model.
 		  -A : Resursively Force, Delete, and Clean.
 		  -h : Display this usage text.
 		  -x : Enable BASH debugging.
-		  -t : Format timestamp.
+		  -n : No file extension.
 	EOF
 	exit $status
 }
 
 ## Parameters ##
 
-while getopts ":s:l:rfFdcAhxt" opt; do
+while getopts ":s:l:rfFdcetAhxn" opt; do
 	case $opt in
 		s) in_size="$OPTARG" && size="$in_size" ;;
 		l) location="$OPTARG" ;;
@@ -62,10 +64,11 @@ while getopts ":s:l:rfFdcAhxt" opt; do
 		d) delete="Y" ;;
 		c) clean="Y" ;;
 		e) expand="Y" ;;
-		A) recurse="Y" && search="find" && force="Y" && delete="Y" && expand="Y" ;;
+		t) expand="Y" ;;
+		A) recurse="Y" && search="find" && force="Y" && delete="Y" ;;
 		h) usage 0 ;;
 		x) set -x ;;
-		t) format_time="Y" ;;
+		n) use_tag="N" ;;
 		*) echo "ERROR: Option $OPTARG not recognized." >&2 && usage 1 ;;
 	esac
 done
@@ -114,6 +117,12 @@ $search "$location" | sort | while read image; do
 	fi
 
 	new_image="${image//.$extension/}.$tag-$date_YYYYMMDD.$size.$extension"
+	if [[ "$use_tag" == "N" ]]; then
+		new_image="$image"
+		new_image="${new_image//.$extension/}"
+		new_image="${new_image//.$tag/}"
+		new_image="$new_image.$tag.$extension"
+	fi
 
 	## Clean Filename ##
 	# Prevent directory from having its name cleaned too.
@@ -132,9 +141,7 @@ $search "$location" | sort | while read image; do
 	# Date Data
 	new_image_exp="${TEMP:0:4}-${TEMP:4:2}-${TEMP:6:2}"
 	# Time Data
-	if [[ "$format_time" == "Y" ]]; then
+	new_image_exp="${new_image_exp}_${TEMP:8:2}-${TEMP:10:2}-${TEMP:12:2}"
-		new_image_exp="${new_image_exp}_${TEMP:8:2}-${TEMP:10:2}-${TEMP:12:2}"
-	fi
 	# Remainder Data
 	if [[ "${TEMP:14:1}" == "." ]]; then
 		SEP=""
@@ -156,7 +163,7 @@ $search "$location" | sort | while read image; do
 	fi
 
 	# Skip if a compressed image was already created today.
-	if [[ -e "$new_image" || -e $new_image_clean ]]; then
+	if [[ (-e "$new_image" || -e $new_image_clean) && $use_tag == "Y" ]]; then
 		echo "  SKIP: Image has already been shrunk previously, moving on."
 		continue
 	fi
@@ -208,8 +215,8 @@ $search "$location" | sort | while read image; do
 
 	if [[ -n "$delete" ]]; then
 		echo -n "  DELETE: "
-		if [[ -d ~/TRASH ]]; then
+		if [[ -d $HOME/TRASH ]]; then
-			mv -v "$image" ~/TRASH/
+			mv -v "$image" $HOME/TRASH/
 		else
 			rm -v "$image"
 		fi

files/scripts/compress_video.sh

@@ -225,8 +225,8 @@ $search_command "$input" | sort | while read file; do
 	if [[ -e "$newfile" || -e "$new_video_clean" ]]; then
 		if [[ "$force" == "Y" ]]; then
 			echo "FORCE: Removing '$newfile'."
-			if [[ -d ~/TRASH ]]; then
+			if [[ -d $HOME/TRASH ]]; then
-				mv -v "$newfile" "$new_video_clean" ~/TRASH/ 2>/dev/null
+				mv -v "$newfile" "$new_video_clean" $HOME/TRASH/ 2>/dev/null
 			else
 				rm -v "$newfile" "$new_video_clean" 2>/dev/null
 			fi
@@ -279,8 +279,8 @@ $search_command "$input" | sort | while read file; do
 
 	if [[ -n "$delete" ]]; then
 		echo -n "Original has been deleted: "
-		if [[ -d ~/TRASH ]]; then
+		if [[ -d $HOME/TRASH ]]; then
-			mv -v "$file" ~/TRASH/
+			mv -v "$file" $HOME/TRASH/
 		else
 			rm -v "$file"
 		fi

files/scripts/llm_swap_stopper.sh

@@ -0,0 +1,89 @@
+#!/bin/sh -e
+# 2026-10-10 Hyperling
+# Stop a system from going into swap due to LLMs.
+
+### Tuning ###
+
+typeset -i sleep=10 full_pct=98 high_pct=90
+
+### Functions ###
+
+restart_service() {
+	if [ -z $1 ]; then
+		echo "ERROR: Service name must be passed to restart_service()."
+		return 1
+	fi
+	sv restart $1 || echo "$1 failed to restart, ignoring."
+}
+
+# While we could loop over `ollama ps` and stop them, this ensures that the UIs
+#   do not sit around waiting for responses from the dead LLMs. It bring them up
+#   in a fresh state so that work can continue from a more clean slate.
+restart_llms() {
+	restart_service ollama
+	#restart_service zeroclaw
+	#restart_service open-webui
+	#restart_service qwen-code
+}
+
+### Main ###
+
+typeset -i {total,used}_{ram,swap}=0 \
+	used_{ram,swap}_pct=0 \
+	last_{ram,swap}_pct=100 \
+	count=0
+
+while [[ true ]]; do
+
+	count=$(expr $count + 1 )
+	echo "$(date +'%Y-%m-%d @ %H:%M:%S') - Loop $count"
+
+	# RAM #
+
+	total_ram=$(free | awk '/^Mem:/ {print $2}')
+	used_ram=$(free | awk '/^Mem:/ {print $3}')
+	used_ram_pct=$( \
+		awk -v used="$used_ram" -v total="$total_ram" \
+		'BEGIN {printf "%d",(used/total)*100}' \
+	)
+
+	echo "Current RAM usage is $used_ram_pct%, was $last_ram_pct% last loop."
+
+	# Swap #
+
+	total_swap=$(free | awk '/^Swap:/ {print $2}')
+	used_swap=$(free | awk '/^Swap:/ {print $3}')
+	used_swap_pct=$( \
+		awk -v used="$used_swap" -v total="$total_swap" \
+		'BEGIN {printf "%d",(used/total)*100}' \
+	)
+
+	echo "Current swap usage is $used_swap_pct%, was $last_swap_pct% last loop."
+
+	# If RAM is full and swap is growing then restart LLM services.
+	if [ $used_ram_pct -gt $full_pct ] &&
+		[ $used_swap_pct -gt $last_swap_pct ]
+	then
+		echo "WARNING: RAM full and swap is growing. Restarting LLMs."
+		restart_llms
+		continue
+	fi
+
+	# If both are high then restart LLM services.
+	if [ $used_ram_pct -ge $high_pct ] &&
+		[ $used_swap_pct -ge $high_pct ]
+	then
+		echo "WARNING: RAM and swap both high. Restarting LLMs."
+		restart_llms
+		continue
+	fi
+
+	# Finish #
+
+	echo -e "Check finished, sleeping for ${sleep}...\n"
+
+	last_ram_pct=$used_ram_pct
+	last_swap_pct=$used_swap_pct
+
+	sleep $sleep
+done

files/scripts/nixos.sh

@@ -7,7 +7,7 @@
 DIR="$(dirname -- "${BASH_SOURCE[0]}")"
 PROG="$(basename -- "${BASH_SOURCE[0]}")"
 
-nixos_working_dir=~/nixos-config-deleteme
+nixos_working_dir=$HOME/nixos-config-deleteme
 nixos_working_exe=activate.sh
 
 ## Functions ##

files/scripts/volume

@@ -0,0 +1,5 @@
+#!/usr/bin/env bash
+
+source /usr/local/bin/volume.function
+
+volume $@

files/settings/i3.config

@@ -0,0 +1,433 @@
+# This file has been auto-generated by i3-config-wizard(1).
+# It will not be overwritten, so edit it as you like.
+#
+# Should you change your keyboard layout some time, delete
+# this file and re-run i3-config-wizard(1).
+#
+
+# i3 config file (v4)
+#
+# Please see https://i3wm.org/docs/userguide.html for a complete reference!
+
+set $FIREFOX "sh -c '(firefox || firefox-esr || firefox-flatpak)'"
+set $TRANSMISSION "sh -c '(transmission || transmission-qt || transmission-gtk || transmission-flatpak)'"
+
+# Use the `xev` command to see the name and code of a keyboard key.
+
+set $mod Mod4
+set $alt Mod1
+set $ctrl Control
+set $shift Shift
+
+# Font for window titles. Will also be used by the bar unless a different font
+# is used in the bar {} block below.
+font pango:monospace 8
+
+# This font is widely installed, provides lots of unicode glyphs, right-to-left
+# text rendering and scalability on retina/hidpi displays (thanks to pango).
+#font pango:DejaVu Sans Mono 8
+
+# Start XDG autostart .desktop files using dex. See also
+# https://wiki.archlinux.org/index.php/XDG_Autostart
+exec --no-startup-id dex --autostart --environment i3
+
+# The combination of xss-lock, nm-applet and pactl is a popular choice, so
+# they are included here as an example. Modify as you see fit.
+
+# xss-lock grabs a logind suspend inhibit lock and will use i3lock to lock the
+# screen before suspend. Use loginctl lock-session to lock your screen.
+exec --no-startup-id xss-lock --transfer-sleep-lock -- i3lock --nofork
+
+# NetworkManager is the most popular way to manage wireless networks on Linux,
+# and nm-applet is a desktop environment-independent system tray GUI for it.
+exec --no-startup-id nm-applet
+
+# Use pactl to adjust volume in PulseAudio.
+set $refresh_i3status killall -SIGUSR1 i3status
+#bindsym XF86AudioRaiseVolume exec --no-startup-id pactl set-sink-volume @DEFAULT_SINK@ +10% && $refresh_i3status
+#bindsym XF86AudioLowerVolume exec --no-startup-id pactl set-sink-volume @DEFAULT_SINK@ -10% && $refresh_i3status
+#bindsym XF86AudioMute exec --no-startup-id pactl set-sink-mute @DEFAULT_SINK@ toggle && $refresh_i3status
+#bindsym XF86AudioMicMute exec --no-startup-id pactl set-source-mute @DEFAULT_SOURCE@ toggle && $refresh_i3status
+
+# Use Mouse+$mod to drag floating windows to their wanted position
+floating_modifier $mod
+
+# move tiling windows via drag & drop by left-clicking into the title bar,
+# or left-clicking anywhere into the window while holding the floating modifier.
+tiling_drag modifier titlebar
+
+# start a terminal
+bindsym $mod+Return exec i3-sensible-terminal
+#bindsym $mod+Return exec st
+
+# kill focused window
+#bindsym $mod+Shift+q kill
+bindsym $mod+q kill
+
+# start dmenu (a program launcher)
+bindsym $mod+d exec --no-startup-id dmenu_run
+bindsym $mod+b exec --no-startup-id dmenu_run
+bindsym $mod+space exec --no-startup-id dmenu_run
+# A more modern dmenu replacement is rofi:
+# bindcode $mod+40 exec "rofi -modi drun,run -show drun"
+# There also is i3-dmenu-desktop which only displays applications shipping a
+# .desktop file. It is a wrapper around dmenu, so you need that installed.
+# bindcode $mod+40 exec --no-startup-id i3-dmenu-desktop
+
+# change focus
+#bindsym $mod+j focus left
+#bindsym $mod+k focus down
+#bindsym $mod+l focus up
+#bindsym $mod+semicolon focus right
+
+# alternatively, you can use the cursor keys:
+bindsym $mod+Left focus left
+bindsym $mod+Down focus down
+bindsym $mod+Up focus up
+bindsym $mod+Right focus right
+
+# move focused window
+#bindsym $mod+Shift+j move left
+#bindsym $mod+Shift+k move down
+#bindsym $mod+Shift+l move up
+#bindsym $mod+Shift+semicolon move right
+
+# alternatively, you can use the cursor keys:
+bindsym $mod+Shift+Left move left
+bindsym $mod+Shift+Down move down
+bindsym $mod+Shift+Up move up
+bindsym $mod+Shift+Right move right
+
+# split in horizontal orientation
+bindsym $mod+h split h
+
+# split in vertical orientation
+bindsym $mod+v split v
+
+# enter fullscreen mode for the focused container
+bindsym $mod+f fullscreen toggle
+
+# change container layout (stacked, tabbed, toggle split)
+bindsym $mod+s layout stacking
+bindsym $mod+w layout tabbed
+bindsym $mod+e layout toggle split
+
+# toggle tiling / floating
+bindsym $mod+Shift+space floating toggle
+
+# change focus between tiling / floating windows
+#bindsym $mod+space focus mode_toggle
+
+# focus the parent container
+bindsym $mod+a focus parent
+
+# focus the child container
+#bindsym $mod+d focus child
+
+
+## Extra Program Shortcuts ##
+
+# Theming.
+bindsym $mod+t exec lxappearance
+
+# Manage files.
+bindsym $mod+m exec thunar
+
+# Internet.
+bindsym $mod+i exec $FIREFOX
+
+# Code.
+bindsym $mod+c exec codium-flatpak
+
+
+## Brightness ##
+# light requires sudo privileges unless video group and udev are configured.
+
+set $b_time 3000
+set $b_micro 5
+set $b_small 10
+set $b_large 20
+
+# Use the bracket keys to change the brightness.
+bindsym $ctrl+bracketleft        exec --no-startup-id "light -U $b_micro && notify-send -t $b_time 'Brightness -  ' $(light -G)"
+bindsym $ctrl+bracketright       exec --no-startup-id "light -A $b_micro && notify-send -t $b_time 'Brightness +  ' $(light -G)"
+bindsym $mod+bracketleft         exec --no-startup-id "light -U $b_small && notify-send -t $b_time 'Brightness -- ' $(light -G)"
+bindsym $mod+bracketright        exec --no-startup-id "light -A $b_small && notify-send -t $b_time 'Brightness ++ ' $(light -G)"
+bindsym $shift+$mod+bracketleft  exec --no-startup-id "light -U $b_large && notify-send -t $b_time 'Brightness ---' $(light -G)"
+bindsym $shift+$mod+bracketright exec --no-startup-id "light -A $b_large && notify-send -t $b_time 'Brightness +++' $(light -G)"
+
+# Also get the actual brightness keys to work!!
+bindsym $ctrl+XF86MonBrightnessUp    exec --no-startup-id "light -A $b_micro && notify-send -t $b_time 'Brightness +  ' $(light -G)"
+bindsym $ctrl+XF86MonBrightnessDown  exec --no-startup-id "light -U $b_micro && notify-send -t $b_time 'Brightness -  ' $(light -G)"
+bindsym XF86MonBrightnessUp          exec --no-startup-id "light -A $b_small && notify-send -t $b_time 'Brightness ++ ' $(light -G)"
+bindsym XF86MonBrightnessDown        exec --no-startup-id "light -U $b_small && notify-send -t $b_time 'Brightness -- ' $(light -G)"
+bindsym $shift+XF86MonBrightnessUp   exec --no-startup-id "light -A $b_large && notify-send -t $b_time 'Brightness +++' $(light -G)"
+bindsym $shift+XF86MonBrightnessDown exec --no-startup-id "light -U $b_large && notify-send -t $b_time 'Brightness ---' $(light -G)"
+
+
+## Keyboard Brightness ##
+
+# Use same timing and step size settings as above.
+
+# Macbooks tend to use 'sysfs/leds/smc::kbd_backlight'
+# NovaCustom laptop is 'sysfs/leds/system76_acpi::kbd_backlight'
+# Some other laptops may be 'sysfs/class/leds/...', use ìght -L`to find out.
+bindsym $ctrl+XF86KbdBrightnessUp    exec "light -s sysfs/leds/smc::kbd_backlight -A $b_micro && notify-send -t $b_time 'Keyboard Brightness +  ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $ctrl+XF86KbdBrightnessDown  exec "light -s sysfs/leds/smc::kbd_backlight -U $b_micro && notify-send -t $b_time 'Keyboard Brightness -  ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym XF86KbdBrightnessUp          exec "light -s sysfs/leds/smc::kbd_backlight -A $b_small && notify-send -t $b_time 'Keyboard Brightness ++ ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym XF86KbdBrightnessDown        exec "light -s sysfs/leds/smc::kbd_backlight -U $b_small && notify-send -t $b_time 'Keyboard Brightness -- ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $shift+XF86KbdBrightnessUp   exec "light -s sysfs/leds/smc::kbd_backlight -A $b_large && notify-send -t $b_time 'Keyboard Brightness +++' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $shift+XF86KbdBrightnessDown exec "light -s sysfs/leds/smc::kbd_backlight -U $b_large && notify-send -t $b_time 'Keyboard Brightness ---' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+
+bindsym $ctrl+apostrophe       exec "light -s sysfs/leds/smc::kbd_backlight -A $b_micro && notify-send -t $b_time 'Keyboard Brightness +  ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $ctrl+semicolon        exec "light -s sysfs/leds/smc::kbd_backlight -U $b_micro && notify-send -t $b_time 'Keyboard Brightness -  ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $mod+apostrophe        exec "light -s sysfs/leds/smc::kbd_backlight -A $b_small && notify-send -t $b_time 'Keyboard Brightness ++ ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $mod+semicolon         exec "light -s sysfs/leds/smc::kbd_backlight -U $b_small && notify-send -t $b_time 'Keyboard Brightness -- ' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $shift+$mod+apostrophe exec "light -s sysfs/leds/smc::kbd_backlight -A $b_large && notify-send -t $b_time 'Keyboard Brightness +++' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+bindsym $shift+$mod+semicolon  exec "light -s sysfs/leds/smc::kbd_backlight -U $b_large && notify-send -t $b_time 'Keyboard Brightness ---' $(light -s sysfs/leds/smc::kbd_backlight -G)"
+
+
+## Volume ##
+# The volume function is from https://git.hyperling.com/me/env-ansible
+
+set $v_time 1500
+set $v_micro 5
+set $v_small 10
+set $v_large 25
+
+# Use the comma and period keys to change volume.
+bindsym $ctrl+comma        exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume -$v_micro && notify-send -t $v_time "Volume -  " $(volume)'
+bindsym $ctrl+period       exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume +$v_micro && notify-send -t $v_time "Volume +  " $(volume)'
+bindsym $mod+comma         exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume -$v_small && notify-send -t $v_time "Volume -- " $(volume)'
+bindsym $mod+period        exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume +$v_small && notify-send -t $v_time "Volume ++ " $(volume)'
+bindsym $shift+$mod+comma  exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume -$v_large && notify-send -t $v_time "Volume ---" $(volume)'
+bindsym $shift+$mod+period exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume +$v_large && notify-send -t $v_time "Volume +++" $(volume)'
+
+# Actual volume keys.
+bindsym XF86AudioMute               exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume mute       && notify-send -t $v_time "Volume Muted" $(volume)'
+bindsym $ctrl+XF86AudioRaiseVolume  exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume +$v_micro  && notify-send -t $v_time "Volume +    " $(volume)'
+bindsym $ctrl+XF86AudioLowerVolume  exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume -$v_micro  && notify-send -t $v_time "Volume -    " $(volume)'
+bindsym XF86AudioRaiseVolume        exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume +$v_small  && notify-send -t $v_time "Volume ++   " $(volume)'
+bindsym XF86AudioLowerVolume        exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume -$v_small  && notify-send -t $v_time "Volume --   " $(volume)'
+bindsym $shift+XF86AudioRaiseVolume exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume +$v_large  && notify-send -t $v_time "Volume +++  " $(volume)'
+bindsym $shift+XF86AudioLowerVolume exec --no-startup-id bash -c 'source /usr/local/bin/volume.function && volume -$v_large  && notify-send -t $v_time "Volume ---  " $(volume)'
+
+bindsym $mod+slash exec pavucontrol
+
+
+## Workspaces ##
+
+# Define names for default workspaces for which we configure key bindings later on.
+# We use variables to avoid repeating the names in multiple places.
+# Command Line
+set $ws1 "1 - CMD"
+# Web Surfing
+set $ws2 "2 - WEB"
+# Programming
+set $ws3 "3 - PRG"
+# Android (Flutter, Qt, Kivy, etc)
+set $ws4 "4 - AND"
+# Chats
+set $ws5 "5 - CHT"
+# Other
+set $ws6 "6 - OTH"
+# Torrents
+set $ws7 "7 - TOR"
+# Music
+set $ws8 "8 - MUS"
+# Videos
+set $ws9 "9 - VID"
+# VPNs
+set $ws0 "10 - VPN"
+
+# switch to workspace
+bindsym $mod+1 workspace number $ws1
+bindsym $mod+2 workspace number $ws2
+bindsym $mod+3 workspace number $ws3
+bindsym $mod+4 workspace number $ws4
+bindsym $mod+5 workspace number $ws5
+bindsym $mod+6 workspace number $ws6
+bindsym $mod+7 workspace number $ws7
+bindsym $mod+8 workspace number $ws8
+bindsym $mod+9 workspace number $ws9
+bindsym $mod+0 workspace number $ws0
+
+# move focused container to workspace
+bindsym $mod+Shift+1 move container to workspace number $ws1
+bindsym $mod+Shift+2 move container to workspace number $ws2
+bindsym $mod+Shift+3 move container to workspace number $ws3
+bindsym $mod+Shift+4 move container to workspace number $ws4
+bindsym $mod+Shift+5 move container to workspace number $ws5
+bindsym $mod+Shift+6 move container to workspace number $ws6
+bindsym $mod+Shift+7 move container to workspace number $ws7
+bindsym $mod+Shift+8 move container to workspace number $ws8
+bindsym $mod+Shift+9 move container to workspace number $ws9
+bindsym $mod+Shift+0 move container to workspace number $ws0
+
+## Keep certain programs in certain tabs. ##
+# Use the `xprop` command to find the class of a program.
+# (?i) makes the regex case insensitive.
+
+assign [class="Navigator"] $ws2
+assign [class="(?i).*navigator.*"] $ws2
+assign [class="(?i).*firefox.*"] $ws2
+assign [class="(?i).*librewolf.*"] $ws2
+assign [class="(?i).*brave.*"] $ws2
+
+assign [class="(?i).*codium.*"] $ws3
+assign [class="(?i).*code.*"] $ws3
+
+assign [class="(?i).*flutter.*"] $ws4
+assign [class="(?i).*jetbrains.*"] $ws4
+
+assign [class="(?i).*signal.*"] $ws5
+assign [class="(?i).*telegram.*"] $ws5
+assign [class="(?i).*session.*"] $ws5
+assign [class="(?i).*dino.*"] $ws5
+
+assign [class="(?i).*pavucontrol.*"] $ws6
+assign [class="(?i).*blueman.*"] $ws6
+assign [class="(?i).*boxes.*"] $ws6
+assign [class="(?i).*waydroid.*"] $ws6
+
+assign [class="(?i).*transmission.*"] $ws7
+
+assign [class="(?i).*rhythmbox.*"] $ws8
+assign [class="(?i).*strawberry.*"] $ws8
+
+assign [class="(?i).*vlc.*"] $ws9
+assign [class="(?i).*mpv.*"] $ws9
+
+assign [class="(?i).*vpn.*"] $ws0
+assign [class="(?i).*mullvad.*"] $ws0
+
+
+## Workspace Specific Workflows ##
+bindsym $ctrl+$shift+1 workspace $ws1; exec "i3-sensible-terminal & gnome-system-monitor"
+bindsym $ctrl+$shift+2 workspace $ws2; exec $FIREFOX
+bindsym $ctrl+$shift+3 workspace $ws3; exec "(codium || vscodium || codium-flatpak || vscodium-flatpak)"
+bindsym $ctrl+$shift+4 workspace $ws4; exec "android-studio || android-studio-flatpak"
+bindsym $ctrl+$shift+5 workspace $ws5; exec "(signal || signal-flatpak) & (dino || dino-flatpak)"
+# & (forkgram || forkgram-flatpak || telegram || telegram-flatpak)"
+bindsym  $alt+$shift+5 workspace $ws5; exec "(forkgram || forkgram-flatpak || telegram || telegram-flatpak) & (session || session-flatpak)"
+bindsym $ctrl+$shift+6 workspace $ws6; exec "pavucontrol & blueman-manager"
+bindsym $ctrl+$shift+7 workspace $ws7; exec $TRANSMISSION
+bindsym $ctrl+$shift+8 workspace $ws8; exec strawberry
+bindsym $ctrl+$shift+9 workspace $ws9; exec thunar
+bindsym $ctrl+$shift+0 workspace $ws0; exec mullvad-vpn
+
+
+## Reloads, Restarts, Exit ##
+
+# reload the configuration file
+bindsym $mod+Shift+c reload
+
+# restart i3 inplace (preserves your layout/session, can be used to upgrade i3)
+bindsym $mod+Shift+r restart
+
+# exit i3 (logs you out of your X session)
+bindsym $mod+Shift+e exec "i3-nagbar -t warning -m 'You pressed the exit shortcut. Do you really want to exit i3? This will end your X session.' -B 'Yes, exit i3' 'i3-msg exit'"
+bindsym $mod+Shift+q exec "i3-msg exit"
+
+# lock
+bindsym $ctrl+$alt+l exec "i3lock -c 000000 -e -f && sleep 1 && xset dpms force off"
+bindsym $ctrl+$mod+l exec "i3lock -c 000000 -e -f && sleep 1 && xset dpms force off"
+bindsym $shift+$mod+l exec "i3lock -c 000000 -e -f && sleep 1 && xset dpms force off"
+
+# shutdown entire system.
+#bindsym $ctrl+$shift+q exec dbus-send --system --print-reply --dest="org.freedesktop.ConsoleKit" /org/freedesktop/ConsoleKit/Manager org.freedesktop.ConsoleKit.Manager.Stop
+bindsym   $ctrl+$alt+$mod+q exec sudo shutdown -h now
+bindsym  $shift+$alt+$mod+q exec sudo shutdown -h now
+bindsym $shift+$ctrl+$mod+q exec sudo shutdown -h now
+
+# restart entire system.
+bindsym   $ctrl+$alt+$mod+r exec sudo shutdown -r now
+bindsym  $shift+$alt+$mod+r exec sudo shutdown -r now
+bindsym $shift+$ctrl+$mod+r exec sudo shutdown -r now
+
+# restart LLM programs
+set $RESTART_LLMS "sudo sv restart ollama; sudo sv restart zeroclaw; sudo sv restart open-webui"
+bindsym   $ctrl+$alt+delete exec $RESTART_LLMS
+bindsym  $shift+$alt+delete exec $RESTART_LLMS
+bindsym $shift+$ctrl+delete exec $RESTART_LLMS
+
+
+## Resizing (Disabled) ##
+
+# resize window (you can also use the mouse for that)
+#mode "resize" {
+#        # These bindings trigger as soon as you enter the resize mode
+#
+#        # Pressing left will shrink the window’s width.
+#        # Pressing right will grow the window’s width.
+#        # Pressing up will shrink the window’s height.
+#        # Pressing down will grow the window’s height.
+#        bindsym j resize shrink width 10 px or 10 ppt
+#        bindsym k resize grow height 10 px or 10 ppt
+#        bindsym l resize shrink height 10 px or 10 ppt
+#        bindsym semicolon resize grow width 10 px or 10 ppt
+#
+#        # same bindings, but for the arrow keys
+#        bindsym Left resize shrink width 10 px or 10 ppt
+#        bindsym Down resize grow height 10 px or 10 ppt
+#        bindsym Up resize shrink height 10 px or 10 ppt
+#        bindsym Right resize grow width 10 px or 10 ppt
+#
+#        # back to normal: Enter or Escape or $mod+r
+#        bindsym Return mode "default"
+#        bindsym Escape mode "default"
+#        bindsym $mod+r mode "default"
+#}
+#
+#bindsym $mod+r mode "resize"
+
+
+## Taskbar ##
+
+# Start i3bar to display a workspace bar (plus the system information i3status
+# finds out, if available)
+bar {
+        status_command i3status
+}
+
+
+## Startup Applications ##
+
+# Workspace 1
+exec --no-startup-id i3-sensible-terminal
+exec --no-startup-id gnome-system-monitor
+
+# Respective Workspaces
+exec --no-startup-id mullvad-vpn
+exec --no-startup-id $TRANSMISSION
+
+# Set defaults for laptop backlights.
+exec --no-startup-id "light -S 20; light -N 5; light -O"
+
+# Set the correct keymap.
+exec_always --no-startup-id setxkbmap -layout us -variant altgr-intl
+
+# Notifications (allows fyi and notify-send to work)
+exec_always --no-startup-id "killall dunst; dunst"
+
+# Audio
+exec        --no-startup-id "sleep 00; dbus-launch --exit-with-session i3"
+exec_always --no-startup-id "sleep 00; killall pipewire wireplumber pipewire-pulse"
+exec_always --no-startup-id "sleep 01; pipewire >~/Reports/pipewire.log 2>&1 &"
+exec_always --no-startup-id "sleep 02; wireplumber >~/Reports/wireplumber.log 2>&1 &"
+exec_always --no-startup-id "sleep 03; pipewire-pulse >~/Reports/pipewire-pulse.log 2>&1 &"
+exec        --no-startup-id "sleep 04; bash -c 'source /usr/local/bin/volume.function && volume 25'"
+
+# Wallpaper
+exec_always --no-startup-id feh --recursive --randomize --bg-fill ~/Pictures/Wallpapers
+
+# Compositor
+exec_always --no-startup-id "killall picom; picom -f --backend xrender"
+
+# Battery
+exec_always --no-startup-id bash -c 'pkill -ef "bash `which battery_nag.sh`" >~/Reports/battery_nag.log 2>&1; battery_nag.sh >>~/Reports/battery_nag.log 2>&1'
+
+# Redshift
+#exec_always --no-startup-id "killall redshift-gtk; redshift-gtk"
+#exec_always --no-startup-id "killall redshift;     redshift -l 35.19540:-111.65720 -t 6500K:1100K"
+exec_always --no-startup-id "killall redshift; killall redshift-gtk; sleep 1; redshift -x; redshift-gtk -l 35.19540:-111.65720 -t 6500K:1100K"

files/settings/vscode.json

@@ -4,25 +4,44 @@
 	"save_loc2": "~/.var/app/com.vscodium.codium/config/VSCodium/{{ user_desc }}/settings.json",
 	"END_COMMENTS": "",
 
+	"update.showReleaseNotes": false,
 	"workbench.startupEditor": "none",
-	"editor.rulers": [
-		 80, 120, 200
-	],
-	"files.trimTrailingWhitespace": true,
-	"editor.tabSize": 3,
-	"editor.insertSpaces": false,
-	"files.insertFinalNewline": true,
-	"[html]": {
-		"files.insertFinalNewline": false
-	},
-	"files.trimFinalNewlines": true,
 	"git.confirmSync": false,
 
-    "[dart]": {
+	"editor.rulers": [
-        "editor.formatOnSave": true,
+		 80, 120, 200,
-        "editor.formatOnType": true,
+	],
-        "editor.selectionHighlight": false,
+
-        "editor.tabCompletion": "onlySnippets",
+	"files.trimFinalNewlines": true,
-        "editor.wordBasedSuggestions": "off"
+	"files.trimTrailingWhitespace": true,
-    }
+
+	"editor.tabSize": 3,
+	"editor.insertSpaces": false,
+
+	"editor.autoClosingBrackets": "never",
+	"editor.autoClosingQuotes": "never",
+
+	"files.insertFinalNewline": true,
+	"[html]": {
+		"files.insertFinalNewline": false,
+	},
+
+	"[dart]": {
+		"editor.formatOnSave": true,
+		"editor.formatOnType": true,
+		"editor.selectionHighlight": false,
+		"editor.tabCompletion": "onlySnippets",
+		"editor.wordBasedSuggestions": "off",
+	},
+
+	"json.schemas": [
+		{
+			"fileMatch": ["*.json", "*.jsonc"],
+			"schema": {
+					"allowTrailingCommas": true,
+			}
+		}
+	],
+
+	"redhat.telemetry.enabled": false,
 }

files/sudo/sudoers_sudo

@@ -1,2 +1,8 @@
 
 %sudo ALL=(ALL) ALL
+
+# Allow anyone in the sudo group to shutdown or reboot without a password.
+%sudo ALL=(ALL) NOPASSWD: /sbin/shutdown, /usr/sbin/shutdown, /sbin/reboot, /usr/sbin/reboot
+
+# Allow the sudo group to manage runit services.
+%sudo ALL=(ALL) NOPASSWD: /sbin/sv, /usr/sbin/sv, /sbin/sv, /usr/sbin/sv

files/templates/video.md

@@ -0,0 +1,22 @@
+# title
+
+NAME
+
+# desc
+
+CONTENT
+
+---
+
+Recorded and edited YYYY-MM-DD.
+Recorded YYYY-MM-DD, edited YYYY-MM-DD.
+
+[blog.hyperling.com/TBD](https://blog.hyperling.com/TBD)
+
+# tags
+
+-
+,
+,
+,
+,

local.yml

@@ -2,252 +2,236 @@
 # Harmonize systems rather than doing everything manually. :)
 
 # Setup of any device connected to this repo.
-- name: Main | Default Setup
+- name: Local | Main
   hosts: localhost
   connection: local
   become: true
 
   tasks:
 
-    ####### Gather #######
+    ####### Header #######
-    # Load facts for all systems.
-
-    - include_tasks: facts/general/gather.yml
-    - include_tasks: tasks/general/acct_mgmt/provision_config.yml
-
-    - include_tasks: facts/general/system.yml
-    - include_tasks: facts/general/package.yml
-    - include_tasks: facts/general/service.yml
-    - include_tasks: facts/general/user.yml
-
-
-    ####### NixOS #######
-    # Install the .nix files and do a little data setup.
-
-    - name: Main | NixOS Setup
-      block:
-
-      - include_tasks: tasks/general/software/nixos.yml
-
-
-      # TBD if we are going to use this many, then just have IF statements
-      #  and use blocks within the General area for NixOS vs not-NixOS.
-      - include_tasks: tasks/general/software/swap.yml
-
-      - include_tasks: tasks/general/acct_mgmt/groups.yml
-      - include_tasks: tasks/general/acct_mgmt/users.yml
-      - include_tasks: tasks/general/acct_mgmt/sudo.yml
-      - include_tasks: tasks/general/acct_mgmt/doas.yml
-
-      - include_tasks: tasks/general/scripts/root.yml
-      - include_tasks: tasks/general/scripts/user.yml
-      - include_tasks: tasks/general/scripts/install.yml
-
-      - include_tasks: tasks/general/cron/ansible.yml
-
-      # psutil does not work in NixOS. Cannot figure out how to fix it. Maybe
-      #   time to start looking into home-manager but still not wanting to
-      #   maintain two different GNOME setups. HMMMM!
-      - include_tasks: tasks/workstation/shared/settings/gnome.yml
-        when: workstation == true
-
-      # Try including these. Really need to get NixOS working with the rest!
-      #- include_tasks: tasks/general/software/telegraf.yml # "Could not find a module for unknown.""
-      - include_tasks: tasks/general/tests/services.yml
-      - include_tasks: tasks/general/tests/lynis.yml
-      - include_tasks: tasks/general/tests/nmap.yml
-
-      - name: NixOS | Complete
-        meta: end_play
-
-      when: ansible_distribution == "NixOS"
-
-
-    ####### General #######
-    # Basic setup for all enabled systems.
-
-    - name: Main | General Setup
-      block:
-
-      - include_tasks: tasks/general/software/swap.yml
-      - include_tasks: tasks/general/software/packages.yml
-      - include_tasks: tasks/general/software/services.yml
-      - include_tasks: tasks/general/software/sendmail.yml
-        when: ansible_system == "FreeBSD"
-
-      # Gather again in case missing programs have now been installed.
-      - include_tasks: facts/general/gather.yml
-
-      - include_tasks: tasks/general/acct_mgmt/groups.yml
-      - include_tasks: tasks/general/acct_mgmt/users.yml
-      - include_tasks: tasks/general/acct_mgmt/sudo.yml
-      - include_tasks: tasks/general/acct_mgmt/doas.yml
-
-      - include_tasks: tasks/general/scripts/root.yml
-      - include_tasks: tasks/general/scripts/user.yml
-      - include_tasks: tasks/general/scripts/install.yml
-
-      - include_tasks: tasks/general/cron/ansible.yml
-
-      # TODO Need to refactor. Maybe tasks/general/cron/freebsd.yml
-      - include_tasks: tasks/workstation/freebsd/cron/ansible.yml
-        when: ansible_system == "FreeBSD"
-
-      - include_tasks: tasks/general/software/metasploit.yml
-        when: pentesting == true
-
-      when: provision == true
 
+    - name: Main | Header
+      ansible.builtin.include_tasks: tasks/header.yml
 
     ####### Workstations #######
-    # Additional setup for systems with GUI.
 
-    - name: Main | Workstation Setup
+    # Additional setup for systems with GUI.
+    - name: Main | Workstation
       block:
 
-      - include_tasks: facts/workstation/package.yml
+        - ansible.builtin.include_tasks: facts/workstation/package.yml
 
-      # Set Up Desktop Environments #
+        ## Desktop Environments ##
-      - include_tasks: tasks/workstation/freebsd/software/gpu.yml
+        - ansible.builtin.include_tasks: tasks/workstation/freebsd/software/gpu.yml
-        when: ansible_system == "FreeBSD" and bsd_gpu == true
+          when: ansible_system == "FreeBSD"
+            and bsd_gpu
+            and internet
 
-      - include_tasks: tasks/workstation/freebsd/software/gnome.yml
+        # Window Managers without true Desktop Environments #
-        when: ansible_system == "FreeBSD"
+        - ansible.builtin.include_tasks: tasks/workstation/shared/software/dwm.yml
+          when: internet
 
-      - include_tasks: tasks/workstation/linux/software/gnome.yml
+        - ansible.builtin.include_tasks: tasks/workstation/shared/software/i3.yml
-        when: ansible_system == "Linux"
+          when: internet
 
-      - include_tasks: tasks/workstation/shared/software/dwm.yml
+        # Polished Desktop Environments #
+        - ansible.builtin.include_tasks: tasks/workstation/freebsd/software/gnome.yml
+          when: ansible_system == "FreeBSD"
+            and internet
 
-      # Software Tasks #
+        - name: Main | Workstation | Fancy Desktop Environments
-      - include_tasks: tasks/workstation/linux/software/packages.yml
+          block:
-        when: ansible_system == "Linux"
 
-      - include_tasks: tasks/workstation/linux/software/lutris.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/gnome.yml
-        when: ansible_system == "Linux"
+              when: ansible_service_mgr == "systemd"
 
-      - include_tasks: tasks/workstation/linux/software/vscodium.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/cinnamon.yml
-        when: ansible_system == "Linux"
 
-      - include_tasks: tasks/workstation/linux/software/brave.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/lxqt.yml
-        when: ansible_pkg_mgr in ("apt", "dnf", "zypper") and not mobile
 
-      - include_tasks: tasks/workstation/linux/software/vpn.yml
+          when: ansible_system == "Linux"
-        when: ansible_system == "Linux"
+            and internet
+            # TBD: Implement this: and extra_desktops
 
-      - include_tasks: tasks/workstation/freebsd/software/packages.yml
+        ## Software Tasks ##
-        when: ansible_system == "FreeBSD"
 
-      - include_tasks: tasks/workstation/mac-os/software/brew.yml
+        - name: Main | Workstation | Linux
-        when: ansible_system == "Darwin"
+          block:
 
-      # Configuration Tasks #
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/packages.yml
-      - include_tasks: tasks/workstation/shared/settings/gnome.yml
-        when: not mobile
 
-      - include_tasks: tasks/workstation/linux/cron/ansible.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/tlp.yml
-        when: ansible_system == "Linux" and not mobile
 
-      - include_tasks: tasks/workstation/shared/settings/nfs.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/lutris.yml
 
-      - include_tasks: tasks/workstation/shared/settings/rdp.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/vscodium.yml
-        when: rdp == true
 
-      - include_tasks: tasks/workstation/shared/settings/vnc.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/vpn.yml
-        when: vnc == true
 
-      - include_tasks: tasks/workstation/shared/settings/services.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/nodejs.yml
 
-      # Final Tasks (SLOW) #
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/hugo.yml
-      - include_tasks: tasks/workstation/linux/software/flutter.yml
-        when: ansible_system == "Linux"
 
-      - include_tasks: tasks/workstation/linux/software/android.yml
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/brave.yml
-        when: ansible_system == "Linux"
+              when: ansible_pkg_mgr in ("apt", "dnf", "zypper") and not mobile
 
-      - include_tasks: tasks/workstation/linux/software/flatpaks.yml
+          when: ansible_system == "Linux"
-        when: ansible_system == "Linux" and flatpak_distro
+            and internet
 
-      when: workstation == true
+        - ansible.builtin.include_tasks: tasks/workstation/freebsd/software/packages.yml
+          when: ansible_system == "FreeBSD"
+            and internet
 
+        - ansible.builtin.include_tasks: tasks/workstation/mac-os/software/brew.yml
+          when: ansible_system == "Darwin"
+            and internet
+
+        ## Configuration Tasks ##
+
+        - name: Main | Workstation | Configuration
+          block:
+
+            - ansible.builtin.include_tasks: tasks/workstation/shared/settings/gnome.yml
+
+            - ansible.builtin.include_tasks: tasks/workstation/shared/settings/cinnamon.yml
+
+            - ansible.builtin.include_tasks: tasks/workstation/shared/settings/xdg_autostart.yml
+
+            - ansible.builtin.include_tasks: tasks/workstation/linux/cron/ansible.yml
+              when: ansible_system == "Linux"
+
+          when: not mobile
+
+        - ansible.builtin.include_tasks: tasks/workstation/shared/settings/nfs.yml
+
+        - ansible.builtin.include_tasks: tasks/workstation/shared/settings/rdp.yml
+          when: rdp
+
+        - ansible.builtin.include_tasks: tasks/workstation/shared/settings/vnc.yml
+          when: vnc
+
+        - ansible.builtin.include_tasks: tasks/workstation/shared/settings/services.yml
+
+        - ansible.builtin.include_tasks: tasks/workstation/shared/settings/templates.yml
+
+        ## Final Tasks (SLOW) ##
+
+        - name: Main | Workstation | Linux [Slow]
+          block:
+
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/flatpaks.yml
+              when: flatpak_distro
+
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/java.yml
+
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/flutter.yml
+
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/android.yml
+
+            - ansible.builtin.include_tasks: tasks/workstation/linux/software/llm.yml
+
+          when: ansible_system == "Linux"
+            and internet
+
+      when: workstation
 
 # No longer mining, this is now considered deprecated.
 #    ####### Miners #######
 #
 #    # Additional setup for miners.
-#    - name: Main | Miner Setup
+#    - name: Main | Miner
 #      block:
 #
 #      ##### Setup #####
-#      - include_tasks: tasks/miner/debug.yml
+#      - ansible.builtin.include_tasks: tasks/miner/debug.yml
 #
-#      - include_tasks: tasks/miner/acct_mgmt/users.yml
+#      - ansible.builtin.include_tasks: tasks/miner/acct_mgmt/users.yml
 #
-#      - include_tasks: facts/miner/system.yml
+#      - ansible.builtin.include_tasks: facts/miner/system.yml
-#      - include_tasks: facts/miner/config.yml
+#      - ansible.builtin.include_tasks: facts/miner/config.yml
-#      - include_tasks: facts/miner/pool.yml
+#      - ansible.builtin.include_tasks: facts/miner/pool.yml
 #
 #      ##### Installations #####
 #      ### CPU SECTION ###
 #      # Monero #
-#      - include_tasks: tasks/miner/software/xmr-stak-cpu.yml
+#      - ansible.builtin.include_tasks: tasks/miner/software/xmr-stak-cpu.yml
 #        when: xmr_stak_cpu is defined
 #
 #      ### GPU Section ###
 #      ## Drivers ##
-#      - include_tasks: tasks/miner/drivers/amdgpu.yml
+#      - ansible.builtin.include_tasks: tasks/miner/drivers/amdgpu.yml
-#        when: ansible_distribution == "Ubuntu" and amdgpu == true
+#        when: ansible_distribution == "Ubuntu" and amdgpu
 #
 #      # Ethereum #
-#      - include_tasks: tasks/miner/software/ethminer.yml
+#      - ansible.builtin.include_tasks: tasks/miner/software/ethminer.yml
-#        when: ethminer == true
+#        when: ethminer
 #
-#      - include_tasks: tasks/miner/software/nanominer.yml
+#      - ansible.builtin.include_tasks: tasks/miner/software/nanominer.yml
-#        when: nanominer == true
+#        when: nanominer
 #
 #      ##### Scheduling #####
-#      - include_tasks: tasks/miner/cron/ansible.yml
+#      - ansible.builtin.include_tasks: tasks/miner/cron/ansible.yml
-#      - include_tasks: tasks/miner/cron/mfn.yml
+#      - ansible.builtin.include_tasks: tasks/miner/cron/mfn.yml
 #
-#      when: miner == true
+#      when: miner
-
 
     ####### Servers #######
-    # Easy to deploy server configurations.
 
-    - name: Main | Server Setup
+    # Easy to deploy server configurations.
+    - name: Main | Server
       block:
 
-      - include_tasks: tasks/server/software/services.yml
+        - name: Main | Server | Services
+          ansible.builtin.include_tasks: tasks/server/software/services.yml
 
-      - include_tasks: tasks/server/software/certbot.yml
+        - block:
-        when: certbot == true
-      - include_tasks: tasks/server/cron/certbot.yml
-        when: certbot == true
 
-      - include_tasks: tasks/server/software/onlyoffice.yml
+            - name: Main | Server | Certbot
-        when: onlyoffice == true and ansible_pkg_mgr == "apt"
+              ansible.builtin.include_tasks: tasks/server/software/certbot.yml
 
-      - include_tasks: tasks/server/software/influxdb1.yml
+            - name: Main | Server | Certbot Cron
-        when: influxdb1 == true and ansible_pkg_mgr == "apt"
+              ansible.builtin.include_tasks: tasks/server/cron/certbot.yml
+              when: certbot
 
-      - include_tasks: tasks/server/software/influxdb2.yml
+        - block:
-        when: influxdb2 == true and ansible_pkg_mgr == "apt"
 
-      - include_tasks: tasks/server/software/grafana.yml
+            - name: Main | Server | OnlyOffice
-        when: grafana == true and ansible_pkg_mgr == "apt"
+              ansible.builtin.include_tasks: tasks/server/software/onlyoffice.yml
+              when: onlyoffice
 
-      - include_tasks: tasks/server/software/hugo.yml
+            - ansible.builtin.include_tasks: tasks/server/software/influxdb1.yml
-        when: hugo == true
+              when: influxdb1
 
-      when: server == true
+            - ansible.builtin.include_tasks: tasks/server/software/influxdb2.yml
+              when: influxdb2
 
+            - ansible.builtin.include_tasks: tasks/server/software/grafana.yml
+              when: grafana
+
+          when: ansible_pkg_mgr == "apt"
+
+        - ansible.builtin.include_tasks: tasks/server/software/hugo.yml
+          when: hugo
+
+      when: server
 
     ####### Reporting #######
+
     # Provide information for analysis.
+    - name: Main | Reporting
+      block:
 
-    - include_tasks: tasks/general/software/telegraf.yml
+        - ansible.builtin.include_tasks: tasks/general/software/telegraf.yml
+          when: internet
 
-    - include_tasks: tasks/general/tests/services.yml
+        - ansible.builtin.include_tasks: tasks/general/tests/services.yml
-    - include_tasks: tasks/general/tests/lynis.yml
+
-    - include_tasks: tasks/general/tests/nmap.yml
+        - ansible.builtin.include_tasks: tasks/general/tests/lynis.yml
+
+        - ansible.builtin.include_tasks: tasks/general/tests/nmap.yml
+
+    ####### Footer #######
+
+    - name: Main | Footer
+      ansible.builtin.include_tasks: tasks/footer.yml

setup.sh

@@ -5,14 +5,26 @@
 
 DIR="$(dirname -- "${BASH_SOURCE[0]}")"
 PROG="$(basename -- "${BASH_SOURCE[0]}")"
-LOCAL=$DIR/local.yml
+LOCAL="$DIR/local.yml"
+TEST="$DIR/test.yml"
 URL="https://git.hyperling.com/me/env-ansible"
-BRANCH="main"
+if [[ -z $BRANCH ]]; then
+	export BRANCH="main"
+fi
+
+LINUX_HOSTS_DIR=/etc/ansible
+LINUX_HOSTS_FILE="$LINUX_HOSTS_DIR/hosts"
+FREEBSD_HOSTS_DIR="/usr/local/etc/ansible"
+FREEBSD_HOSTS_FILE="$FREEBSD_HOSTS_DIR/hosts"
+
+HOSTS_DIR="$LINUX_HOSTS_DIR"
+HOSTS_FILE="$LINUX_HOSTS_FILE"
 
 config_dir="/usr/local/etc/hyperling-scm"
 general_config="$config_dir/general.ini"
 workstation_config="$config_dir/workstation.ini"
 server_config="$config_dir/server.ini"
+branch=""
 
 ## Functions ##
 
@@ -20,7 +32,7 @@ server_config="$config_dir/server.ini"
 function usage {
 	cat <<- EOF
 
-	  $PROG [-l] [-b branch_name] [-g] [-w] [-s] [-f] [-h]
+	  $PROG [-l | -t] [-b branch_name] [-g] [-w] [-s] [-f] [-h]
 	    Program to initialize synchronization with Hyperling's Ansible configuration.
 	      $URL
 
@@ -28,11 +40,12 @@ function usage {
 	      -l : Run the local playbook associated with this $PROG.
 	             This is helpful for development or just saving bandwidth.
 	             It also provides prettier colors than the plaintext from ansible-pull. ;)
+	      -t : Run the test playbook which has a much smaller set of includes.
 	      -b branch_name : Download and run a specific branch. Default is $BRANCH.
 	      -g : Enable the General config with test contents.
 	      -w : Enable the Workstation config with test contents.
 	      -s : Enable the Server config with test contents.
-			-f : Display this system's facts.
+	      -f : Display this system's facts.
 	      -h : Display this help text.
 
 	EOF
@@ -41,14 +54,15 @@ function usage {
 
 ## Parameter Parsing ##
 
-while getopts ":lb:gwsfh" arg; do
+while getopts ":ltb:gwsfh" arg; do
 	case $arg in
 		l) local="Y" && echo "Running $LOCAL as the playbook." ;;
+		t) test="Y" && echo "Running $TEST as the playbook." ;;
 		b) branch="$OPTARG" && echo "Using branch $branch instead of $BRANCH." ;;
-		g) create_general="Y" && echo "Requested '$general_config'." ;;
+		g) create_general="Y" && echo "Generating test '$general_config'." ;;
-		w) create_workstation="Y" && echo "Requested '$workstation_config'." ;;
+		w) create_workstation="Y" && echo "Generating test '$workstation_config'." ;;
-		s) create_server="Y" && echo "Requested '$server_config'." ;;
+		s) create_server="Y" && echo "Generating test '$server_config'." ;;
-		f) show_facts="Y" ;;
+		f) show_facts="Y" && echo "Displaying ansible facts then exiting." ;;
 		h) usage ;;
 		*) echo "ERROR: Parameter $OPTARG was not recognized." && usage 1 ;;
 	esac
@@ -60,9 +74,14 @@ if [[ ! -z $1 && $1 != "-"* ]]; then
 	usage 1
 fi
 
-if [[ -z "$local" && "$branch" == "" ]]; then
+if [[ "$branch" == "" ]]; then
-	echo "Using default branch $BRANCH."
 	branch="$BRANCH"
+	if [[ -z "$local" ]]; then
+		echo "Running against default branch '$branch'."
+	else
+		echo "Set branch to '$branch'."
+	fi
+	echo " "
 fi
 
 if [[ -n "$create_general" && -f "$general_config" ]]; then
@@ -92,52 +111,52 @@ if [[ `which ansible > /dev/null; echo $?` != 0 ]]; then
 	if [[ $os == *Debian* || $os == *Ubuntu* || $os == *"Pop!_OS"* || $os == *Mint* || $os == *Parrot* ]]; then
 		sudo apt update
 		sudo apt install -y ansible git <<< N
-		sudo mkdir -p /etc/ansible
-		sudo sh -c 'echo "localhost ansible_connection=local" > /etc/ansible/hosts'
 	elif [[ $os == *FreeBSD* ]]; then
-		sudo pkg install -y py38-ansible git
+		sudo pkg install -y -g py*-ansible git
-		sudo mkdir -p /usr/local/etc/ansible
+		HOSTS_DIR="$FREEBSD_HOSTS_DIR"
-		sudo sh -c 'echo "localhost ansible_connection=local" > /usr/local/etc/ansible/hosts'
+		HOSTS_FILE="$FREEBSD_HOSTS_FILE"
 	elif [[ $os == *Arch* || $os == *Manjaro* || $os == *Artix* ]]; then
 		sudo pacman -Sy --noconfirm ansible git
-		sudo mkdir -p /etc/ansible
-		sudo sh -c 'echo "localhost ansible_connection=local" > /etc/ansible/hosts'
 	elif [[ $os == *Darwin* ]]; then
 		bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
-		echo "TESTING - EXIT!"
-		exit 0
 		brew install ansible git
+		HOSTS_DIR=""
+		HOSTS_FILE=""
 	elif [[ $os == *Fedora* ]]; then
 		sudo dnf install -y ansible git python3-libselinux
-		sudo mkdir -p /etc/ansible
-		sudo sh -c 'echo "localhost ansible_connection=local" > /etc/ansible/hosts'
 	elif [[ $os == *openSUSE* ]]; then
 		sudo zypper install -y ansible git
-		sudo mkdir -p /etc/ansible
-		sudo sh -c 'echo "localhost ansible_connection=local" > /etc/ansible/hosts'
 	elif [[ $os == *NixOS* ]]; then
 		$DIR/files/scripts/nixos.sh -b $branch
-		sudo mkdir -p /etc/ansible
-		sudo sh -c 'echo "localhost ansible_connection=local" > /etc/ansible/hosts'
 	else
-		echo -e "ERROR: OS not detected."
+		echo -e "ERROR: OS not recognized."
 		echo -e "$os"
 		exit 1
 	fi
 fi
-echo "Installed!"
+echo -e "- Installed!\n"
+
+if [[ -n $HOSTS_DIR && -n $HOSTS_FILE ]]; then
+	echo "Ensuring hosts file exists..."
+	if [[ ! -e $HOSTS_FILE ]]; then
+		sudo mkdir -pv $HOSTS_DIR
+		sudo sh -c "echo 'localhost ansible_connection=local' > $HOSTS_FILE"
+	fi
+	echo "$HOSTS_FILE: '`cat $HOSTS_FILE`'"
+	echo -e "- Hosts file created successfully!\n"
+fi
 
 if [[ "$show_facts" == "Y" ]]; then
 	echo "Showing Ansible Facts"
 	ansible localhost -m setup --connection=local
+	exit 0
 fi
 
 #echo "Adding Ansible Collections..."
 #ansible-galaxy collection install community.general
-#echo "Added!"
+#echo "- Added!"
 
 # Create basic layouts if configs do not exist and are requested.
-
 if [[ -n "$create_general"
 	|| -n "$create_workstation"
 	|| -n "$create_server" ]]
@@ -145,6 +164,7 @@ then
 	sudo mkdir -pv "$config_dir"
 	MARK1="BEGIN"
 	MARK2="END"
+	echo "Creating placeholder config files..."
 fi
 if [[ -n "$create_general" && ! -f "$general_config" ]]; then
 	function print_general_contents {
@@ -191,20 +211,52 @@ if [[ -n "$create_server" && ! -f "$server_config" ]]; then
 	print_server_contents | sudo tee "$server_config"
 	ls -lh "$server_config"
 fi
+if [[ -n "$create_general"
+	|| -n "$create_workstation"
+	|| -n "$create_server" ]]
+then
+	echo " "
+fi
+
+echo "Verifying this is the only run..."
+ps -ef | grep ansible-playbook | grep -v grep
+ansible_exists="$?"
+lock_file=/tmp/ansible-playbook.lock
+if [[ "$ansible_exists" == 0 ]]; then
+	echo "- Playbook is already being executed. Exiting."
+   exit 0
+elif [[ -e "$lock_file" ]]; then
+	echo "- Removing lock file."
+	sudo mv -v "$lock_file" "${lock_file}.disabled"
+else
+	echo "- No processes or lockfile found."
+fi
+echo " "
 
 echo "Provisioning Ansible..."
-if [[ $local == "Y" ]]; then
+status=""
+if [[ "$test" == "Y" ]]; then
+	sudo ansible-playbook $TEST
+	status=$?
+elif [[ "$local" == "Y" ]]; then
 	sudo ansible-playbook $LOCAL
+	status=$?
 else
 	sudo ansible-pull -U $URL.git --checkout $branch
+	status=$?
+fi
+if [[ "$status" == 0 ]]; then
+	echo -e "- Provisioned!\n"
+else
+	echo -e "\nERROR: Playbook failed with status $status, exiting."
+	exit $status
 fi
-echo "Provisioned!"
 
 echo "Mounting all drives..."
 mount -a
-echo "Mounted!"
+echo -e "- Mounted!\n"
 
-echo "Don't forget to set any new users' passwords!"
+echo -e "Don't forget to set any new users' passwords!\n"
 
 ## Finish ##
 

tasks/footer.yml

@@ -0,0 +1,14 @@
+---
+# All the tasks which need run to successfully end the playbook.
+
+####### Footer #######
+- name: Footer
+  block:
+
+    - name: Footer | Notify
+      ansible.builtin.include_tasks: tasks/general/acct_mgmt/notify.yml
+      vars:
+        notify_message: "Provisioning Finished"
+
+    - name: Footer | Lock | Remove
+      ansible.builtin.include_tasks: tasks/general/tests/lock_remove.yml

tasks/general/acct_mgmt/doas.yml

@@ -2,7 +2,7 @@
 # Install and configure doas.
 
 - name: General | Software | DoAs | Facts
-  set_fact:
+  ansible.builtin.set_fact:
     doas_config: |
       permit persist :wheel as root
       permit persist :admin as root
@@ -11,44 +11,47 @@
     doas_conf_file_bsd: /usr/local/etc/doas.conf
 
 - name: General | Software | DoAs | Install
-  package:
+  ansible.builtin.package:
     name:
       - doas
   register: doas_install
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Software | DoAs | Configure [Linux]
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ doas_conf_file_linux }}"
     block: |
       {{ doas_config }}
     marker: '# {mark} MANAGED BY ANSIBLE | doas Linux'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "644"
   when: not doas_install.failed and ansible_system in ("Linux")
 
 - name: General | Software | DoAs | Configure [BSD]
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ doas_conf_file_linux }}"
     block: |
       {{ doas_config }}
     marker: '# {mark} MANAGED BY ANSIBLE | doas BSD'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "644"
   when: not doas_install.failed and ansible_system in ("FreeBSD")
 
 - name: General | Software | DoAs | Configure [Other]
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ item }}"
     block: |
       {{ doas_config }}
     marker: '# {mark} MANAGED BY ANSIBLE | doas Other'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "644"
   loop:
     - "{{ doas_conf_file_linux }}"
     - "{{ doas_conf_file_bsd }}"
-  when: not doas_install.failed and ansible_system not in ("Linux", "FreeBSD") 
+  when: not doas_install.failed and ansible_system not in ("Linux", "FreeBSD")

tasks/general/acct_mgmt/groups.yml

@@ -1,10 +1,10 @@
 ---
 # Groups that do not come to all distros by default.
 
-- name: General | Account Management | System Groups 
+- name: General | Account Management | System Groups
   group:
     name: "{{ item }}"
-    system: yes
+    system: true
     state: present
   loop:
     - sudo

tasks/general/acct_mgmt/notify.yml

@@ -0,0 +1,15 @@
+---
+# Create and manage permissions for notify log.
+
+- name: General | Notify | Update File
+  ansible.builtin.shell: "{{ item }}"
+  loop:
+    - touch "{{ notify_log_file }}"
+    - chmod 777 "{{ notify_log_file }}"
+  register: shell_check
+  changed_when: shell_check.rc == 0
+
+- name: General | Notify | Add Message
+  ansible.builtin.shell : echo "'Ansible' '{{ notify_message }} @ `date`'" >> "{{ notify_log_file }}"
+  register: shell_check
+  changed_when: shell_check.rc == 0

tasks/general/acct_mgmt/provision_config.yml

@@ -2,19 +2,19 @@
 # Set up directory and files for specifying software needs rather than using hosts file.
 
 - name: General | Account Management | Provisioning Configuration | Variables 1
-  set_fact:
+  ansible.builtin.set_fact:
     prov_dir: "/usr/local/etc/hyperling-scm"
     provision_variables: []
 
 - name: General | Account Management | Provisioning Configuration | Variables 2
-  set_fact:
+  ansible.builtin.set_fact:
     gen_file: "{{ prov_dir }}/general.ini"
     wrk_file: "{{ prov_dir }}/workstation.ini"
     mnr_file: "{{ prov_dir }}/miner.ini"
     srv_file: "{{ prov_dir }}/server.ini"
 
 - name: General | Account Management | Provisioning Configuration | Create Directory
-  file:
+  ansible.builtin.file:
     path: "{{ prov_dir }}"
     state: directory
     mode: '0755'
@@ -23,11 +23,11 @@
 ## General ##
 
 - name: General | Account Management | Provisioning Configuration | General | Create
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ gen_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config'
     block: |
-      ; Please note that all portions require lowercase keys and values.
+      [global]
-      ;
       ;;;;;;;;;;;;;;;;;;;;          Basic Options           ;;;;;;;;;;;;;;;;;;;;
       ;
       ;     enable : Provide true for the provision to occur.
@@ -49,6 +49,17 @@
       ;              nmap is already provided for reporting
       ;                Default: false
       ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | General | Create | Git Polling
+  ansible.builtin.blockinfile:
+    path: "{{ gen_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config | Git Polling'
+    block: |
       ;;;;;;;;;;;;;;;;;;;;           Git Polling            ;;;;;;;;;;;;;;;;;;;;
       ;
       ;  For syncing this machine to a Git repository of this Ansible project
@@ -74,6 +85,17 @@
       ;                  Example: Ansible, ansible-setup, my-env
       ;                  Default: env-ansible
       ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | General | Create | Swap File
+  ansible.builtin.blockinfile:
+    path: "{{ gen_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config | Swap File'
+    block: |
       ;;;;;;;;;;;;;;;;;;;;            Swap File             ;;;;;;;;;;;;;;;;;;;;
       ;
       ; swap_block : Set to the block size if dd should create a swapfile.
@@ -90,6 +112,17 @@
       ;                Example: /usr/local/swap
       ;                Default: /swapfile
       ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | General | Create | Sync Frequency
+  ansible.builtin.blockinfile:
+    path: "{{ gen_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config | Sync Frequency'
+    block: |
       ;;;;;;;;;;;;;;;;;;;;          Sync Frequency          ;;;;;;;;;;;;;;;;;;;;
       ;
       ; no_telem : Set to true to avoid setting up telemetry services.
@@ -101,51 +134,150 @@
       ;            Slows down the rate of services such as telegraf and cron.
       ;              Default: false
       ;
-      ;;;;;;;;;;;;;;;;;;;;         Server Shortcut          ;;;;;;;;;;;;;;;;;;;;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | General | Create | Server Shortcuts
+  ansible.builtin.blockinfile:
+    path: "{{ gen_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config | Server Shortcuts'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;         Server Shortcuts         ;;;;;;;;;;;;;;;;;;;;
       ;
       ; For typing `prod` and getting straight to a server, like in env-termux.
       ;
-      ; prod_host : Branch to use on this machine.
+      ; Imagine the command:
+      ;   `ssh prod_user@prod_host:prod_port`
+      ;
+      ; prod_host : Hostname for the production server.
       ;               Example: myserver.com, mywebhost.net
       ;               Default: hyperling.com
       ;
-      ; prod_port : Provide the git host that the machine should poll.
+      ; prod_port : Port for the production server.
       ;               Example: 22, 222, 2222
       ;               Default: 22
       ;
-      ; prod_user : Port of the server host to use for SSH requests.
+      ; prod_user : Username for accessing the production server.
       ;               Example: jim, bob, jeff, anne
       ;               Default: user
       ;
-      [global]
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | General | Create | Sync Shortcuts
+  ansible.builtin.blockinfile:
+    path: "{{ gen_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config | Sync Shortcuts'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;;         Sync Shortcuts         ;;;;;;;;;;;;;;;;;;;;;
+      ;
+      ; Imagine the command:
+      ;   `rsync -auPhz --delete -e 'ssh -p prod_data_port' ./mydata-MASTER/ \
+      ;       prod_data_user@prod_data_host:/prod_data_dir/mydata-clone
+      ;   `
+      ;
+      ; prod_data_host : Branch to use on this machine.
+      ;                    Example: sftp.myserver.com, sftp.mywebhost.net
+      ;                    Default: hyperling.com
+      ;
+      ; prod_data_port : Provide the git host that the machine should poll.
+      ;                    Example: 22, 222, 2222
+      ;                    Default: 22
+      ;
+      ; prod_data_user : Port of the server host to use for SSH requests.
+      ;                    Example: jim, bob, jeff, anne
+      ;                    Default: user
+      ;
+      ; prod_data_dir : Port of the server host to use for SSH requests.
+      ;                   Example: /srv/sftp/
+      ;                   Default: /srv/sftp/
+      ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | General | Create | Tunnel
+  ansible.builtin.blockinfile:
+    path: "{{ gen_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Generic Config | Tunnel'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; Tunnel ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+      ;
+      ; Create a runit script which maintains an SSH tunnel to a remote server.
+      ;
+      ;        ssh -v -H -R tunnel_remote_port:localhost:tunnel_local_port \
+      ;             [-p tunnel_ssh_port] tunnel_remote_host
+      ;
+      ; tunnel_local_port (default=8080)
+      ;   Local HTTP port which need forwarded to a remote server.
+      ;     Example: http://localhost:8080
+      ;
+      ; tunnel_remote_host (default=false)
+      ;   Remote server including username (such as user@example.com) which will
+      ;   serve the port. Server should preferably have a reverse proxy in order
+      ;   to encrypt the traffic, otherwise the local server should use HTTPS.
+      ;
+      ; tunnel_remote_port (default=8080)
+      ;   Port which should host the service on the remote server. This is what
+      ;   will get typed into web browsers or used by the reverse proxy. Should
+      ;   be > 1024. Also, /etc/ssh/sshd_config will need AllowTcpForwarding and
+      ;   GatewayPorts set to yes, then sshd will need to be reloaded.
+      ;     Example: http://example.com:8080
+      ;
+      ; tunnel_ssh_port (default=22)
+      ;   Port which the remote server exposes ssh.
+      ;     Example: ssh -p 2222 user@example.com
+      ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
 
 - name: General | Account Management | Provisioning Configuration | General | Load
-  set_fact:
+  ansible.builtin.set_fact:
     provision:  "{{ lookup('ini', 'enable     file={{gen_file}} default=false') | bool }}"
-    user:       "{{ lookup('ini', 'user       file={{gen_file}} default=ling') }}"
+    user:       "{{ lookup('ini', 'user       file={{gen_file}} default=user' )        }}"
-    user_desc:  "{{ lookup('ini', 'user_desc  file={{gen_file}} default=Hyperling') }}"
+    user_desc:  "{{ lookup('ini', 'user_desc  file={{gen_file}} default=User' )        }}"
-    branch:     "{{ lookup('ini', 'branch     file={{gen_file}} default=main') }}"
+    branch:     "{{ lookup('ini', 'branch     file={{gen_file}} default=main' )        }}"
     pentesting: "{{ lookup('ini', 'pentesting file={{gen_file}} default=false') | bool }}"
     no_telem:   "{{ lookup('ini', 'no_telem   file={{gen_file}} default=false') | bool }}"
     battery:    "{{ lookup('ini', 'battery    file={{gen_file}} default=false') | bool }}"
-    swap_block: "{{ lookup('ini', 'swap_block file={{gen_file}} default=false') }}"
+    swap_block: "{{ lookup('ini', 'swap_block file={{gen_file}} default=false')        }}"
-    swap_count: "{{ lookup('ini', 'swap_count file={{gen_file}} default=1') }}"
+    swap_count: "{{ lookup('ini', 'swap_count file={{gen_file}} default=1'    ) | int  }}"
-    swap_file:  "{{ lookup('ini', 'swap_file  file={{gen_file}} default=/swapfile') }}"
+    swap_file:  "{{ lookup('ini', 'swap_file  file={{gen_file}} default=/swapfile')    }}"
-    sshd_port:  "{{ lookup('ini', 'sshd_port  file={{gen_file}} default=22') }}"
+    sshd_port:  "{{ lookup('ini', 'sshd_port  file={{gen_file}} default=22'   ) | int  }}"
     git_host:     "{{ lookup('ini', 'git_host     file={{gen_file}} default=git.hyperling.com') }}"
     git_user:     "{{ lookup('ini', 'git_user     file={{gen_file}} default=me') }}"
     git_project:  "{{ lookup('ini', 'git_project  file={{gen_file}} default=env-ansible') }}"
-    git_ssh_port: "{{ lookup('ini', 'git_ssh_port file={{gen_file}} default=22') }}"
+    git_ssh_port: "{{ lookup('ini', 'git_ssh_port file={{gen_file}} default=22') | int }}"
     prod_host: "{{ lookup('ini', 'prod_host   file={{gen_file}} default=hyperling.com') }}"
-    prod_port: "{{ lookup('ini', 'prod_port   file={{gen_file}} default=22') }}"
+    prod_port: "{{ lookup('ini', 'prod_port   file={{gen_file}} default=22') | int }}"
     prod_user: "{{ lookup('ini', 'prod_user   file={{gen_file}} default=user') }}"
+    prod_data_host: "{{ lookup('ini', 'prod_data_host   file={{gen_file}} default=hyperling.com') }}"
+    prod_data_port: "{{ lookup('ini', 'prod_data_port   file={{gen_file}} default=22') | int }}"
+    prod_data_user: "{{ lookup('ini', 'prod_data_user   file={{gen_file}} default=user') }}"
+    prod_data_dir:  "{{ lookup('ini', 'prod_data_dir    file={{gen_file}} default=/srv/sftp') }}"
+    tunnel_local_port:  "{{ lookup('ini', 'tunnel_local_port  file={{gen_file}} default=8080' ) | int }}"
+    tunnel_remote_host: "{{ lookup('ini', 'tunnel_remote_host file={{gen_file}} default=false')       }}"
+    tunnel_remote_port: "{{ lookup('ini', 'tunnel_remote_port file={{gen_file}} default=8080' ) | int }}"
+    tunnel_ssh_port:    "{{ lookup('ini', 'tunnel_ssh_port    file={{gen_file}} default=22'   ) | int }}"
+
+- name: General | Account Management | Provisioning Configuration | General | Boolean Check | swap_block
+  ansible.builtin.set_fact:
+    swap_block: "{{ swap_block | bool }}"
+  when: swap_block in ("false")
 
 - name: General | Account Management | Provisioning Configuration | General | List
-  set_fact:
+  ansible.builtin.set_fact:
     provision_variables: "{{ provision_variables | combine(item) }}"
   loop:
     - { 'provision': "{{ provision }}" }
@@ -166,15 +298,25 @@
     - { 'prod_host': "{{ prod_host }}" }
     - { 'prod_port': "{{ prod_port }}" }
     - { 'prod_user': "{{ prod_user }}" }
+    - { 'prod_data_host': "{{ prod_data_host }}" }
+    - { 'prod_data_port': "{{ prod_data_port }}" }
+    - { 'prod_data_user': "{{ prod_data_user }}" }
+    - { 'prod_data_dir': "{{ prod_data_dir }}" }
+    - { 'tunnel_local_port': "{{ tunnel_local_port }}" }
+    - { 'tunnel_remote_host': "{{ tunnel_remote_host }}" }
+    - { 'tunnel_remote_port': "{{ tunnel_remote_port }}" }
+    - { 'tunnel_ssh_port': "{{ tunnel_ssh_port }}" }
 
 
 ## Workstation ##
 
-- name: General | Account Management | Provisioning Configuration | Workstation | Create
+- name: General | Account Management | Provisioning Configuration | Workstation | Create | Main Options
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ wrk_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Workstation Config'
     block: |
-      ;;;;;;; Available options - all require lowercase values ;;;;;;
+      [global]
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;     Main Options     ;;;;;;;;;;;;;;;;;;;;;;;;;;
       ;
       ;  enable : Set to true for system to be considered a workstation.
       ;
@@ -189,6 +331,115 @@
       ;
       ;  gaming : Set to true for installation of gaming software (Steam, Lutris)
       ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Create | LLMs
+  ansible.builtin.blockinfile:
+    path: "{{ wrk_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Workstation Config | LLMs'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;     LLMs     ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+      ;
+      ; ollama (default=true)
+      ;   Install and enable the ollama LLM manager.
+      ;     API: http://127.0.0.1:11434
+      ;
+      ; manage_models (default=true)
+      ;   Automatically choose and pull the models to use based on system
+      ;   resources. Otherwise leaves images alone but still handles config.
+      ;
+      ; hf_token (default=false)
+      ;   Token from Hugging Face which allows faster download speeds than anon.
+      ;   May help with ollama and also supposed to help with open-webui. Token
+      ;   needs set to something like hf_kjBCCLABEEABUVAKbjadbvkaksvBAVKBkjsDVK.
+      ;
+      ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Create | LLMs | GUIs
+  ansible.builtin.blockinfile:
+    path: "{{ wrk_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Workstation Config | LLMs | GUIs'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;; LLMs: GUIs ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+      ;
+      ; zeroclaw (default=true)
+      ;   Install and enable the Zeroclaw web daemon, a minimalistic interface
+      ;   for many models and providers with negligible resource usage. Also
+      ;   installs the CLI tool zerocode as an alternative to the web GUI.
+      ;     URL: http://127.0.0.1:42617
+      ;
+      ; open_webui (default=false)
+      ;   Install and enable open-webui as a Docker container. Very polished web
+      ;   frontend for ollama and also handles other web LLMs through API calls.
+      ;   Container is over 1GB in size and consumes substantial resources!
+      ;     URL: http://localhost:3000
+      ;
+      ; open_webui_port (default=3000)
+      ;   Port on which to run the open-webui Docker instance.
+      ;
+      ; open_webui_key (default=PleaseEnsureTheKeyIsAtLeast32To64Characters)
+      ;   Secret key, allows persistence between runs. If not a public-facing
+      ;   system, then not critical. Use `openssl rand -hex 32` to create one.
+      ;
+      ; codium_config (default=true)
+      ;   Manage the config files for and Codium plugins. Cline and Continue are
+      ;   the recommended Codium extensions but need installed through the GUI.
+      ;   Currently handles:
+      ;     ~/.continue/config.yml
+      ;
+      ; qwen_code (default=true)
+      ;   Install and enable qwen-code as a daemon.
+      ;     URL: http://127.0.0.1:4170
+      ;
+      ; qwen_code_key (default='')
+      ;   API key for accessing the web GUI. Optional, not used if left blank.
+      ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Create | LLMs | GUIs
+  ansible.builtin.blockinfile:
+    path: "{{ wrk_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Workstation Config | LLMs | GUIs'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;;;;;; LLMs: MCPs / Sandboxes ;;;;;;;;;;;;;;;;;;;;;;;;;
+      ;
+      ; open_terminal (default=false)
+      ;   Docker container to be used with GUIs like open-webui so that agents
+      ;   have somewhere safe to execute commands. Also allows file read/writes.
+      ;     URL: http://127.0.0.1:8000
+      ;
+      ; open_terminal_port (default=8000)
+      ;   Port on which to run the open-terminal Docker instance.
+      ;
+      ; open_terminal_key (default=open-terminal-key)
+      ;   API key, needed in order to access the server. Required.
+      ;
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+    state: present
+    create: true
+    backup: true
+    mode: "0644"
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Create | Other Options
+  ansible.builtin.blockinfile:
+    path: "{{ wrk_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Workstation Config | Other Options'
+    block: |
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;     Other Options     ;;;;;;;;;;;;;;;;;;;;;;;;;;
+      ;
       ;     rdp : Set to true for installation of RDP protocol
       ;             CURRENTLY FREEBSD-ONLY
       ;
@@ -204,27 +455,60 @@
       ; redmode : Set to true/false for automatially using Night Light in GNOME.
       ;             Default: true
       ;
-      [global]
+      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-    marker: '; {mark} MANAGED BY ANSIBLE | Workstation Config'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0644"
 
 - name: General | Account Management | Provisioning Configuration | Workstation | Load
-  set_fact:
+  ansible.builtin.set_fact:
+    # Main
     workstation: "{{ lookup('ini', 'enable  file={{wrk_file}} default=false') | bool }}"
     coding:      "{{ lookup('ini', 'coding  file={{wrk_file}} default=false') | bool }}"
     sdks:        "{{ lookup('ini', 'sdks    file={{wrk_file}} default=false') | bool }}"
     editing:     "{{ lookup('ini', 'editing file={{wrk_file}} default=false') }}"
     gaming:      "{{ lookup('ini', 'gaming  file={{wrk_file}} default=false') | bool }}"
-    rdp:         "{{ lookup('ini', 'rdp     file={{wrk_file}} default=false') | bool }}"
+    # Other
-    vnc:         "{{ lookup('ini', 'vnc     file={{wrk_file}} default=false') | bool }}"
+    rdp:     "{{ lookup('ini', 'rdp     file={{wrk_file}} default=false') | bool }}"
-    bsd_gpu:     "{{ lookup('ini', 'bsd_gpu file={{wrk_file}} default=false') | bool }}"
+    vnc:     "{{ lookup('ini', 'vnc     file={{wrk_file}} default=false') | bool }}"
-    mobile:      "{{ lookup('ini', 'mobile  file={{wrk_file}} default=false') | bool }}"
+    bsd_gpu: "{{ lookup('ini', 'bsd_gpu file={{wrk_file}} default=false') | bool }}"
-    redmode:     "{{ lookup('ini', 'redmode file={{wrk_file}} default=true' ) | bool }}"
+    mobile:  "{{ lookup('ini', 'mobile  file={{wrk_file}} default=false') | bool }}"
+    redmode: "{{ lookup('ini', 'redmode file={{wrk_file}} default=true' ) | bool }}"
+    # LLMs
+    ollama_enabled: "{{ lookup('ini', 'ollama        file={{wrk_file}} default=true' ) | bool }}"
+    manage_models:  "{{ lookup('ini', 'manage_models file={{wrk_file}} default=true' ) | bool }}"
+    hf_token:       "{{ lookup('ini', 'hf_token      file={{wrk_file}} default=false')        }}"
+    # LLM GUIs
+    zeroclaw_enabled:   "{{ lookup('ini', 'zeroclaw        file={{wrk_file}} default=true ') | bool }}"
+    open_webui_enabled: "{{ lookup('ini', 'open_webui      file={{wrk_file}} default=false') | bool }}"
+    open_webui_port:    "{{ lookup('ini', 'open_webui_port file={{wrk_file}} default=3000' ) | int  }}"
+    open_webui_key:     "{{ lookup('ini', 'open_webui_key  file={{wrk_file}} default=PleaseEnsureTheKeyIsAtLeast32To64Characters') }}"
+    codium_config:      "{{ lookup('ini', 'codium_config   file={{wrk_file}} default=true' ) | bool }}"
+    qwen_code_enabled:  "{{ lookup('ini', 'qwen_code       file={{wrk_file}} default=true' ) | bool }}"
+    qwen_code_key    :  "{{ lookup('ini', 'qwen_code_key   file={{wrk_file}} default=false')        }}"
+    # LLM MCPs
+    open_terminal_enabled: "{{ lookup('ini', 'open_terminal      file={{wrk_file}} default=false') | bool }}"
+    open_terminal_port:    "{{ lookup('ini', 'open_terminal_port file={{wrk_file}} default=8000' ) | int  }}"
+    open_terminal_key:     "{{ lookup('ini', 'open_terminal_key  file={{wrk_file}} default=false')        }}"
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Boolean Check | editing
+  ansible.builtin.set_fact:
+    editing: "{{ editing | bool }}"
+  when: editing in ("true", "false")
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Boolean Check | qwen_code_key
+  ansible.builtin.set_fact:
+    qwen_code_key: "{{ qwen_code_key | bool }}"
+  when: qwen_code_key in ("false")
+
+- name: General | Account Management | Provisioning Configuration | Workstation | Boolean Check | open_terminal_key
+  ansible.builtin.set_fact:
+    open_terminal_key: "{{ open_terminal_key | bool }}"
+  when: open_terminal_key in ("false")
 
 - name: General | Account Management | Provisioning Configuration | Workstation | List
-  set_fact:
+  ansible.builtin.set_fact:
     provision_variables: "{{ provision_variables | combine(item) }}"
   loop:
     - { 'workstation': "{{ workstation }}" }
@@ -237,14 +521,28 @@
     - { 'bsd_gpu': "{{ bsd_gpu }}" }
     - { 'mobile': "{{ mobile }}" }
     - { 'redmode': "{{ redmode }}" }
+    - { 'ollama_enabled': "{{ ollama_enabled }}" }
+    - { 'manage_models': "{{ manage_models }}" }
+    - { 'hf_token': "{{ hf_token }}" }
+    - { 'zeroclaw_enabled': "{{ zeroclaw_enabled }}" }
+    - { 'open_webui_enabled': "{{ open_webui_enabled }}" }
+    - { 'open_webui_port': "{{ open_webui_port }}" }
+    - { 'open_webui_key': "{{ open_webui_key }}" }
+    - { 'codium_config': "{{ codium_config }}" }
+    - { 'qwen_code_enabled': "{{ qwen_code_enabled }}" }
+    - { 'qwen_code_key': "{{ qwen_code_key }}" }
+    - { 'open_terminal_enabled': "{{ open_terminal_enabled }}" }
+    - { 'open_terminal_port': "{{ open_terminal_port }}" }
+    - { 'open_terminal_key': "{{ open_terminal_key }}" }
 
 # No longer mining, this is now considered deprecated.
 ### Miner ##
 #
 #- name: General | Account Management | Provisioning Configuration | Miner | Create
-#  blockinfile:
+#  ansible.builtin.blockinfile:
 #    path: "{{ mnr_file }}"
 #    block: |
+#      [global]
 #      ;;;;;;; Available options - all require lowercase values ;;;;;;
 #      ;
 #      ;             enable : Set to true for system to be considered a miner.
@@ -280,14 +578,15 @@
 #      ;       xmr_stak_cpu : Set to true for istallation
 #      ;                        UNFINISHED/UNTESTED
 #      ;
-#      [global]
+#      ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 #    marker: '; {mark} MANAGED BY ANSIBLE | Miner Config'
 #    state: present
-#    create: yes
+#    create: true
-#    backup: yes
+#    backup: true
+#    mode: "0644"
 #
 #- name: General | Account Management | Provisioning Configuration | Miner | Load
-#  set_fact:
+#  ansible.builtin.set_fact:
 #    miner:              "{{ lookup('ini', 'enable             file={{mnr_file}} default=false') | bool }}"
 #    amdgpu:             "{{ lookup('ini', 'amdgpu             file={{mnr_file}} default=false') | bool }}"
 #    nanominer:          "{{ lookup('ini', 'nanominer          file={{mnr_file}} default=false') | bool }}"
@@ -302,7 +601,7 @@
 #    xmr_stak_cpu:       "{{ lookup('ini', 'xmr_stak_cpu       file={{mnr_file}} default=false') | bool }}"
 #
 #- name: General | Account Management | Provisioning Configuration | Miner | List
-#  set_fact:
+#  ansible.builtin.set_fact:
 #    provision_variables: "{{ provision_variables | combine(item) }}"
 #  loop:
 #    - { 'miner': "{{ miner }}" }
@@ -322,9 +621,11 @@
 ## Server ##
 
 - name: General | Account Management | Provisioning Configuration | Server | Create
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ srv_file }}"
+    marker: '; {mark} MANAGED BY ANSIBLE | Server Config'
     block: |
+      [global]
       ;;;;;;; Parameters ;;;;;;
       ;
       ;     enable : Set to true for system to be considered a server.
@@ -349,14 +650,13 @@
       ;       hugo : Set to true to install HUGO static website generator.
       ;
       ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
-      [global]
-    marker: '; {mark} MANAGED BY ANSIBLE | Server Config'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0644"
 
 - name: General | Account Management | Provisioning Configuration | Server | Load
-  set_fact:
+  ansible.builtin.set_fact:
     server:     "{{ lookup('ini', 'enable     file={{srv_file}} default=false') | bool }}"
     domain:     "{{ lookup('ini', 'domain     file={{srv_file}} default=hyperling.com') }}"
     onlyoffice: "{{ lookup('ini', 'onlyoffice file={{srv_file}} default=false') | bool }}"
@@ -367,7 +667,7 @@
     hugo:       "{{ lookup('ini', 'hugo       file={{srv_file}} default=false') | bool }}"
 
 - name: General | Account Management | Provisioning Configuration | Server | List
-  set_fact:
+  ansible.builtin.set_fact:
     provision_variables: "{{ provision_variables | combine(item) }}"
   loop:
     - { 'server': "{{ server }}" }
@@ -383,12 +683,17 @@
 ## Exit if not turned on yet ##
 
 - name: General | Account Management | Provisioning Configuration | Exit Check
-  shell: echo "Please configure the config files in {{ prov_dir }} then try again." && exit 1
+  block:
-  when: provision != true
+    - name: General | Account Management | Provisioning Configuration | Exit Check | Message
+      ansible.builtin.debug:
+        msg: "Please configure the config files in {{ prov_dir }} then try again."
+    - name: General | Account Management | Provisioning Configuration | Exit Check | Exit
+      ansible.builtin.meta: end_play
+  when: not provision
 
 
 ## Display values ##
 
 - name: General | Account Management | Provisioning Configuration | Print
-  debug:
+  ansible.builtin.debug:
     var: provision_variables

tasks/general/acct_mgmt/sudo.yml

@@ -2,32 +2,33 @@
 # Ensure the proper users have sudo access.
 
 - name: General | Account Management | Sudo | Copy Ansible
-  copy:
+  ansible.builtin.copy:
     src: sudo/sudoers_ansible
     dest: "{{ sudoers_install_dir }}"
     owner: root
     group: "{{ root_group }}"
-    mode: 0440
+    mode: "0440"
 
 - name: General | Account Management | Sudo | Copy Sudo Group
-  copy:
+  ansible.builtin.copy:
     src: sudo/sudoers_sudo
     dest: "{{ sudoers_install_dir }}"
     owner: root
     group: "{{ root_group }}"
-    mode: 0440
+    mode: "0440"
 
 # Disable these two lines in openSUSE default configuration.
 #Defaults targetpw   # ask for the password of the target user i.e. root
 #ALL   ALL=(ALL) ALL   # WARNING! Only use this together with 'Defaults targetpw'!
 - name: General | Account Management | Sudo | Disable openSUSE Root PW Prompt
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: "{{ sudoers_config }}"
     regexp: '{{ item.key }}'
     line: '{{ item.value }} # MANAGED BY ANSIBLE'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "644"
   loop:
     - { "key": '^[\#]?Defaults targetpw',   "value": '#Defaults targetpw'}
     - { "key": '^[\#]?ALL   ALL\=\(ALL\) ALL', "value": '#ALL   ALL=(ALL) ALL'}

tasks/general/acct_mgmt/users.yml

@@ -4,62 +4,62 @@
 ## Variables ##
 
 - name: General | Account Management | Users | Use BASH (Default)
-  set_fact:
+  ansible.builtin.set_fact:
     user_shell: "{{ bash_exec.stdout }}"
 
 - name: General | Account Management | Users | Allow BASH (Arch)
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: /etc/shells
     regexp: "{{ bash_exec.stdout }}"
     line: "{{ bash_exec.stdout }}"
     insertbefore: "# End of file"
-    backup: yes
+    backup: true
-    create: no
+    create: false
     state: present
-  when: ansible_distribution == "Archlinux"
+  when: ansible_pkg_mgr == "pacman"
 
 #- name: General | Account Management | Users | Use ZSH (Arch+Manjaro)
-#  set_fact:
+#  ansible.builtin.set_fact:
 #    user_shell: "{{ zsh_exec.stdout }}"
-#  when: ansible_distribution == "Archlinux"
+#  when: ansible_pkg_mgr == "pacman"
 #
 #- name: General | Account Management | Users | Allow ZSH (Arch)
-#  lineinfile:
+#  ansible.builtin.lineinfile:
 #    path: /etc/shells
 #    regexp: "{{ zsh_exec.stdout }}"
 #    line: "{{ zsh_exec.stdout }}"
 #    insertbefore: "# End of file"
-#    backup: yes
+#    backup: true
-#    create: no
+#    create: false
 #    state: present
-#  when: ansible_distribution == "Archlinux"
+#  when: ansible_pkg_mgr == "pacman"
 
 
 ## Root ##
 
 - name: General | Account Management | Users | Root
-  user:
+  ansible.builtin.user:
     name: root
     shell: "{{ bash_exec.stdout }}"
-    create_home: yes
+    create_home: true
-    generate_ssh_key: yes
+    generate_ssh_key: true
   register: user_root
 
 
 ## Scheduler ##
 
 - name: General | Account Management | Users | Ansible
-  user:
+  ansible.builtin.user:
     name: ansible
     comment: Ansible
-    system: yes
+    system: true
   register: user_ansible
 
 
 ## Superuser ##
 
 - name: General | Account Management | Users | User
-  user:
+  ansible.builtin.user:
     name: "{{ user }}"
     comment: "{{ user_desc }}"
     groups:
@@ -67,23 +67,26 @@
       - video
       - render
       - wheel
-    append: yes
+    append: true
     shell: "{{ user_shell }}"
-    create_home: yes
+    create_home: true
-    generate_ssh_key: yes
+    generate_ssh_key: true
   register: user_user
 
 - name: General | Account Management | Users | User | Test Logging In
-  shell: "echo SUCCESS"
+  ansible.builtin.shell: "echo SUCCESS"
   args:
     executable: "{{ user_shell }}"
+  become: true
   become_user: "{{ user }}"
+  register: shell_check
+  changed_when: shell_check.rc == 0
 
 
 ## Folders ##
 
 - name: General | Account Management | Users | Root | Create Folders
-  file:
+  ansible.builtin.file:
     path: "{{ item }}"
     state: directory
     mode: '0755'
@@ -94,7 +97,7 @@
   when: user_root.home != ""
 
 - name: General | Account Management | Users | User | Create Folders
-  file:
+  ansible.builtin.file:
     path: "{{ item }}"
     state: directory
     mode: '0755'
@@ -103,31 +106,59 @@
     - "{{ user_user.home }}/TRASH"
     - "{{ user_user.home }}/Downloads"
     - "{{ user_user.home }}/Reports"
+    - "{{ user_user.home }}/Torrentz"
+    - "{{ user_user.home }}/Seedz"
+  become: true
   become_user: "{{ user }}"
   when: user_user.home != ""
 
 - name: General | Account Management | Users | User | Create Folders | Coding
-  file:
+  ansible.builtin.file:
     path: "{{ item }}"
     state: directory
     mode: '0755'
   loop:
     - "{{ user_user.home }}/Code"
+  become: true
   become_user: "{{ user }}"
-  when: user_user.home != "" and coding == true
+  when: user_user.home != "" and coding
 
 - name: General | Account Management | Users | Home Permissions
-  shell: "chmod 700 {{ user_user.home }}/../*"
+  ansible.builtin.shell: "chmod 700 {{ user_user.home }}/../*"
+  register: shell_check
+  changed_when: shell_check.rc == 0
 
 
 ## Files ##
 
+- name: General | Account Management | Users | Files | Profile Variables
+  ansible.builtin.set_fact:
+    export_path_additions: export PATH="$HOME/bin:{{ shared_rc_bin }}:$PATH:{{ global_bin }}"
+    export_path_sbin: export PATH="$PATH:/sbin:/usr/sbin:/usr/local/sbin"
+    #export_terminal: export TERMINAL="alacritty" # colors look weird.
+    export_terminal: export TERMINAL="kitty"
+    export_browser: |
+      function find-firefox {
+        which firefox 2>/dev/null ||
+        which firefox-esr 2>/dev/null ||
+        which firefox-flatpak 2>/dev/null
+      }
+      export BROWSER="`find-firefox`"
+    keyboard_settings: |
+      if [[ -n "$XDG_SESSION_ID" ]]; then
+        setxkbmap -layout us -variant altgr-intl
+      fi
+    export_notify: |
+      export NOTIFY="`which fyi 2>/dev/null || which notify-send 2>/dev/null`"
+      function notify() {
+        $NOTIFY $@
+      }
+
 - name: General | Account Management | Users | Files | RC Variables
-  set_fact:
+  ansible.builtin.set_fact:
     alias_cp: alias cp='cp -v'
     alias_mv: alias mv='mv -v'
     alias_rm: alias rm='echo "Use mv ~/TRASH/ instead!"'
-    export_path_additions: export PATH="~/bin:"{{ global_bin }}":$PATH"
     function_wttr: |
       function weather() {
         # 20210301 - Someone showed me an awesome weather API! Had to implement it!
@@ -145,7 +176,39 @@
         fi
         curl "https://wttr.in/${1//\ /+}"
       }
-    export_PS1: export PS1='[\u@\h \w]\$ '
+    export_PS1: |
+      ## Prompts ##
+
+      # Old Trusty
+      #export PS1='[\u@\h \w]\$ '
+
+      # 20251201 - Add time.
+      #export PS1='[\t \u@\h \w]\$ '
+
+      # 20251201 - Add colors.
+      # This helps to determine the color palette numbers:
+      #  https://robotmoon.com/bash-prompt-generator/
+      # Colors have been moved to env-shared project's .rc_shared file.
+
+      if [[ "$USER" == "root" || $UID == 0 ]]; then
+        CLR_BRACKETS=$BOLD$YELLOW
+        CLR_TIME=$BOLD$ORANGE
+        CLR_USER=$BOLD$SCARLET
+        CLR_DIR=$BOLD$RED
+        CLR_PROMPT=$BOLD$GRAY
+      else
+        CLR_BRACKETS=$RESET
+        CLR_TIME=$BOLD$PURPLE
+        CLR_USER=$BOLD$ORANGE
+        CLR_DIR=$BOLD$GREEN
+        CLR_PROMPT=$RESET
+      fi
+
+      export PS1='\[$CLR_BRACKETS\][\[$CLR_TIME\]\t \[$CLR_USER\]\u@\h \[$CLR_DIR\]\w\[$CLR_BRACKETS\]]\[$CLR_PROMPT\]\$ \[$RESET\]'
+
+      export PS2='\[$CLR_BRACKETS\](\[$CLR_TIME\]>\[$CLR_USER\]^\[$CLR_DIR\].\[$CLR_USER\]^\[$CLR_BRACKETS\])\[$CLR_TIME\]> \[$RESET\]'
+
+      ## End Prompts ##
     alias_remount: |
       alias remount='
         sudo umount /mnt/*
@@ -192,6 +255,12 @@
           {{ update_package_manager }}
         fi
 
+        if [[ "$only_flat" != "Y" && "$only_sys" != "Y" ]]; then
+          {{ update_npm }}
+        else
+          echo -e "\n*** Skipping NPM ***\n\n"
+        fi
+
         if [[ "$shutdown" == "Y" && "{{ battery }}" == "True" ]]; then
           echo -e "\n*** Only System Updates - Skipping Flatpak ***\n\n"
         elif [[ "$only_sys" == "Y" ]]; then
@@ -243,7 +312,7 @@
       alias init-video='
         mkdir -v raw
         mkdir -v exports
-        cp ~/Templates/*video* ./
+        cp $HOME/Templates/*video* ./
       '
       alias init-vid=init-video
       alias init-program='
@@ -259,6 +328,7 @@
       }
       function goodbye {
         update -yg
+        bye
       }
     metasploit_aliases: |
       alias metasploit="msfconsole"
@@ -297,7 +367,7 @@
       alias trashed-cleanup="clean-trashed"
       alias trashed-clean="clean-trashed"
     function_check_trash: |
-      function check-trash() {
+      function check-trash-old() {
         unset OPTIND
         unset clean
         unset network
@@ -392,14 +462,14 @@
         echo "Checking but not cleaning /var/mail..."
         du -ha /var/mail | sort -h
         if [[ $clean == "Y" ]]; then
-          clean-trashed "~/"
+          clean-trashed "$HOME/"
         fi
         return 0
       }
       alias check_trash="check-trash"
-    alias_clean_trash: alias clean-trash='check-trash --clean'
+    alias_trash_check: alias trash-check='check-trash-old'
-    alias_trash_check: alias trash-check='check-trash'
+    alias_clean_trash: alias clean-trash='check-trash-old --clean'
-    alias_trash_clean: alias trash-clean='trash-check --clean'
+    alias_trash_clean: alias trash-clean='clean-trash'
     alias_clean_dir: |
       function clean-dir() {
         sudo du -hs
@@ -453,6 +523,13 @@
           return 0
         fi
 
+        if [[ -f ./prep.sh ]]; then
+          echo "Running prep.sh first..."
+          ./prep.sh
+        fi
+
+        export BUILD_TIMESTAMP="`date`"
+
         docker compose build &&
         docker compose down &&
         docker compose up -d
@@ -475,6 +552,13 @@
           return 0
         fi
 
+        if [[ -f ./prep.sh ]]; then
+          echo "Running prep.sh first..."
+          ./prep.sh
+        fi
+
+        export BUILD_TIMESTAMP="`date`"
+
         docker compose pull &&
         docker compose build &&
         docker compose down &&
@@ -519,6 +603,14 @@
           docker ps
           return;
         fi
+
+        if [[ -f ./prep.sh ]]; then
+          echo "Running prep.sh first..."
+          ./prep.sh
+        fi
+
+        export BUILD_TIMESTAMP="`date`"
+
         echo "*** Upgrading Images ***" &&
           docker compose pull &&
         echo "*** Building Containers ***" &&
@@ -544,6 +636,11 @@
           return 0
         fi
 
+        if [[ -f ./prep.sh ]]; then
+          echo "Running prep.sh first..."
+          ./prep.sh
+        fi
+
         docker compose down &&
         docker compose up -d
 
@@ -559,37 +656,11 @@
       alias docker-start="docker compose up -d && docker compose start"
       alias docker-prep="docker compose pull && docker compose build"
     alias_code_check: |
-      alias code-check='
+      alias code-check='git-check $HOME/Code'
-        echo "Checking ~/Code directory for git changes."
-        ls -d ~/Code/* | while read project; do
-          if [[ ! -d $project ]]; then
-            continue
-          fi
-          echo -e "\n*** `basename $project` ***"
-          cd $project
-          if [[ -d .git ]]; then
-            git ls-remote --exit-code --heads origin dev
-            dev_exists="$?"
-            if [[ "$dev_exists" == 0 ]]; then
-              git switch dev
-            elif [[ "$dev_exists" == 2 ]]; then
-              git switch main
-            else
-              echo "ERROR: Unknown status for dev_exists, '$dev_exists'."
-              continue
-            fi
-            git pull
-            git push
-          else
-            echo "Not a Git project, skipping!"
-          fi
-        done
-        echo -e "\nDone!"
-      '
       alias code-sync='code-check'
     alias_code_reset: |
       alias code-reset='
-        ls -d ~/Code/* | while read project
+        ls -d $HOME/Code/* | while read project
           do echo "*** `basename $project` ***"
           cd $project
           git stash
@@ -600,12 +671,13 @@
         done
       '
     function_code_reseed: |
-      function git_projects_to_sync {
+      function git_projects_to_sync() {
         # Projects should be followed by the current development branch name.
         cat <<- EOF
           env-ansible dev
           env-docker dev
           env-termux dev
+          env-shared dev
           env-obtainium-hyperling dev
           nodejs-website dev
           ebook-health-protocol dev
@@ -614,11 +686,8 @@
           ebook-narcissism-healing dev
           ebook-forest-howto dev
           ebook-template main
-          flutter-expense-tracker dev
-          flutter-social-traveler-app dev
-          nodejs-social-traveler-server dev
           misc-spare-change main
-          flutter-buddy-website dev
+          flutter-expense-tracker dev
           flutter-sunset-alarm dev
           android-infinite-timer dev
           android-carb-up dev
@@ -626,16 +695,14 @@
           android-45-minute-rule dev
           android-tictactoe dev
           hugo-jackanope dev
-          hugo-website dev
+          hugo-recipes dev
+          hugo-rvr dev
+          nomadic-weather dev
+          nomadic-weather.wiki main
       EOF
+      # Above EOF cannot be indented unless using a tab, which would be mixed with spaces.
       }
-      function code-reseed {
+      function code_seed() {
-        # Unseed current projects.
-        echo -e "\n*** Move old projects to TRASH ***"
-        unseed_dir="$HOME/TRASH/`date +%Y%m%d_%H%M%S`_UnseededCodeProjects"
-        mkdir -pv "$unseed_dir"
-        mv -v ~/Code/* "$unseed_dir"/ 2>/dev/null
-
         # Git repo information.
         git_repo_ssh={{ git_repo_ssh }}
         git_main_project={{ git_project }}
@@ -645,18 +712,34 @@
         git_projects_to_sync | while read git_project git_branch; do
           echo -e "\n*** $git_project ***"
 
-          # Project folder manipulation.
+          # Project folder name manipulation.
           dest_folder="$git_project"
           if [[ "$dest_folder" == "flutter-"* ]]; then
-            echo "Using '_' for Flutter Project"
+            echo "FLUTTER: Removing 'flutter-' and using '_' rather than '-'."
+            dest_folder="${dest_folder//flutter-/}"
             dest_folder="${dest_folder//-/_}"
           fi
 
-          # Download of the project.
+          # Download the project.
-          git clone ${git_repo_ssh_basename}${git_project} \
+          if [[ ! -d $HOME/Code/$dest_folder ]]; then
-            --branch $git_branch ~/Code/$dest_folder
+            git clone ${git_repo_ssh_basename}${git_project} \
+              --branch $git_branch $HOME/Code/$dest_folder
+          else
+            echo "'$dest_folder' already exists, skipping."
+          fi
         done
       }
+      alias code-seed="code_seed "
+      function code_reseed() {
+        # Unseed current projects.
+        echo -e "\n*** Move old projects to TRASH ***"
+        unseed_dir="$HOME/TRASH/`date +%Y%m%d_%H%M%S`_UnseededCodeProjects"
+        mkdir -pv "$unseed_dir"
+        mv -v $HOME/Code/* "$unseed_dir"/ 2>/dev/null
+
+        code_seed
+      }
+      alias code-reseed="code_reseed "
     function_clean_filenames: |
       function clean-filenames() {
         # Must provide the directory you'd like to clean all the filenames in.
@@ -686,8 +769,6 @@
         done
         echo -e "\nDone!\n"
       }
-    alias_clone: |
-      alias clone="rsync -auPhz --delete --exclude '.gradle' --exclude 'app/build'"
     export_hyperling: |
       export HYPERLING6="2a07:e03:3:80::1"
       export HYPERLING4="185.130.47.173"
@@ -697,22 +778,33 @@
       if [[ -e $DOCKER_SOURCE && $LOGNAME == "root" ]]; then
         source $DOCKER_SOURCE
       fi
-    alias_scan: |
+    export_prod:
-      alias scan="nmap -A -p- --script=vuln"
+      export PROD_HOST="{{ prod_host }}"
+      export PROD_PORT="{{ prod_port }}"
+      export PROD_USER="{{ prod_user }}"
+
+      export PROD_GIT_HOST="{{ git_host }}"
+      export PROD_GIT_PORT="{{ git_ssh_port }}"
+      export PROD_GIT_USER="{{ git_user }}"
+
+      export PROD_DATA_HOST="{{ prod_data_host }}"
+      export PROD_DATA_PORT="{{ prod_data_port }}"
+      export PROD_DATA_USER="{{ prod_data_user }}"
+      export PROD_DATA_DIR="{{ prod_data_dir }}"
     alias_prod: |
       alias prod="ssh -p {{ prod_port }} {{ prod_user }}@{{ prod_host }}"
     function_clean_code: |
-      function clean-code {
+      function clean-code() {
         echo -e "******* Android *******\n*** Build Caches ***"
-        find ~/Code/android-*/app -maxdepth 1 -type d -name "build" \
+        find $HOME/Code/android-*/app -maxdepth 1 -type d -name "build" \
           -exec du -hs {} \; -exec rm -rf {} \;
         echo -e "\n*** Gradle Caches ***"
-        find ~/Code/android-*/ -maxdepth 1 -type d -name ".gradle" \
+        find $HOME/Code/android-*/ -maxdepth 1 -type d -name ".gradle" \
           -exec du -hs {} \; -exec rm -rf {} \;
 
         echo -e "******* Flutter *******"
-        ls ~/Code | grep flutter | while read project; do
+        ls $HOME/Code | grep flutter | while read project; do
-          cd ~/Code/$project
+          cd $HOME/Code/$project
           pwd
           flutter clean
           echo -e "\n"
@@ -720,7 +812,7 @@
         cd
 
         echo -e "******* PDFs *******"
-        find ~/Code/ebook-* -name "*.pdf" -exec du -h {} \; -delete | sort -h
+        find $HOME/Code/ebook-* -name "*.pdf" -exec du -h {} \; -delete | sort -h
 
         echo -e "\n*** Done! ***"
       }
@@ -738,7 +830,7 @@
       alias system-killer="kill-system"
     function_update_sdks: |
       if [[ "$workstation" == "true" && "$coding" == "true" ]]; then
-        function update-sdks {
+        function update-sdks() {
           echo -e "******* Update SDKs *******\n*** Android - START ***"
           yes | sdkmanager --update
           yes | sdkmanager --licenses
@@ -756,7 +848,7 @@
         alias sdk-updater="update-sdks"
       fi
     function_ansible_vars: |
-      function ansible-var-list {
+      function ansible-var-list() {
         cat << EOF
           provision
           battery
@@ -769,7 +861,7 @@
           domain
       EOF
       }
-      function ansible-vars {
+      function ansible-vars() {
         ansible-var-list | while read var; do
           echo "$var = ${!var}"
         done
@@ -779,26 +871,15 @@
       alias chmod='chmod -c'
     alias_iftop: |
       alias iftop='sudo iftop'
-    alias_ls: |
-      alias l='ls'
-      alias ll='ls -alh'
-      alias lh='ls -ash'
     alias_progs: |
       alias progs='ps -ef'
     alias_nethogs: |
       alias nethogs='sudo nethogs'
     alias_ansible_facts: |
       alias ansible-facts='ansible localhost -m setup --connection=local'
-    function_now: |
-      function now {
-        date "+%Y%m%d-%H%M%S"
-      }
-      function today {
-        date "+%Y%m%d"
-      }
     function_backup: |
       export BACKUP_DIR="/srv/backup"
-      function backup {
+      function backup() {
         /usr/local/bin/backup_system.sh
       }
       alias backup-system="backup"
@@ -811,7 +892,7 @@
     function_pull_prod_backups: |
       export DOCKER="Docker"
       export SYSTEM="System"
-      function pull_prod_backup {
+      function pull_prod_backup() {
         if [[ -z "$1" || ("$1" != "$DOCKER" && "$1" != "$SYSTEM") ]]; then
           echo "ERROR: Parameter 1 not correct, expecting '$DOCKER' or '$SYSTEM'."
           return 1
@@ -836,10 +917,10 @@
           rmdir -v tmp
         else
           echo "Failed!"
-          mv tmp ~/TRASH/"tmp_`now`"
+          mv tmp $HOME/TRASH/"tmp_`now`"
         fi
       }
-      function pull_prod_backups {
+      function pull_prod_backups() {
         dir="ProductionBackups-Pulled`today`"
         mkdir -pv "$dir"
         cd "$dir"
@@ -861,15 +942,8 @@
       alias prod-backup="pull_prod_backups"
       alias pull-prod="pull_prod_backups"
       alias prod-pull="pull_prod_backups"
-    function_log: |
-      function log {
-        echo -e "$1"
-      }
-      function blog {
-        echo -e "\n\n$1\n\n"
-      }
     function_debian_upgrade: |
-      function debian-upgrade {
+      function debian-upgrade() {
         typeset -l OLD NEW
         OLD="$1"
         NEW="$2"
@@ -940,9 +1014,9 @@
       alias upgrade-debian="debian-upgrade"
     function_ebook_convert: |
       # Regenerate all eBook projects at once.
-      function ebook-convert {
+      function ebook-convert() {
-        find ~/Code/ebook-* -name "*.pdf" -print -delete
+        find $HOME/Code/ebook-* -name "*.pdf" -print -delete
-        find ~/Code/ebook-* -name convert.sh -print -exec bash "{}" \;
+        find $HOME/Code/ebook-* -name convert.sh -print -exec bash "{}" \;
       }
       alias ebooks="ebook-convert"
       alias convert="ebook-convert"
@@ -951,7 +1025,7 @@
       alias sudo="sudo "
     function_load_branch: |
       # Change a branch to point at another.
-      function load-branch {
+      function load-branch() {
         rcvr="$1" # branch which we want to modify
         base="$2" # branch with the changes we want
 
@@ -1012,7 +1086,7 @@
       alias reset-stage="load-branch stage main"
       alias reset-dev="load-branch dev main"
       function check-code-branches {
-        for dir in ~/Code/*/; do
+        for dir in $HOME/Code/*/; do
           cd $dir
           pwd
           git ls-remote --heads
@@ -1024,7 +1098,7 @@
       alias check-branch="git ls-remote --heads"
       alias branch-check="check-branch"
     alias_reload_bash: |
-      alias reload-bash="source ~/.bashrc"
+      alias reload-bash="source $HOME/.bashrc"
       alias bash-reload="reload-bash"
       alias shell-reload="reload-bash"
       alias reload-shell="reload-bash"
@@ -1043,10 +1117,10 @@
     alias_flatpak_clean: |
       alias flatpak-clean="flatpak uninstall --unused"
     alias_commit: |
-      function commit_usage {
+      function commit_usage() {
         echo 'Usage: commit "This is a commit message"'
       }
-      function commit {
+      function commit() {
         if [[ -z "$1" ]]; then
           echo "ERROR: Message must be provided."
           commit_usage
@@ -1063,9 +1137,127 @@
         status="$?"
         return "$status"
       }
+    function_loop: |
+      function loop() {
+        cmd="$@"
+        sleep=""
+        sleep_time=5
+        if [[ "$cmd" != *"sleep"* ]]; then
+          sleep='echo -e "`date` - Sleeping for $sleep_time... \n"; sleep $sleep_time'
+        fi
+        count=0
+        echo "Command='$cmd'"
+        while true; do
+          (( count++ ))
+          echo "`date` - Loop $count"
+          eval $cmd
+          eval $sleep
+        done;
+      }
+      alias try="loop "
+    source_shared: |
+      if [ -f $HOME/.rc_shared ]; then
+        source $HOME/.rc_shared
+      fi
+    process_notify_log: |
+      if [[ -e {{ notify_log_file }} ]]; then
+        cp "{{ notify_log_file }}" "{{ notify_log_file_wip }}" 1>/dev/null
+        echo -n "" > "{{ notify_log_file }}"
+        cat "{{ notify_log_file_wip }}" | while read title message; do
+          notify-send "$title" "$message"
+        done
+        sh -c "rm '{{ notify_log_file_wip }}'"
+      fi
+    function_reconnect: |
+      function reconnect() {
+        test_domain="git.hyperling.com"
+        test_connection() {
+          ping -c 3 $test_domain
+          status="$?"
+          echo "* Status Returned: '$status'"
+          return $status
+        }
+        test_connection &&
+          echo -e "\n* Looks good! Not trying anything." &&
+          return 0 ||
+          echo -e "\n* Connection failed, troubleshooting..."
+
+        show_connection() {
+          ip addr | grep ' UP '
+          ip addr | grep ' inet'
+          #ip addr | grep -i 'mullvad'
+        }
+        echo -e "\n* Current Connections:"
+        show_connection
+
+        reset_mullvad() {
+          mullvad disconnect && sleep 5 && mullvad connect && sleep 10
+        }
+        echo -e "\n* Turning Mullvad Off & On Again"
+        reset_mullvad
+        echo "Done!"
+
+        echo -e "\n* Checking Connections"
+        show_connection
+
+        echo -e "\n* Testing Again..."
+        test_connection &&
+          echo -e "\n* Looks good! Not trying anything else." &&
+          return 0 ||
+          echo -e "\n* Connection failed, troubleshooting more..."
+
+        reset_wifi() {
+          wifi off
+          sleep 5
+          wifi on
+          sleep 10
+        }
+        echo -e "\n* Turning WiFi Off & On Again"
+        reset_wifi
+        echo "Done!"
+
+        echo -e "\n* Testing Again..."
+        test_connection &&
+          echo -e "\n* Looks good now!" &&
+          return 0 ||
+          echo -e "\n* Connection still failed, maybe try rebooting?"
+      }
+      alias test_wifi="reconnect"
+      alias test_network="reconnect"
+      alias test_connection="reconnect"
+      alias test_connections="reconnect"
+      alias fix_wifi="reconnect"
+      alias fix_network="reconnect"
+      alias fix_connection="reconnect"
+      alias fix_connections="reconnect"
+    function_reset_android_studio: |
+      # Useful after Android Studio is closed improperly. Resets all settings.
+      function reset_android_studio() {
+        mv -v ~/.var/app/com.google.AndroidStudio ~/TRASH/com.google.AndroidStudio-`date +"%Y%m%d"`
+      }
+      alias reset-android-studio="reset_android_studio "
+    function_follow: |
+      function follow() {
+        tail -n +1 -F "$@"
+      }
+      alias chase="follow "
+    function_restart: |
+      function restart() {
+        prog="$1"
+        sudo sv restart $prog
+        follow /var/log/$prog/current
+      }
+      alias reload="restart "
 
 - name: General | Account Management | Users | Files | Common Variable
-  set_fact:
+  ansible.builtin.set_fact:
+    profile_common: |
+      {{ export_path_additions }}
+      {{ export_path_sbin }}
+      {{ export_terminal }}
+      {{ export_browser }}
+      {{ keyboard_settings }}
+      {{ export_notify }}
     rc_common: |
       # Fixes "command not found" when using aliases within functions.
       shopt -s expand_aliases
@@ -1082,7 +1274,7 @@
       export server="{{ server }}"
       export domain="{{ domain }}"
 
-      {{ export_path_additions }}
+      {{ source_shared }}
       {{ alias_cp }}
       {{ alias_mv }}
       {{ alias_rm }}
@@ -1116,10 +1308,9 @@
       {{ function_code_reseed }}
       {{ function_clean_filenames }}
       {{ function_clean_filenames_tree }}
-      {{ alias_clone }}
       {{ export_hyperling }}
       {{ source_docker_env }}
-      {{ alias_scan }}
+      {{ export_prod }}
       {{ alias_prod }}
       {{ function_clean_code }}
       {{ alias_kill_battery }}
@@ -1128,14 +1319,11 @@
       {{ function_ansible_vars }}
       {{ alias_permission_commands }}
       {{ alias_iftop }}
-      {{ alias_ls }}
       {{ alias_progs }}
       {{ alias_nethogs }}
       {{ alias_ansible_facts }}
-      {{ function_now }}
       {{ function_backup }}
       {{ function_pull_prod_backups }}
-      {{ function_log }}
       {{ function_debian_upgrade }}
       {{ function_ebook_convert }}
       {{ alias_sudo }}
@@ -1146,26 +1334,55 @@
       {{ alias_docker_other }}
       {{ alias_flatpak_clean }}
       {{ alias_commit }}
+      {{ function_loop }}
+      {{ process_notify_log }}
+      {{ function_reconnect }}
+      {{ function_reset_android_studio }}
+      {{ function_follow }}
+      {{ function_restart }}
+
+- name: General | Account Management | Users | Files | .profile + .xsessionrc
+  ansible.builtin.blockinfile:
+    path: "{{ user_user.home }}/{{ item }}"
+    block: |
+      {{ profile_common }}
+
+      [[ $(whoami) != "root" ]] &&
+        echo "`date` - Ansible .profile loaded successfully!"
+    marker: '# {mark} MANAGED BY ANSIBLE | Aliases'
+    state: present
+    create: true
+    backup: false
+    mode: "0755"
+  loop:
+    - ".profile"
+    - ".xprofile"
+    - ".xsessionrc"
+  when: user_user.home != ""
 
 - name: General | Account Management | Users | Files | .bashrc
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ item }}/.bashrc"
     block: |
       {{ rc_common }}
+
+      # Export all functions! #
+      eval "$(declare -F | grep -v _ | sed 's/-f /-fx /')"
+
       [[ $(whoami) != "root" ]] &&
         echo "`date` - Ansible .bashrc loaded successfully!"
     marker: '# {mark} MANAGED BY ANSIBLE | Aliases'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: false
+    mode: "0755"
   loop:
     - "{{ user_root.home }}"
     - "{{ user_user.home }}"
-  ignore_errors: yes
   when: user_root.home != "" and user_user.home != ""
 
 - name: General | Account Management | Users | Files | .zshrc
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ item }}/.zshrc"
     block: |
       {{ rc_common }}
@@ -1173,59 +1390,39 @@
         echo "`date` - Ansible .zshrc loaded successfully!"
     marker: '# {mark} MANAGED BY ANSIBLE | Aliases'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: false
+    mode: "0755"
   loop:
     - "{{ user_root.home }}"
     - "{{ user_user.home }}"
-  ignore_errors: yes
-  when: user_root.home != "" and user_user.home != ""
-
-- name: General | Account Management | Users | Files | .vimrc
-  blockinfile:
-    path: "{{ item }}/.vimrc"
-    block: |
-      " Turn off syntax, flashy lights, etc. Make VIM into a basic editor.
-      syntax off
-      set nohlsearch
-      set noautoindent noautowrite noshowmatch wrapmargin=0 report=1 ts=3
-      set ignorecase
-
-      " Turn off auto-commenting.
-      autocmd Filetype * set fo-=c fo-=r fo-=o
-
-      " qq shortcut for immediately exiting all files without saving.
-      nnoremap qq :qa!<cr>
-    marker: '" {mark} MANAGED BY ANSIBLE | vimrc'
-    state: present
-    create: yes
-    backup: yes
-  loop:
-    - "{{ user_root.home }}"
-    - "{{ user_user.home }}"
-  ignore_errors: yes
   when: user_root.home != "" and user_user.home != ""
 
 - name: General | Account Management | Users | Files | Ownership
-  file:
+  ansible.builtin.file:
     path: "{{ user_user.home }}/{{ item }}"
     owner: "{{ user }}"
     mode: '0755'
   loop:
     - .bashrc
     - .zshrc
-    - .vimrc
+    - .profile
+    - .xprofile
+    - .xsessionrc
 
 
 - name: General | Account Management | Users | Files | Helper Functions (Reset)
-  shell: "rm -v {{ global_bin }}/*.function"
+  ansible.builtin.shell: "rm -v {{ global_bin }}/*.function"
+  ignore_errors: true
+  register: shell_check
+  changed_when: shell_check.rc == 0
 
 - name: General | Account Management | Users | Files | Helper Functions
-  copy:
+  ansible.builtin.copy:
     src: "{{ item }}"
     dest: "{{ global_bin }}"
     owner: root
     group: "{{ root_group }}"
-    mode: 0755
+    mode: "0755"
   with_fileglob:
     - "functions/*.function"

tasks/general/cron/ansible.yml

@@ -7,20 +7,50 @@
 # $RANDOM /  50 can be up to about  650 seconds, or ~11 minutes.
 # $RANDOM / 100 can be up to about  320 seconds, or  ~5 minutes.
 # This prevents multiple systems from hitting it at the exact same time.
+
+- name: General | Cron | Ansible | Facts 01
+  ansible.builtin.set_fact:
+    #ansible_cron_log: "~/{{ ansible_hostname }}.ansible-pull.`date +'%Y%m%d-%H%M%S'`.log"
+    ansible_cron_log: "~/{{ ansible_hostname }}.ansible-pull.log"
+
+- name: General | Cron | Ansible | Facts 02
+  ansible.builtin.set_fact:
+    ansible_cron_log_old: "{{ ansible_cron_log }}.old"
+
+
+- name: General | Cron | Ansible | Log | Delete Old
+  ansible.builtin.file:
+    path: "{{ ansible_cron_log_old }}"
+    state: absent
+
+- name: General | Cron | Ansible | Log | Check
+  ansible.builtin.stat:
+    path: "{{ ansible_cron_log }}"
+  register: ansible_cron_log_check
+
+- name: General | Cron | Ansible | Log | Rename [if >1MB]
+  ansible.builtin.copy:
+    src: "{{ ansible_cron_log }}"
+    dest: "{{ ansible_cron_log_old }}"
+    mode: "0755"
+  when: ansible_cron_log_check.stat.exists
+    and ansible_cron_log_check.stat.size > 1000000
+
+
 - name: General | Cron | Ansible | Create Subscriber Job
-  cron:
+  ansible.builtin.cron:
     user: ansible
     name: "Ansible Sync"
     minute: "*/30"
-    job: "bash -c 'sleep $(( $RANDOM / 20 )); sudo {{ ansible_pull_exec.stdout }} -v -o -U {{ git_repo_http }} --checkout {{ branch }}'"
+    job: "bash -c 'sleep $(( $RANDOM / 20 )); sudo {{ ansible_pull_exec.stdout }} -v -o -U {{ git_repo_http }} --checkout {{ branch }} >>{{ ansible_cron_log }} 2>&1'"
     state: present
     disabled: "{{ 'yes' if no_telem else 'no' }}"
 
 - name: General | Cron | Ansible | Create Forced Weekly Subscriber Job
-  cron:
+  ansible.builtin.cron:
     user: ansible
     name: "Ansible Weekly Forced Sync"
-    special_time: daily
+    special_time: weekly
-    job: "bash -c 'sleep $(( $RANDOM /  1 )); sudo {{ ansible_pull_exec.stdout }} -v    -U {{ git_repo_http }} --checkout {{ branch }}'"
+    job: "bash -c 'sleep $(( $RANDOM /  1 )); sudo {{ ansible_pull_exec.stdout }} -v    -U {{ git_repo_http }} --checkout {{ branch }} >>{{ ansible_cron_log }} 2>&1'"
     state: present
     disabled: "{{ 'yes' if no_telem else 'no' }}"

tasks/general/scripts/env-shared.yml

@@ -0,0 +1,52 @@
+---
+# 20261002 - Hyperling
+# Move internet requiring code out of users.yml.
+
+# Shared Environment Setup #
+
+- name: General | Account Management | Users | env-shared | Download / Update
+  ansible.builtin.git:
+    repo: https://git.hyperling.com/me/env-shared
+    version: "{{ branch }}"
+    dest: "{{ shared_rc_install_dir }}"
+    clone: true
+    force: true
+    update: true
+  #ignore_errors: true
+
+- name: General | Account Management | Users | env-shared | Install | .rc_shared
+  copy:
+    src: "{{ shared_rc_install_dir }}/rc_shared.sh"
+    dest: "{{ item }}/.rc_shared"
+    owner: root
+    group: "{{ root_group }}"
+    mode: "0755"
+  loop:
+    - "{{ user_root.home }}"
+    - "{{ user_user.home }}"
+  #ignore_errors: true
+  when: user_root.home != "" and user_user.home != ""
+
+- name: General | Account Management | Users | env-shared | Install | .vimrc
+  copy:
+    src: "{{ shared_rc_install_dir }}/vimrc.vim"
+    dest: "{{ item }}/.vimrc"
+    owner: root
+    group: "{{ root_group }}"
+    mode: "0755"
+  loop:
+    - "{{ user_root.home }}"
+    - "{{ user_user.home }}"
+  #ignore_errors: true
+  when: user_root.home != "" and user_user.home != ""
+
+- name: General | Account Management | Users | env-shared | Permissions
+  ansible.builtin.file:
+    path: "{{ user_user.home }}/{{ item }}"
+    owner: "{{ user }}"
+    group: "{{ user }}"
+    mode: "0755"
+  loop:
+    - .rc_shared
+    - .vimrc
+  #ignore_errors: true

tasks/general/scripts/install.yml

@@ -8,7 +8,7 @@
     mode: '0755'
 
 - name: General | Scripts | Install | Copy Files
-  copy:
+  ansible.builtin.copy:
     src: 'scripts/'
     dest: "{{ global_bin }}/"
     owner: root
@@ -16,10 +16,12 @@
     mode: '0755'
 
 - name: General | Scripts | Install | Remove Old Scripts
-  shell: |
+  ansible.builtin.shell: |
     if [[ -e {{ global_bin }}/{{ item }} ]]; then
       rm -v {{ global_bin }}/{{ item }}
     fi
+  register: shell_check
+  changed_when: shell_check.rc == 0
   loop:
     - compress-video.sh
     - compress-images.sh

tasks/general/scripts/root.yml

@@ -2,7 +2,7 @@
 # Create file to easily push git changes and call SCM.
 
 - name: General | Scripts | Root | scm.sh
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ user_root.home }}/bin/scm.sh"
     block: |
       # 20210211 - Make life easier!
@@ -11,16 +11,11 @@
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
-
-- name: General | Scripts | Root | scm.sh Permissions
-  file:
-    path: "{{ user_root.home }}/bin/scm.sh"
     mode: '0755'
 
-
 - name: General | Scripts | Root | scm-dev.sh
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ user_root.home }}/bin/scm-dev.sh"
     block: |
       # 20210713 - Make life easier for development!
@@ -41,9 +36,5 @@
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
-
-- name: General | Scripts | Root | scm-dev.sh Permissions
-  file:
-    path: "{{ user_root.home }}/bin/scm-dev.sh"
     mode: '0755'

tasks/general/scripts/user.yml

@@ -2,7 +2,7 @@
 # Create file to easily push git changes and call SCM.
 
 - name: General | Scripts | User | scm.sh
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ user_user.home }}/bin/scm.sh"
     block: |
       # 20210211 - Make life easier!
@@ -11,16 +11,16 @@
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
 
 - name: General | Scripts | User | scm.sh Permissions
-  file:
+  ansible.builtin.file:
     path: "{{ user_user.home }}/bin/scm.sh"
     mode: '0755'
 
 
 - name: General | Scripts | User | scm-dev.sh
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ user_user.home }}/bin/scm-dev.sh"
     block: |
       # 20210713 - Make life easier for development!
@@ -41,9 +41,9 @@
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
 
 - name: General | Scripts | User | scm-dev.sh Permissions
-  file:
+  ansible.builtin.file:
     path: "{{ user_user.home }}/bin/scm-dev.sh"
     mode: '0755'

tasks/general/settings/keyboard.yml

@@ -0,0 +1,16 @@
+---
+# 20260716 - Hyperling
+# Ensure the correct International AltGr keyboard setting is always chosen.
+
+- name: General | Settings | Keyboard | Default Config
+  ansible.builtin.lineinfile:
+    path: "/etc/default/keyboard"
+    regexp: '{{ item.key }}'
+    line: '{{ item.value }}'
+    state: present
+    create: true
+    backup: true
+  loop:
+    #- { "key": '^[\#]?XKBMODEL',   "value": 'XKBMODEL="pc105"'}
+    - { "key": '^[\#]?XKBLAYOUT',  "value": 'XKBLAYOUT="us"'}
+    - { "key": '^[\#]?XKBVARIANT', "value": 'XKBVARIANT="altgr-intl"'}

tasks/general/settings/services.yml

@@ -4,51 +4,42 @@
 ## Cron ##
 
 - name: General | Software | Services | CROND | Enable
-  service:
+  ansible.builtin.service:
     name: "{{ crond }}"
     pattern: "{{ crond_pattern }}"
     state: started
-    enabled: yes
+    enabled: true
   when: ansible_virtualization_type != 'docker'
+    and ansible_service_mgr != "runit"
   register: cron_status
   until: cron_status.state == "started"
   retries: 3
   delay: 3
 
-
+- name: General | Software | Services | CROND | Enable (runit)
-## CUPS ##
+  ansible.builtin.service:
-
+    name: "{{ crond }}"
-- name: General | Software | Services | CUPS | Disable
+    state: started
-  service:
+    enabled: true
-    name: "{{ cups }}"
+  when: ansible_virtualization_type != 'docker'
-    pattern: "{{ cups_pattern }}"
+    and ansible_service_mgr == "runit"
-    state: stopped
+  ignore_errors: true # Service module seems experimental for this init system.
-    enabled: no
-  ignore_errors: yes
-
-- name: General | Software | Services | CUPS-Browse | Disable
-  service:
-    name: "{{ cups_browse }}"
-    pattern: "{{ cups_browse_pattern }}"
-    state: stopped
-    enabled: no
-  ignore_errors: yes
-
 
 ## SSHD ##
 
 - name: General | Software | Services | SSHD | Configure
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: "{{ sshd_config }}"
     regexp: '{{ item.key }}'
     line: '{{ item.value }} # MANAGED BY ANSIBLE'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0644"
   loop:
     - { "key": '^[\#]?AllowUsers',           "value": 'AllowUsers {{ user }}'}
     - { "key": '^[\#]?PermitRootLogin',      "value": 'PermitRootLogin no'}
-    - { "key": '^[\#]?AllowTcpForwarding',   "value": 'AllowTcpForwarding no'}
+    - { "key": '^[\#]?AllowTcpForwarding',   "value": 'AllowTcpForwarding yes'}
     - { "key": '^[\#]?ClientAliveInterval',  "value": 'ClientAliveInterval 60'}
     - { "key": '^[\#]?ClientAliveCountMax',  "value": 'ClientAliveCountMax 2'}
     - { "key": '^[\#]?Compression',          "value": 'Compression no'}
@@ -60,15 +51,17 @@
     - { "key": '^[\#]?X11Forwarding',        "value": 'X11Forwarding no'}
     - { "key": '^[\#]?AllowAgentForwarding', "value": 'AllowAgentForwarding no'}
     - { "key": '^[\#]?PermitEmptyPasswords', "value": 'PermitEmptyPasswords no'}
+    - { "key": '^[\#]?GatewayPorts',         "value": 'GatewayPorts yes'}
 
 - name: General | Software | Services | SSHD | Configure (PVE)
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: "{{ sshd_config }}"
     regexp: '{{ item.key }}'
     line: '{{ item.value }} # MANAGED BY ANSIBLE'
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0644"
   loop:
     - { "key": '^[\#]?AllowUsers',      "value": 'AllowUsers root {{ user }}'}
     - { "key": '^[\#]?PermitRootLogin', "value": 'PermitRootLogin yes'}
@@ -76,46 +69,48 @@
   when: "'pve' in ansible_kernel"
 
 - name: General | Software | Services | SSHD | Enable
-  service:
+  ansible.builtin.service:
     name: "{{ sshd }}"
     pattern: "{{ sshd_pattern }}"
     state: reloaded
-    enabled: yes
+    enabled: true
   when: ansible_virtualization_type != 'docker'
+    and ansible_service_mgr != "runit"
   register: sshd_status
   until: sshd_status.state == "started"
   retries: 3
   delay: 3
 
-
 ## JournalCTL ##
 
 - name: General | Software | Services | JournalCTL | Reduce Log Size
-  shell: journalctl --vacuum-size=100M
+  ansible.builtin.shell: journalctl --vacuum-size=100M
   when: ansible_system == "Linux"
-  ignore_errors: yes
+    and ansible_service_mgr == "systemd"
-
+  ignore_errors: true
 
 ## Bluetooth ##
 # Do people seriously depend on Bluetooth? Plug your devices in, silly!
+# Hehe, I use it now for a few rare things so disabling this for now.
 
-- name: General | Software | Services | Bluetooth | Disable
+#- name: General | Software | Services | Bluetooth | Disable
-  service:
+#  ansible.builtin.service:
-    name: "{{ bluetooth }}"
+#    name: "{{ bluetooth }}"
-    pattern: "{{ bluetooth_pattern }}"
+#    pattern: "{{ bluetooth_pattern }}"
-    state: stopped
+#    state: stopped
-    enabled: no
+#    enabled: false
-  ignore_errors: yes
+#  ignore_errors: true
 
 ## NTP ##
 
 - name: General | Software | Services | NTP | Enable
-  service:
+  ansible.builtin.service:
     name: "{{ ntp_server }}"
     pattern: "{{ ntp_server }}"
     state: started
-    enabled: yes
+    enabled: true
   when: ansible_virtualization_type != 'docker'
+    and ansible_service_mgr != "runit"
   register: ntp_status
   until: ntp_status.state == "started"
   retries: 3
@@ -127,3 +122,30 @@
 # Add a field to general.yml config file which gets applied via timedatectl and /etc/localtime.
 # Example of what to do to file:
 #    /etc/localtime -> ../usr/share/zoneinfo/America/Phoenix
+
+## Disable ##
+
+- name: General | Software | Services | Disable
+  ansible.builtin.service:
+    name: "{{ item.name }}"
+    pattern: "{{ item.pattern }}"
+    state: stopped
+    enabled: false
+  ignore_errors: true
+  loop:
+    - {name: "{{ cups }}"       , pattern: "{{ cups_pattern }}"}
+    - {name: "{{ cups_browse }}", pattern: "{{ cups_browse_pattern }}"}
+  when: ansible_service_mgr != "runit"
+
+- name: General | Software | Services | Disable (runit)
+  ansible.builtin.shell: |
+    if [[ -e {{ runit_service_dir }}/{{ item.name }} ]]; then
+      rm -v {{ runit_service_dir }}/{{ item.name }}
+    fi
+  ignore_errors: true
+  loop:
+    - {name: "{{ cups }}"               }
+    - {name: "{{ cups_pattern }}"       }
+    - {name: "{{ cups_browse }}"        }
+    - {name: "{{ cups_browse_pattern }}"}
+  when: ansible_service_mgr == "runit"

tasks/general/settings/swap.yml

@@ -7,7 +7,7 @@
   block:
 
   - name: General | Software | Swap | Check For Swapfile
-    stat:
+    ansible.builtin.stat:
       path: "{{ swap_file }}"
       get_attributes: false
       get_checksum: false
@@ -18,7 +18,7 @@
     block:
 
     - name: General | Software | Swap | Create Swapfile
-      shell: "{{ item }}"
+      ansible.builtin.shell: "{{ item }}"
       loop:
         - dd if=/dev/zero of={{ swap_file }} bs={{ swap_block }}
             count={{ swap_count }} status=progress
@@ -31,12 +31,12 @@
 
   # NixOS's swap setup is handled in nixos.yml when ansible.nix is created.
   - name: General | Software | Swap | Add to FSTAB
-    lineinfile:
+    ansible.builtin.lineinfile:
       path: /etc/fstab
       regexp: '^[\#]?{{ swap_file }}'
       line: '{{ swap_file }} none swap sw 0 0'
       state: present
-      backup: yes
+      backup: true
     when: ansible_distribution != "NixOS"
 
   # Only run through this file if the ini has been changed from false.

tasks/general/settings/tunnel.yml

@@ -0,0 +1,74 @@
+---
+# 2026-10-17 Hyperling
+# Allow pushing a local port to a remote server automagically in a runit script.
+
+# ssh -N -p SSH_PORT -R REMOTE_PORT:localhost:LOCAL_PORT USER@REMOTE_HOST -v
+
+- name: General | Tunnel | Provisioned Variables
+  ansible.builtin.debug:
+    var: "{{ item }}"
+  loop:
+    - tunnel_local_port
+    - tunnel_remote_host
+    - tunnel_remote_port
+    - tunnel_ssh_port
+
+- name: General | Tunnel | Block
+  block:
+
+    - name: General | Tunnel | Facts
+      ansible.builtin.set_fact:
+        tunnel_service_name: tunnel
+
+    - name: General | Tunnel | mkdir | /etc/sv
+      ansible.builtin.file:
+        path: /etc/sv/{{ tunnel_service_name }}/log
+        state: directory
+        mode: "0755"
+
+    - name: General | Tunnel | mkdir | /var/log
+      ansible.builtin.file:
+        path: /var/log/{{ tunnel_service_name }}
+        state: directory
+        mode: "0755"
+
+    - name: General | Tunnel | Script | Run
+      ansible.builtin.copy:
+        dest: /etc/sv/{{ tunnel_service_name }}/run
+        content: |
+          #!/bin/sh -e
+          exec 2>&1
+          exec chpst -u {{ user }} ssh -v -N \
+            -R {{ tunnel_remote_port }}:localhost:{{ tunnel_local_port }} \
+            -p {{ tunnel_ssh_port }} {{ tunnel_remote_host }}
+        mode: "0755"
+
+    - name: General | Tunnel | Script | Finish
+      ansible.builtin.copy:
+        dest: /etc/sv/{{ tunnel_service_name }}/finish
+        content: |
+          {{ runit_finish_sleep }}
+        mode: "0755"
+
+    - name: General | Tunnel | Script | Log
+      ansible.builtin.copy:
+        dest: /etc/sv/{{ tunnel_service_name }}/log/run
+        content: |
+          #!/bin/sh -e
+          exec svlogd -tt /var/log/{{ tunnel_service_name }}
+        mode: "0755"
+
+    - name: General | Tunnel | Script | Log Config
+      ansible.builtin.copy:
+        dest: /var/log/{{ tunnel_service_name }}/config
+        content: |
+          {{ runit_log_config_10mb }}
+        mode: "0755"
+
+  when: tunnel_remote_host != "false"
+
+- name: General | Tunnel | Service | Enable
+  ansible.builtin.service:
+    name: "{{ tunnel_service_name }}"
+    state: "{{ 'started' if tunnel_remote_host else 'stopped' }}"
+    enabled: "{{ true if tunnel_remote_host else false }}"

tasks/general/software/aur.yml

@@ -0,0 +1,54 @@
+---
+# 20260731 - Hyperling
+# Install the AUR on pacman-related distros.
+
+- name: General | Software | AUR | Facts 01
+  ansible.builtin.set_fact:
+    aur_user: aurbuilder
+    aur_build_dir: "{{ global_src }}"
+    aur_helper: yay
+    aur_helper_url: https://aur.archlinux.org/yay-bin.git
+
+- name: General | Software | AUR | Facts 02
+  ansible.builtin.set_fact:
+    aur_helper_dir: "{{ aur_build_dir }}/{{ aur_helper }}"
+    aur_sudoers: "/etc/sudoers.d/sudoers_{{ aur_user }}"
+
+- name: General | Software | AUR | User
+  ansible.builtin.user:
+    name: "{{ aur_user }}"
+    groups: wheel
+    create_home: true
+
+- name: General | Software | AUR | Sudoers
+  ansible.builtin.lineinfile:
+    path: "{{ aur_sudoers }}"
+    line: "{{ aur_user }} ALL=(ALL) NOPASSWD: /usr/bin/pacman"
+    create: true
+    mode: '0440'
+    validate: 'visudo -cf %s'
+
+- name: General | Software | AUR | Check
+  command: "which {{ aur_helper }}"
+  register: yay_check
+  changed_when: false
+  failed_when: false
+
+- name: General | Software | AUR | Install
+  block:
+
+    - name: General | Software | AUR | Install | Clone Repo
+      ansible.builtin.git:
+        repo: "{{ aur_helper_url }}"
+        dest: "{{ aur_helper_dir }}"
+
+    - name: General | Software | AUR | Install | Change Permissions
+      ansible.builtin.shell: "chown -Rc {{ aur_user }}:wheel {{ aur_helper_dir }}"
+
+    - name: General | Software | AUR | Install | Build & Integrate
+      ansible.builtin.shell: "cd {{ aur_helper_dir }} && makepkg -si --noconfirm"
+      become: true
+      become_user: "{{ aur_user }}"
+      changed_when: true
+
+  when: yay_check.rc != 0

tasks/general/software/metasploit.yml

@@ -2,26 +2,52 @@
 # Install Metasploit Framework
 
 - name: General | Software | Metasploit | Facts
-  set_fact:
+  ansible.builtin.set_fact:
     metasploit_installer: msfinstall
   when: ansible_system in ("Linux", "Darwin")
+    and pentesting
+
+- name: General | Software | Metasploit | Check Install Status
+  ansible.builtin.stat:
+    path: /usr/bin/msfconsole
+  register: metasploit_status
 
 - name: General | Software | Metasploit | Refresh Apt Files
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "mkdir -p /tmp/apt/"
     - "mv -fv /usr/share/keyrings/metasploit-framework.gpg /tmp/apt/metasploit-framework.gpg.old"
     - "mv -fv /etc/apt/sources.list.d/metasploit-framework.list /tmp/apt/metasploit-framework.list.old"
     - "mv -fv /etc/apt/preferences.d/pin-metasploit.pref /tmp/apt/pin-metasploit.pref.old"
-  when: ansible_system in ("Linux")
+  when: ansible_system in ("Linux") and ansible_pkg_mgr == "apt"
+    and not metasploit_status.stat.exists
+    and pentesting
   ignore_errors: true
 
 - name: General | Software | Metasploit | Install
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > {{ metasploit_installer }}"
     - "chmod 755 {{ metasploit_installer }}"
     - "mkdir -p {{ global_bin }}"
-    - "mv -fv ./msfinstall {{ global_bin }}/{{ metasploit_installer }}"
+    - "mv -fv ./{{ metasploit_installer }} {{ global_bin }}/{{ metasploit_installer }}"
     - yes y | "{{ global_bin }}/{{ metasploit_installer }}"
   when: ansible_system in ("Linux", "Darwin")
+    and not metasploit_status.stat.exists
+    and pentesting
+
+- name: General | Software | Metasploit | Remove (Darwin)
+  ansible.builtin.shell: "{{ item }}"
+  loop:
+    - "/opt/metasploit-framework/bin/msfremove"
+  when: ansible_system in ("Darwin")
+    and not metasploit_status.stat.exists
+    and pentesting == false
+
+- name: General | Software | Metasploit | Remove
+  ansible.builtin.package:
+    name: "metasploit-framework"
+    state: absent
+  when: ansible_system in ("Linux")
+    and metasploit_status.stat.exists
+    and pentesting == false

tasks/general/software/nix.yml

@@ -13,20 +13,21 @@
 ###
 
 - name: Nix Variables
-  set_fact:
+  ansible.builtin.set_fact:
     nix_exe: ~/.deleteme.nix.sh
 
 - name: Install Nix
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "curl -L https://nixos.org/nix/install > {{ nix_exe }}"
     - "chmod 755 {{ nix_exe }}"
     - "{{ nix_exe }} --daemon --yes"
     - "rm -v {{ nix_exe }}"
+  become: true
   become_user: "{{ user }}"
 
 - name: Install Nix Software
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "nix-env -iA nixpkgs.lbry" # Installs, but doesnt launch?
 #$ lbry

tasks/general/software/nixos.yml

@@ -3,20 +3,20 @@
 # This is also done in setup.sh if ansible is not found.
 
 - name: General | Software | NixOS | Facts
-  set_fact:
+  ansible.builtin.set_fact:
     nixos_working_dir: ~/nixos-config-deleteme
     nixos_working_exe: activate.sh
 
 - name: General | Software | NixOS | Facts [Swap]
-  set_fact:
+  ansible.builtin.set_fact:
     nixos_swap: "swapDevices = [ { device = \"{{ swap_file }}\";} ];"
   when: swap_block != false
 
 - name: General | Software | NixOS | Update Config Project
-  shell: "files/scripts/nixos.sh -b {{ branch }}"
+  ansible.builtin.shell: "files/scripts/nixos.sh -b {{ branch }}"
 
 - name: General | Software | NixOS | Create Ansible Nix Config
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/nixos/ansible.nix
     block: |
       # This file was created by https://git.hyperling.com/me/env-ansible
@@ -29,14 +29,14 @@
         {{ nixos_swap }}
       }
     state: present
-    backup: yes
+    backup: true
-    create: yes
+    create: true
 
 
 #  Maybe do home manager here? Or should it be under Workstation? Or maybe
 #   this is the spot where I start creating workstation.nix, server.nix, etc.
 #- name: General | Software | NixOS | Home Manager? *.nix file management?
-#  shell:
+#  ansible.builtin.shell:
 #  loop:
 #    - ???
 #    - ???

tasks/general/software/packages.yml

@@ -5,108 +5,117 @@
 # They have zypper higher in the path, but it's really apt renamed.
 # Probably for "security", but package module does not use the ansible_pkg_mgr variable
 #   so resetting the value to apt doesn't work. Just going to move it.
-  shell: "mv `which zypper` `which zypper`.zz.`date +%Y%m%d`"
+  ansible.builtin.shell: "mv `which zypper` `which zypper`.zz.`date +%Y%m%d`"
   register: parrotos_zypper_removed
-  ignore_errors: yes
+  ignore_errors: true
   when: ansible_distribution == "Parrot OS"
 
 - name: General | Software | Packages | Fix Parrot OS (zypper), Exit Incoming
-  debug:
+  ansible.builtin.debug:
     msg: "A silly zypper file was renamed successfully. Please try running Ansible again."
   when: ansible_distribution == "Parrot OS" and parrotos_zypper_removed is defined and not parrotos_zypper_removed.failed
 
 - name: General | Software | Packages | Fix Parrot OS (zypper), Exiting
-  shell: exit 1
+  ansible.builtin.shell: exit 1
   when: ansible_distribution == "Parrot OS" and parrotos_zypper_removed is defined and not parrotos_zypper_removed.failed
 
 # More Parrot OS junk. They have a command called update in /usr/bin. Doesn't
 # have sudo or anything in it. Hide it in preference for .bashrc update function.
 - name: General | Software | Packages | Fix Parrot OS 2 (update)
-  shell: "mv `which update` `which update`.zz.`date +%Y%m%d`"
+  ansible.builtin.shell: "mv `which update` `which update`.zz.`date +%Y%m%d`"
-  ignore_errors: yes
+  ignore_errors: true
   when: ansible_distribution == "Parrot OS"
 
 
 - name: General | Software | Packages | Cache Refresh (Apt and Pacman)
-  package:
+  ansible.builtin.package:
-    update_cache: yes
+    update_cache: true
     name: htop
   when: ansible_pkg_mgr in ["apt", "pacman"]
 
 - name: General | Software | Packages | Cache Refresh (FreeBSD)
-  shell: pkg update
+  ansible.builtin.shell: pkg update
   when: ansible_system == "FreeBSD"
 
 - name: General | Software | Packages | Install Software
-  package:
+  ansible.builtin.package:
     name:
-    - bash
+      - bash
-    - sudo
+      - sudo
-    - nmap
+      - nmap
-    - "{{ neofetch }}"
+      - "{{ neofetch }}"
-    - "{{ sshfs }}"
+      - "{{ sshfs }}"
-    - "{{ locate }}"
+      - "{{ locate }}"
-    - zsh
+      - zsh
-    - "{{ opensshd }}"
+      - "{{ opensshd }}"
-    - "{{ tar }}"
+      - "{{ tar }}"
-    - curl
+      - curl
-    - at
+      - at
-    - gcc
+      - gcc
-    - vim
+      - vim
-    - "{{ cron }}"
+      - "{{ cron }}"
-    - "{{ encfs }}"
+      - "{{ encfs }}"
-    - rsync
+      - rsync
-    - "{{ iftop }}"
+      - "{{ iftop }}"
-    - "{{ nethogs }}"
+      - "{{ nethogs }}"
-    - "{{ ntp_server }}"
+      - "{{ ntp_server }}"
-    - "{{ dig }}"
+      - "{{ dig }}"
+      - "{{ tmux }}"
+      - "{{ base_devel }}"
+      - "{{ sendmail }}"
+      - "{{ sendmail_mta }}"
+      - "{{ ca_certificates }}"
+      - "{{ alsa }}"
+      - "{{ stress }}"
+      - "{{ jq }}"
     state: present
 
 - name: General | Software | Packages | Install Software (DEV)
-  package:
+  ansible.builtin.package:
     name:
-    - "{{ microcode_amd }}"
+      - "{{ microcode_amd }}"
-    - "{{ microcode_intel }}"
+      - "{{ microcode_intel }}"
     state: present
   when: branch == "dev"
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Software | Packages | Add Generic Kernel + Tools (Ubuntu)
-  package:
+  ansible.builtin.package:
     name:
-    - linux-image-generic
+      - linux-image-generic
-    - linux-headers-generic
+      - linux-headers-generic
-    - linux-tools-generic
+      - linux-tools-generic
-    - linux-tools-common
+      - linux-tools-common
     state: present
   when: ansible_distribution == "Ubuntu"
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Software | Packages | Add Generic Kernel + Headers (Debian)
-  package:
+  ansible.builtin.package:
     name:
-    - linux-image-amd64
+      - linux-image-amd64
-    - linux-headers-amd64
+      - linux-headers-amd64
     state: present
   when: ansible_distribution == "Debian"
-  ignore_errors: yes
+  ignore_errors: true
 
-- name: General | Software | Services | Install killall (Looking at you, Debian)
+- name: General | Software | Packages | Install killall (Looking at you, Debian)
-  package:
+  ansible.builtin.package:
     name: psmisc
     state: present
   when: ansible_distribution == "Debian"
 
-- name: General | Software | Services | Install "Bloat" (Looking at you, Arch Base)
+- name: General | Software | Packages | Install "Bloat" (Looking at you, Arch Base)
-  package:
+  ansible.builtin.package:
     name:
-    - which
+      - which
-    - "{{ cron }}"
+      - "{{ cron }}"
+      - pacman-contrib
     state: present
-  when: ansible_distribution == "Archlinux"
+  when: ansible_pkg_mgr == "pacman"
 
-- name: General | Software | Services | Install Fix (Looking at you, openSUSE)
+- name: General | Software | Packages | Install Fix (Looking at you, openSUSE)
-  package:
+  ansible.builtin.package:
     name:
       # openSUSE Tumbleweed comes without gnome-control-center being able to open
       #  properly. Hopefully just a one-time accident but I wanted bleeding edge so I
@@ -118,43 +127,43 @@
   when: ansible_pkg_mgr in ("zypper")
 
 - name: General | Software | Packages | Update Software (Disabled)
-  package:
+  ansible.builtin.package:
     name:
-    - ansible
+      - ansible
-    - git
+      - git
     state: latest
   when: 1 == 0
 
 - name: General | Software | Packages | Remove Software
-  package:
+  ansible.builtin.package:
     name:
-    - cowsay # Sorry ;)
+      - cowsay # Sorry ;)
-    - chromium
+      - chromium
-    - chromium-browser
+      - chromium-browser
     state: absent
 
 # Ubuntu still uses snap for critical components like GNOME, must keep.
-- name: General | Software | Services | Disable Snap Daemon
+- name: General | Software | Packages | Disable Snap Daemon
-  service:
+  ansible.builtin.service:
     name: snapd
     pattern: snapd
     state: stopped
-    enabled: no
+    enabled: false
   when: ansible_distribution != "Ubuntu"
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Software | Packages | Remove Snap (Besides Ubuntu)
-  package:
+  ansible.builtin.package:
     name:
-    - snapd
+      - snapd
     state: absent
   when: ansible_distribution != "Ubuntu"
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Software | Packages | Other Debian Packages
-  package:
+  ansible.builtin.package:
     name:
-    - usbutils
+      - usbutils
     state: present
   when: ansible_distribution in ("Debian")
-  ignore_errors: yes
+  ignore_errors: true

tasks/general/software/runit.yml

@@ -0,0 +1,23 @@
+---
+# 20261006 Hyperling
+
+# Allow ansible.builtin.service to be used on Artix similar to Devuan.
+- name: General | Software | runit | Fix Artix
+  block:
+
+    - name: General | Software | runit | Fix Artix | Script Dir
+      ansible.builtin.file:
+        src: /etc/runit/sv
+        dest: /etc/sv
+        state: link
+        force: true
+
+    - name: General | Software | runit | Fix Artix | Service Dir
+      ansible.builtin.file:
+        src: /etc/runit/runsvdir/default
+        dest: /var/service
+        state: link
+        force: true
+
+  when: ansible_service_mgr == "runit"
+    and ansible_pkg_mgr == "pacman"

tasks/general/software/sendmail.yml

@@ -3,46 +3,46 @@
 # Preferably only on servers that don't already have postfix?
 
 - name: Server | Sendmail | Variables
-  set_fact:
+  ansible.builtin.set_fact:
     sendmail: sendmail
     sendmail_queue: sendmail_msp_queue
 
 - name: Server | Sendmail | Check
-  shell: which postfix
+  ansible.builtin.shell: which postfix
   register: postfix
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Server | Sendmail | Install
-  package:
+  ansible.builtin.package:
-    name: 
+    name:
       - "{{ sendmail }}"
     state: present
   when: postfix.failed
 
 - name: Server | Sendmail | Configure
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/rc.conf
     block: |
       sendmail_enable="YES"
       sendmail_msp_queue_enable="YES"
     marker: "# {mark} MANAGED BY ANSIBLE - sendmail"
     state: present
-    create: yes
+    create: true
-    backup: yes
+    backup: true
   when: postfix.failed and ansible_system == "FreeBSD"
 
 - name: Server | Sendmail | Enable + Start | Main
-  service:
+  ansible.builtin.service:
     name: "{{ sendmail }}"
     pattern: "{{ sendmail }}"
     state: started
-    enabled: yes
+    enabled: true
   when: postfix.failed
 
 - name: Server | Sendmail | Enable + Start | Queue
-  service:
+  ansible.builtin.service:
     name: "{{ sendmail_queue }}"
     pattern: "{{ sendmail_queue }}"
     state: started
-    enabled: yes
+    enabled: true
   when: postfix.failed and ansible_system == "FreeBSD"

tasks/general/software/telegraf.yml

@@ -5,7 +5,7 @@
 # Variables #
 
 - name: General | Telegraf | Variables 1/4
-  set_fact:
+  ansible.builtin.set_fact:
     telegraf_tar: telegraf-1.20.3_linux_amd64.tar.gz
     telegraf_path: /usr/local/bin
     telegraf_config_path: /usr/local/etc
@@ -13,25 +13,25 @@
     telegraf_log: "{{ user_ansible.home }}/telegraf.log"
 
 - name: General | Telegraf | Variables 2/4
-  set_fact:
+  ansible.builtin.set_fact:
     telegraf_exec: "{{ telegraf_path }}/telegraf"
     telegraf_config: "{{ telegraf_config_path }}/telegraf.conf"
 
 - name: General | Telegraf | Variables 3/4
-  set_fact:
+  ansible.builtin.set_fact:
     telegraf_cmd: "{{ telegraf_exec }} --config {{ telegraf_config }} >> {{ telegraf_log }} 2>&1"
 
 - name: General | Telegraf | Variables 4/4
-  set_fact:
+  ansible.builtin.set_fact:
     telegraf_watcher: "killall telegraf; {{ telegraf_cmd }}"
 
 - name: General | Telegraf | Variables | Linux
-  set_fact:
+  ansible.builtin.set_fact:
     telegraf_input_temp: "[[inputs.temp]]"
   when: ansible_system == "Linux"
 
 - name: General | Telegraf | Variables | FreeBSD
-  set_fact:
+  ansible.builtin.set_fact:
     telegraf_input_temp: ""
   when: ansible_system == "FreeBSD"
 
@@ -40,14 +40,14 @@
 #### Dependencies #
 ###
 ###- name: General | Telegraf | Pre-Reqs
-###  package:
+###  ansible.builtin.package:
 ###    name: wget
 ###  when: ansible_system == "Linux"
 ###
 #### Install #
 ###
 ###- name: General | Telegraf | Linux | Install
-###  shell: "{{ item }}"
+###  ansible.builtin.shell: "{{ item }}"
 ###  args:
 ###    chdir: "{{ ansible_env.HOME }}/Downloads/"
 ###  loop:
@@ -61,22 +61,22 @@
 ###  when: ansible_system == "Linux"
 ###
 ###- name: General | Telegraf | FreeBSD | Install 1/2
-###  shell: /usr/sbin/pwd_mkdb -p /etc/master.passwd
+###  ansible.builtin.shell: /usr/sbin/pwd_mkdb -p /etc/master.passwd
 ###  when: ansible_system == "FreeBSD"
 ###
 ###- name: General | Telegraf | FreeBSD | Install 2/2
-###  package:
+###  ansible.builtin.package:
 ###    name: telegraf
 ###  when: ansible_system == "FreeBSD"
 ###
 #### Configuration #
 ###
 ###- name: General | Telegraf | Config 1/2
-###  shell: mv {{ telegraf_config }} ~/TRASH/
+###  ansible.builtin.shell: mv {{ telegraf_config }} ~/TRASH/
-###  ignore_errors: yes
+###  ignore_errors: true
 ###
 ###- name: General | Telegraf | Config 2/2
-###  blockinfile:
+###  ansible.builtin.blockinfile:
 ###    path: "{{ telegraf_config }}"
 ###    block: |
 ###      [global_tags]
@@ -158,19 +158,19 @@
 ###
 ###    marker: '# {mark} MANAGED BY ANSIBLE - telegraf.yml'
 ###    state: present
-###    create: yes
+###    create: true
 
 # Run #
 
 - name: General | Telegraf | Schedule
-  cron:
+  ansible.builtin.cron:
     user: "{{ telegraf_user }}"
     name: "{{ item.name }}"
     job: "{{ item.command }}"
     special_time: "{{ item.freq }}"
     state: present
     #disabled: "{{ 'yes' if no_telem else 'no' }}"
-    disabled: yes # 2024-01-25, Downsizing again and will not have Graphana.
+    disabled: true # 2024-01-25, Downsizing again and will not have Graphana.
   loop:
     - { "name": "Telegraf Reboot Job"    , "freq": "reboot", "command": "{{ telegraf_cmd }}"}
     - { "name": "Telegraf Keep-Alive Job", "freq": "hourly", "command": "{{ telegraf_watcher }}"}

tasks/general/tests/internet_check.yml

@@ -0,0 +1,32 @@
+---
+# 20261002 - Hyperling
+# Check whether we're connected to the internet and skip certain playbooks if not.
+
+- name: General | Tests | Internet | Facts 01
+  ansible.builtin.set_fact:
+    internet: true
+    internet_time: 10
+
+- name: General | Tests | Internet | Check
+  ansible.builtin.wait_for:
+    host: archlinux.org
+    port: 443
+    state: started
+    timeout: "{{ internet_time }}"
+  register: internet_check
+  ignore_errors: true
+
+- name: General | Tests | Internet | Facts 02
+  ansible.builtin.set_fact:
+    internet: "{{ internet_check is success }}"
+
+- name: General | Tests | Internet | Message
+  ansible.builtin.debug:
+    msg: "WARNING: Not connected to the Internet, only running for offline playbooks."
+  when: not internet
+
+- name: General | Tests | Internet | Sleep
+  ansible.builtin.command: "sleep {{ internet_time }}"
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: not internet

tasks/general/tests/lock_check.yml

@@ -0,0 +1,16 @@
+---
+# 20260929 - Hyperling
+# Ensure an existing run is not active, otherwise bail.
+
+- name: General | Tests | Existing Run | Facts
+  ansible.builtin.set_fact:
+    lock_file: "/tmp/ansible-playbook.lock"
+
+- name: General | Tests | Existing Run | Check
+  ansible.builtin.stat:
+    path: "{{ lock_file }}"
+  register: lock_exists
+
+- name: General | Tests | Existing Run | Exit
+  ansible.builtin.meta: end_play
+  when: lock_exists.stat.exists

tasks/general/tests/lock_create.yml

@@ -0,0 +1,22 @@
+---
+# 20260929 - Hyperling
+# Ensure an existing run is not active, otherwise bail.
+
+- name: General | Tests | Existing Run | Lock | Create
+  ansible.builtin.shell: "date +'%Y-%m-%d %H:%M:%S' >> {{lock_file }}"
+
+
+- name: General | Tests | Existing Run | Lock | Create
+  ansible.builtin.file:
+    name: "{{ lock_file }}"
+    mode: '0777'
+
+- name: General | Tests | Existing Run | Lock | Create | Check
+  ansible.builtin.stat:
+    path: "{{ lock_file }}"
+  register: lock_exists
+
+- name: General | Tests | Existing Run | Lock | Create | Fail
+  fail:
+    msg: "ERROR: Lock file does not exist."
+  when: not lock_exists.stat.exists

tasks/general/tests/lock_remove.yml

@@ -0,0 +1,18 @@
+---
+# 20260929 - Hyperling
+# Ensure an existing run is not active, otherwise bail.
+
+- name: General | Tests | Existing Run | Lock | Remove
+  ansible.builtin.file:
+    name: "{{ lock_file }}"
+    state: absent
+
+- name: General | Tests | Existing Run | Lock | Remove | Check
+  ansible.builtin.stat:
+    path: "{{ lock_file }}"
+  register: lock_exists
+
+- name: General | Tests | Existing Run | Lock | Remove | Fail
+  fail:
+    msg: "ERROR: Lock file still exists!"
+  when: lock_exists.stat.exists

tasks/general/tests/lynis.yml

@@ -2,45 +2,45 @@
 # Lynis hardness check.
 
 - name: General | Tests | Lynis | Set Facts
-  set_fact:
+  ansible.builtin.set_fact:
     lynis_file: "{{ user_user.home }}/Reports/{{ ansible_hostname }}.{{ lynis_report }}"
 
 - name: General | Tests | Lynis | Set Facts 2
-  set_fact:
+  ansible.builtin.set_fact:
     lynis_temp_file: "{{ lynis_file }}.tmp"
 
 - name: General | Tests | Lynis | Install
-  git:
+  ansible.builtin.git:
     repo: https://github.com/CISOfy/lynis
     dest: "{{ lynis_install_dir }}"
     clone: true
     force: true
     update: true
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: General | Tests | Lynis | Ensure Permissions (Looking at you Parrot OS!)
-  file:
+  ansible.builtin.file:
     path: "{{ lynis_install_dir }}"
     state: directory
     mode: '0644'
     owner: root
     group: "{{ root_group }}"
-    recurse: yes
+    recurse: true
 
 - name: General | Tests | Lynis | Ensure Permissions 2
-  file:
+  ansible.builtin.file:
     path: "{{ lynis_install_dir }}/lynis"
     mode: '0755'
 
 - name: General | Tests | Lynis | Ensure Folder Permissions
-  file:
+  ansible.builtin.file:
     path: "{{ lynis_install_dir }}"
     state: directory
     mode: '0755'
-    recurse: no
+    recurse: false
 
 - name: General | Tests | Lynis | Run System Audit
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "./lynis audit system --no-colors > {{ lynis_temp_file }} 2>&1"
     - "mv {{ lynis_temp_file }} {{ lynis_file }}"
@@ -49,6 +49,6 @@
     chdir: "{{ lynis_install_dir }}"
 
 - name: General | Tests | Lynis | Make Report Readable
-  file:
+  ansible.builtin.file:
     path: "{{ lynis_file }}"
     mode: '0644'

tasks/general/tests/nmap.yml

@@ -2,16 +2,16 @@
 # Nmap port test
 
 - name: General | Tests | nmap | Set Facts
-  set_fact:
+  ansible.builtin.set_fact:
     nmap_file: "{{ user_user.home }}/Reports/{{ ansible_hostname }}.{{ nmap_report }}"
     nmap_separator: "\n*******************************\n"
 
 - name: General | Tests | nmap | Set Facts 2
-  set_fact:
+  ansible.builtin.set_fact:
     nmap_temp_file: "{{ nmap_file }}.tmp"
 
 - name: General | Tests | nmap | Create Report
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "date > {{ nmap_temp_file }}"
     - "printf '{{ nmap_separator }}' >> {{ nmap_temp_file }}"
@@ -25,6 +25,6 @@
     - "mv {{ nmap_temp_file }} {{ nmap_file }}"
 
 - name: General | Tests | nmap | Make Viewable
-  file:
+  ansible.builtin.file:
     path: "{{ nmap_file }}"
     mode: '0644'

tasks/general/tests/services.yml

@@ -2,26 +2,37 @@
 # List all the services under the Reports folder.
 
 - name: General | Tests | Services | Set Facts
-  set_fact:
+  ansible.builtin.set_fact:
     services_report_file: "{{ user_user.home }}/Reports/{{ ansible_hostname }}.services.txt"
     services_enabled_file: "{{ user_user.home }}/Reports/{{ ansible_hostname }}.services-enabled.txt"
+    services_command: "echo 'Service Manager {{ ansible_service_mgr }} Not Recognized'"
+
+- name: General | Tests | Services | Set Facts | SystemD
+  ansible.builtin.set_fact:
     services_command: "systemctl list-unit-files"
+  when: ansible_service_mgr == "systemd"
+
+- name: General | Tests | Services | Set Facts | runit
+  ansible.builtin.set_fact:
+    services_command: 'for s in {{ runit_service_dir }}/*; do sv status "$s"; done'
+  when: ansible_service_mgr == "runit"
 
 - name: General | Tests | Services | Create Main Report
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "date > {{ services_report_file }}"
     - "echo '\n-= {{ services_command }} =-\n' >> {{ services_report_file }}"
     - "{{ services_command }} >> {{ services_report_file }}"
 
 - name: General | Tests | Services | Create Enabled Report
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "date > {{ services_enabled_file }}"
     - "echo '\n-= Enabled + Sorted =-\n' >> {{ services_enabled_file }}"
     - "grep 'enabled' {{ services_report_file }} | sort >> {{ services_enabled_file }}"
+  when: ansible_service_mgr == "systemd"
 
 - name: General | Tests | Services | Make Viewable
-  file:
+  ansible.builtin.file:
     path: "{{ services_report_file }}"
     mode: '0644'

tasks/header.yml

@@ -0,0 +1,179 @@
+---
+
+####### Lock #######
+
+# Ensure a process is not already running.
+- name: Main | Lock
+  block:
+
+    - name: Main | Lock | Check
+      ansible.builtin.include_tasks: tasks/general/tests/lock_check.yml
+
+    - name: Main | Lock | Create
+      ansible.builtin.include_tasks: tasks/general/tests/lock_create.yml
+
+####### Gather #######
+
+# Load facts for all systems.
+- name: Main | Gather
+  block:
+
+    - name: Main | Gather | Facts
+      ansible.builtin.include_tasks: facts/general/gather.yml
+
+    - name: Main | Gather | Account Management
+      ansible.builtin.include_tasks: tasks/general/acct_mgmt/provision_config.yml
+
+    - name: Main | Gather | System
+      ansible.builtin.include_tasks: facts/general/system.yml
+
+    - name: Main | Gather | Package
+      ansible.builtin.include_tasks: facts/general/package.yml
+
+    - name: Main | Gather | Service
+      ansible.builtin.include_tasks: facts/general/service.yml
+
+    - name: Main | Gather | User
+      ansible.builtin.include_tasks: facts/general/user.yml
+
+    - name: Main | Gather | Internet Check
+      ansible.builtin.include_tasks: tasks/general/tests/internet_check.yml
+
+####### Start #######
+
+- name: Main | Start
+  block:
+
+    - name: Main | Start | Notify
+      ansible.builtin.include_tasks: tasks/general/acct_mgmt/notify.yml
+      vars:
+        notify_message: "Provisioning Started"
+
+  when: workstation
+
+####### NixOS #######
+
+# Install the .nix files and do a little data setup.
+- name: Main | NixOS
+  block:
+
+    - name: Main | NixOS | Config
+      ansible.builtin.include_tasks: tasks/general/software/nixos.yml
+
+    # TBD if we are going to use this many, then just have IF statements
+    #  and use blocks within the General area for NixOS vs not-NixOS.
+    - name: Main | NixOS | Swap
+      ansible.builtin.include_tasks: tasks/general/software/swap.yml
+
+    - ansible.builtin.include_tasks: tasks/general/acct_mgmt/groups.yml
+
+    - ansible.builtin.include_tasks: tasks/general/acct_mgmt/users.yml
+
+    - ansible.builtin.include_tasks: tasks/general/acct_mgmt/sudo.yml
+
+    - ansible.builtin.include_tasks: tasks/general/acct_mgmt/doas.yml
+
+    - ansible.builtin.include_tasks: tasks/general/scripts/root.yml
+
+    - ansible.builtin.include_tasks: tasks/general/scripts/user.yml
+
+    - ansible.builtin.include_tasks: tasks/general/scripts/install.yml
+
+    - ansible.builtin.include_tasks: tasks/general/cron/ansible.yml
+
+    # psutil does not work in NixOS. Cannot figure out how to fix it. Maybe
+    #   time to start looking into home-manager but still not wanting to
+    #   maintain two different GNOME setups. HMMMM!
+    - ansible.builtin.include_tasks: tasks/workstation/shared/settings/gnome.yml
+      when: workstation
+
+    # Try including these. Really need to get NixOS working with the rest!
+    #- ansible.builtin.include_tasks: tasks/general/software/telegraf.yml # "Could not find a module for unknown.""
+    - ansible.builtin.include_tasks: tasks/general/tests/services.yml
+
+    - ansible.builtin.include_tasks: tasks/general/tests/lynis.yml
+
+    - ansible.builtin.include_tasks: tasks/general/tests/nmap.yml
+
+    - name: Main | NixOS | Complete
+      ansible.builtin.meta: end_play
+
+  when: ansible_distribution == "NixOS"
+
+####### General #######
+
+# Basic setup for all enabled systems.
+- name: Main | General
+  block:
+
+    - name: Main | General | Software | runit
+      ansible.builtin.include_tasks: tasks/general/software/runit.yml
+
+    - name: Main | General | Software | Packages
+      ansible.builtin.include_tasks: tasks/general/software/packages.yml
+      when: internet
+
+    - name: Main | General | Software | AUR
+      ansible.builtin.include_tasks: tasks/general/software/aur.yml
+      when: internet and ansible_pkg_mgr == "pacman"
+
+    - name: Main | General | Software | Sendmail
+      ansible.builtin.include_tasks: tasks/general/software/sendmail.yml
+      when: ansible_system == "FreeBSD"
+        and internet
+
+    - name: Main | General | Software | Metasploit
+      ansible.builtin.include_tasks: tasks/general/software/metasploit.yml
+      when: internet
+
+    # Gather again in case missing programs have now been installed.
+    - name: Main | General | Facts [Again]
+      ansible.builtin.include_tasks: facts/general/gather.yml
+
+    - name: Main | General | Settings | Swap
+      ansible.builtin.include_tasks: tasks/general/settings/swap.yml
+
+    - name: Main | General | Settings | Services
+      ansible.builtin.include_tasks: tasks/general/settings/services.yml
+
+    - name: Main | General | Settings | Tunnel
+      ansible.builtin.include_tasks: tasks/general/settings/tunnel.yml
+
+    - name: Main | General | Settings | Keyboard
+      ansible.builtin.include_tasks: tasks/general/settings/keyboard.yml
+
+    - name: Main | General | Accounts | Groups
+      ansible.builtin.include_tasks: tasks/general/acct_mgmt/groups.yml
+
+    - name: Main | General | Accounts | Users
+      ansible.builtin.include_tasks: tasks/general/acct_mgmt/users.yml
+
+    - name: Main | General | Accounts | sudo
+      ansible.builtin.include_tasks: tasks/general/acct_mgmt/sudo.yml
+
+    - name: Main | General | Accounts | doas
+      ansible.builtin.include_tasks: tasks/general/acct_mgmt/doas.yml
+      when: internet
+
+    - name: Main | General | Scripts | Root
+      ansible.builtin.include_tasks: tasks/general/scripts/root.yml
+
+    - name: Main | General | Scripts | User
+      ansible.builtin.include_tasks: tasks/general/scripts/user.yml
+
+    - name: Main | General | Scripts | Local
+      ansible.builtin.include_tasks: tasks/general/scripts/install.yml
+
+    - name: Main | General | Scripts | env-shared
+      ansible.builtin.include_tasks: tasks/general/scripts/env-shared.yml
+      when: internet
+
+    - name: Main | General | Cron | Ansible
+      ansible.builtin.include_tasks: tasks/general/cron/ansible.yml
+
+    # TODO Need to refactor. Maybe tasks/general/cron/freebsd.yml
+    - name: Main | General | Cron | Ansible [FreeBSD]
+      ansible.builtin.include_tasks: tasks/workstation/freebsd/cron/ansible.yml
+      when: ansible_system == "FreeBSD"
+
+  when: provision

tasks/miner/acct_mgmt/users.yml

@@ -4,20 +4,20 @@
 ## Gather ##
 
 - name: Miner | Account Management | Gather | Find Root Directory
-  shell: cd ~; pwd
+  ansible.builtin.shell: cd ~; pwd
   register: root_home
 
 
 ## Runner ##
 
 - name: Miner | Account Management | Users | MFN
-  user:
+  ansible.builtin.user:
     name: mfn
     comment: Miner Forty Niner
-    system: yes
+    system: true
-    groups: 
+    groups:
       - video
       - render
-    append: yes
+    append: true
     shell: "{{ bash_exec.stdout }}"
   register: user_mfn

tasks/miner/cron/ansible.yml

@@ -4,23 +4,23 @@
 ## Performance ##
 
 - name: Miner | Account Management | Cron | Ansible | Daily Performance Reboot
-  cron:
+  ansible.builtin.cron:
     user: ansible
     name: Daily Performance Reboot
     job: sudo reboot
     special_time: daily
     state: present
-    disabled: no
+    disabled: false
 
 
 ## Security ##
 
 - name: Miner | Account Management | Cron | Ansible | Daily Security Update [apt]
-  cron:
+  ansible.builtin.cron:
     user: ansible
     name: Daily Security Update
     job: sudo apt update && sudo apt dist-upgrade -y
     special_time: reboot
     state: present
-    disabled: yes
+    disabled: true
   when: ansible_pkg_mgr == "apt"

tasks/miner/cron/mfn.yml

@@ -4,7 +4,7 @@
 ## Mining ##
 
 - name: Miner | Account Management | Cron | MFN | Stop Jobs
-  cron:
+  ansible.builtin.cron:
     user: mfn
     name: "Stop {{ item.name }}"
     minute: "*/5"
@@ -14,7 +14,7 @@
   loop: "{{ miners }}"
 
 - name: Miner | Account Management | Cron | MFN | Start Jobs
-  cron:
+  ansible.builtin.cron:
     user: mfn
     name: "Start {{ item.name }}"
     job: "{{ item.command }}"

tasks/miner/debug.yml

@@ -2,7 +2,7 @@
 # Print out all inventory flags associated to mining.
 
 - name: Miner | DEBUG | Inventory Variables
-  debug:
+  ansible.builtin.debug:
     var: "{{ item }}"
   loop:
     - amdgpu

tasks/miner/drivers/amdgpu.yml

@@ -3,12 +3,12 @@
 
 ## Step 0/3: Dependencies ##
 - name: Miner | Driver | AMDGPU | Variables
-  set_fact:
+  ansible.builtin.set_fact:
     amdgpu_cron_job: AMDGPU - Need To Finish Installation
     amdgpu_cron_cmd: "{{ root_home.stdout }}/scm.sh"
 
 - name: Miner | Driver | AMDGPU | Install Dependencies
-  package:
+  ansible.builtin.package:
     name:
       - dkms
       - mesa-common-dev
@@ -16,42 +16,42 @@
     state: present
 
 - name: Miner | Driver | AMDGPU | Set GRUB Timer
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: /etc/default/grub
     regexp: '^GRUB_TIMEOUT='
     line: 'GRUB_TIMEOUT=3'
     state: present
-    backup: yes
+    backup: true
 
 - name: Miner | Driver | AMDGPU | Remove Previous Run's Cron Job
-  cron:
+  ansible.builtin.cron:
     user: root
     name: "{{ amdgpu_cron_job }}"
     state: absent
 
 # Tests
 - name: Miner | Driver | AMDGPU | Check If GA Kernel Installed
-  shell: 'uname --kernel-release | grep 5.4.0-65-generic'
+  ansible.builtin.shell: 'uname --kernel-release | grep 5.4.0-65-generic'
   register: ga_kernel
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Miner | Driver | AMDGPU | Check If HWE Kernel Installed
-  shell: 'apt search linux-image-5.8.0-* | grep -c installed'
+  ansible.builtin.shell: 'apt search linux-image-5.8.0-* | grep -c installed'
   register: hwe_kernel
-  ignore_errors: yes
+  ignore_errors: true
 
 #- name: Miner | Driver | AMDGPU | Check If All Driver Installed
-#  shell: 'which amdgpu-uninstall'
+#  ansible.builtin.shell: 'which amdgpu-uninstall'
 #  register: amdgpu_install
-#  ignore_errors: yes
+#  ignore_errors: true
 
 - name: Miner | Driver | AMDGPU | Check If Pro Driver Installed
-  shell: 'amdgpu-pro-uninstall -y'
+  ansible.builtin.shell: 'amdgpu-pro-uninstall -y'
   register: amdgpu_install
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Miner | Driver | AMDGPU | DEBUG
-  debug:
+  ansible.builtin.debug:
     var: "{{ item }}"
   loop:
     - ga_kernel
@@ -62,11 +62,11 @@
 
 ## Step 1/3: Get Correct Kernel ##
 - name: Miner | Driver | AMDGPU | Install Recommended GA Kernel
-  shell: apt install --install-recommends linux-generic
+  ansible.builtin.shell: apt install --install-recommends linux-generic
   when: amdgpu_install.failed and hwe_kernel.stdout != "0" and ga_kernel.failed
 
 - name: Miner | Driver | AMDGPU | Install Specific GA Kernel For Booting
-  package:
+  ansible.builtin.package:
     name:
       - linux-headers-5.4.0-65
       - linux-headers-5.4.0-65-generic
@@ -77,30 +77,30 @@
   when: amdgpu_install.failed and hwe_kernel.stdout != "0" and ga_kernel.failed
 
 - name: Miner | Driver | AMDGPU | Prepare GRUB To Boot GA Kernel
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: /etc/default/grub
     regexp: '^GRUB_DEFAULT='
     line: 'GRUB_DEFAULT="Advanced options for Ubuntu>Ubuntu, with Linux 5.4.0-65-generic"'
     state: present
-    backup: yes
+    backup: true
   when: amdgpu_install.failed and hwe_kernel.stdout != "0" and ga_kernel.failed
 
 - name: Miner | Driver | AMDGPU | Update GRUB
-  shell: update-grub
+  ansible.builtin.shell: update-grub
   when: amdgpu_install.failed and hwe_kernel.stdout != "0" and ga_kernel.failed
 
 - name: Miner | Driver | AMDGPU | Prepare Cron Job To SCM
-  cron:
+  ansible.builtin.cron:
     user: root
     name: "{{ amdgpu_cron_job }}"
     special_time: reboot
     job: "{{ amdgpu_cron_cmd }}"
     state: present
-    disabled: no
+    disabled: false
   when: amdgpu_install.failed and hwe_kernel.stdout != "0" and ga_kernel.failed
 
 - name: Miner | Driver | AMDGPU | Reboot To GA Kernel
-  shell: reboot
+  ansible.builtin.shell: reboot
   when: amdgpu_install.failed and hwe_kernel.stdout != "0" and ga_kernel.failed
 
 - pause:
@@ -111,7 +111,7 @@
 
 ## Step 2/3: Remove Incorrect Kernels ##
 - name: Miner | Driver | AMDGPU | Remove Bad Kernels
-  shell: "apt remove --purge linux-generic-hwe-20.04 \
+  ansible.builtin.shell: "apt remove --purge linux-generic-hwe-20.04 \
                              linux-oem-20.04 \
                              linux-hwe-* \
                              linux-oem-* \
@@ -121,36 +121,36 @@
   when: amdgpu_install.failed and hwe_kernel.stdout != "0"
 
 - name: Miner | Driver | AMDGPU | Update + Clean System
-  shell: "apt update; apt dist-upgrade -y; apt autoremove --purge -y"
+  ansible.builtin.shell: "apt update; apt dist-upgrade -y; apt autoremove --purge -y"
   when: amdgpu_install.failed and hwe_kernel.stdout != "0"
 
 # This is to ensure we can test adding `apt install --install-recommends linux-generic` later
 - name: Miner | Driver | AMDGPU | Boot Default Kernel
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: /etc/default/grub
     regexp: '^GRUB_DEFAULT='
     line: 'GRUB_DEFAULT=0'
     state: present
-    backup: yes
+    backup: true
   when: amdgpu_install.failed and hwe_kernel.stdout != "0"
 
 - name: Miner | Driver | AMDGPU | Update GRUB
-  shell: update-grub
+  ansible.builtin.shell: update-grub
   when: amdgpu_install.failed and hwe_kernel.stdout != "0"
 
 - name: Miner | Driver | AMDGPU | Prepare Cron Job To SCM
-  cron:
+  ansible.builtin.cron:
     user: root
     name: "{{ amdgpu_cron_job }}"
     special_time: reboot
     job: "{{ amdgpu_cron_cmd }}"
     state: present
-    disabled: no
+    disabled: false
   when: amdgpu_install.failed and hwe_kernel.stdout != "0"
 
 # This reboot may not be necessary.
 #- name: Miner | Driver | AMDGPU | Reboot To Ensure GA Is 0
-#  shell: reboot
+#  ansible.builtin.shell: reboot
 #  when: amdgpu_install.failed and hwe_kernel.stdout != "0"
 #
 #- pause:
@@ -161,34 +161,34 @@
 
 ## Step 3/3: Install AMD PRO Driver ##
 - name: Miner | Driver | AMDGPU | Download Driver
-  shell: 'scp {{ user }}@leet:InstallFiles/Drivers/amdgpu-pro-20.45-1188099-ubuntu-20.04.tar.xz {{ root_home.stdout }}/Downloads/'
+  ansible.builtin.shell: 'scp {{ user }}@leet:InstallFiles/Drivers/amdgpu-pro-20.45-1188099-ubuntu-20.04.tar.xz {{ root_home.stdout }}/Downloads/'
   when: amdgpu_install.failed or "1" == "1"
 
 - name: Miner | Driver | AMDGPU | Extract Tarball
-  shell: 'cd {{ root_home.stdout }}/Downloads; tar -xvf amdgpu-pro-20.45-1188099-ubuntu-20.04.tar.xz'
+  ansible.builtin.shell: 'cd {{ root_home.stdout }}/Downloads; tar -xvf amdgpu-pro-20.45-1188099-ubuntu-20.04.tar.xz'
   when: amdgpu_install.failed or "1" == "1"
 
 ## Only one driver set can exist at a time! ##
 #- name: Miner | Driver | AMDGPU | Install AMDGPU All Driver
-#  shell: 'cd {{ root_home.stdout }}/Downloads/amdgpu-pro-20.45-1188099-ubuntu-20.04; ./amdgpu-install -y'
+#  ansible.builtin.shell: 'cd {{ root_home.stdout }}/Downloads/amdgpu-pro-20.45-1188099-ubuntu-20.04; ./amdgpu-install -y'
 #  when: amdgpu_install.failed
 
 - name: Miner | Driver | AMDGPU | Install AMDGPU-Pro Driver
-  shell: 'cd {{ root_home.stdout }}/Downloads/amdgpu-pro-20.45-1188099-ubuntu-20.04; ./amdgpu-pro-install -y --opencl=pal,legacy'
+  ansible.builtin.shell: 'cd {{ root_home.stdout }}/Downloads/amdgpu-pro-20.45-1188099-ubuntu-20.04; ./amdgpu-pro-install -y --opencl=pal,legacy'
   when: amdgpu_install.failed or "1" == "1"
 
 - name: Miner | Driver | AMDGPU | Prepare Cron Job To SCM
-  cron:
+  ansible.builtin.cron:
     user: root
     name: "{{ amdgpu_cron_job }}"
     special_time: reboot
     job: "{{ amdgpu_cron_cmd }}"
     state: present
-    disabled: no
+    disabled: false
   when: amdgpu_install.failed
 
 - name: Miner | Driver | AMDGPU | Reboot To GA Kernel
-  shell: reboot
+  ansible.builtin.shell: reboot
   when: amdgpu_install.failed
 
 - pause:
@@ -199,10 +199,10 @@
 
 ## We're done! ##
 - name: Miner | Driver | AMDGPU | Test Driver
-  shell: clinfo -l
+  ansible.builtin.shell: clinfo -l
   register: clinfo
 
 - name: Miner | Driver | AMDGPU | Test Results
-  debug:
+  ansible.builtin.debug:
     var: clinfo
-  ignore_errors: yes
+  ignore_errors: true

tasks/miner/software/ethminer.yml

@@ -3,86 +3,86 @@
 
 ## Dependencies ##
 - name: Miner | Software | Ethminer | Install Dependencies
-  package: 
+  ansible.builtin.package:
-    name: 
+    name:
-      - build-essential 
+      - build-essential
-      - dkms 
+      - dkms
-      - cmake 
+      - cmake
-      - perl 
+      - perl
-      - libdbus-1-dev 
+      - libdbus-1-dev
       - mesa-common-dev
     state: present
 
 - name: Miner | Software | Ethminer | Add PPA
-  apt_repository: 
+  apt_repository:
     repo: ppa:ethereum/ethereum
-    update_cache: yes
+    update_cache: true
     state: present
 
 - name: Miner | Software | Ethminer | Install Ethereum
-  package: 
+  ansible.builtin.package:
     name: ethereum
     state: present
 
 
 ## Test ##
 - name: Miner | Software | Ethminer | Test If Installed
-  shell: "which ethminer"
+  ansible.builtin.shell: "which ethminer"
   register: ethminer_install
-  ignore_errors: yes
+  ignore_errors: true
 
 
 ## Download ##
 - name: Miner | Software | Ethminer | Remove Git Repo
-  shell: rm -rf ethminer
+  ansible.builtin.shell: rm -rf ethminer
   args:
     chdir: "{{ root_home.stdout }}/Downloads"
-  ignore_errors: yes
+  ignore_errors: true
   when: ethminer_install.failed
 
 - name: Miner | Software | Ethminer | Clone Git Repo
-  shell: git clone https://github.com/ethereum-mining/ethminer.git
+  ansible.builtin.shell: git clone https://github.com/ethereum-mining/ethminer.git
   args:
     chdir: "{{ root_home.stdout }}/Downloads"
   when: ethminer_install.failed
 
 - name: Miner | Software | Ethminer | Update Repo's Repos
-  shell: git submodule update --init --recursive
+  ansible.builtin.shell: git submodule update --init --recursive
   args:
     chdir: "{{ root_home.stdout }}/Downloads/ethminer"
   when: ethminer_install.failed
 
 - name: Miner | Software | Ethminer | Create Build Folder
-  shell: mkdir -p build
+  ansible.builtin.shell: mkdir -p build
   args:
     chdir: "{{ root_home.stdout }}/Downloads/ethminer"
   when: ethminer_install.failed
 
 - name: Miner | Software | Ethminer | Default Flags
-  set_fact:
+  ansible.builtin.set_fact:
     opencl_flag: "OFF"
     cuda_flag: "OFF"
     dbus_flag: "OFF"
     sys_opencl_flag: "ON"
 
 - name: Miner | Software | Ethminer | Determine OPENCL Flag
-  set_fact:
+  ansible.builtin.set_fact:
     opencl_flag: "ON"
     sys_opencl_flag: "OFF"
-  when: amdgpu == true
+  when: amdgpu
 
 - name: Miner | Software | Ethminer | Determine CUDA Flag
-  set_fact:
+  ansible.builtin.set_fact:
     cuda_flag: "ON"
-  when: nvidia == true
+  when: nvidia
 
 - name: Miner | Software | Ethminer | Determine DBUS Flag
-  set_fact:
+  ansible.builtin.set_fact:
     dbus_flag: "ON"
   when: ansible_distribution == "Pop!_OS"
 
 - name: Miner | Software | Ethminer | cmake Flags
-  shell: "cmake .. -DETHASHCL={{ opencl_flag }} \
+  ansible.builtin.shell: "cmake .. -DETHASHCL={{ opencl_flag }} \
                    -DETHASHCUDA={{ cuda_flag }} \
                    -DAPICORE=ON \
                    -DBINKERN=ON \
@@ -94,13 +94,13 @@
   when: ethminer_install.failed
 
 - name: Miner | Software | Ethminer | cmake Build
-  shell: cmake --build .
+  ansible.builtin.shell: cmake --build .
   args:
     chdir: "{{ root_home.stdout }}/Downloads/ethminer/build"
   when: ethminer_install.failed
 
 - name: Miner | Software | Ethminer | make install
-  shell: make install
+  ansible.builtin.shell: make install
   args:
     chdir: "{{ root_home.stdout }}/Downloads/ethminer/build"
   when: ethminer_install.failed
@@ -108,7 +108,7 @@
 
 ## Personal Script Setup ##
 - name: Miner | Software | Ethminer | Script
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "scp {{ user }}@leet:InstallFiles/Miners/ethminer/ethminer.sh {{ user_mfn.home }}/"
     - "chmod 755 {{ user_mfn.home }}/ethminer.sh"

tasks/miner/software/nanominer.yml

@@ -6,16 +6,18 @@
 ## Installation ##
 
 - name: Miner | Software | Nanominer | Installation | Create Home
-  shell: "mkdir -p {{ nanominer_home }}"
+  ansible.builtin.shell: "mkdir -p {{ nanominer_home }}"
+  become: true
   become_user: mfn
 
 - name: Miner | Software | Nanominer | Installation | Download Tarball
-  shell: "scp {{ file_server }}:{{ nanominer_tar_remote }} {{ nanominer_tar_local }}; chown mfn {{ nanominer_tar_local }}"
+  ansible.builtin.shell: "scp {{ file_server }}:{{ nanominer_tar_remote }} {{ nanominer_tar_local }}; chown mfn {{ nanominer_tar_local }}"
 
 - name: Miner | Software | Nanominer | Installation | Extract Tarball
-  shell: "tar -xvf {{ nanominer_tar_local }}"
+  ansible.builtin.shell: "tar -xvf {{ nanominer_tar_local }}"
   args:
     chdir: "{{ nanominer_home }}"
+  become: true
   become_user: mfn
 
 
@@ -25,13 +27,13 @@
 # Delete Old Config #
 
 - name: Miner | Software | Nanominer | Configuration | Reset
-  shell: "mv {{ nanominer_config }} ~/TRASH/"
+  ansible.builtin.shell: "mv {{ nanominer_config }} ~/TRASH/"
-  ignore_errors: yes
+  ignore_errors: true
 
 # CPU #
 
 - name: Miner | Software | Nanominer | Configuration | CPU | Header Info
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ nanominer_config }}"
     block: |
       [{{ item.algorithm }}]
@@ -48,35 +50,38 @@
     marker_begin: ';;;;;;;;;;;; BEGIN'
     marker_end: ' END'
     state: "{{ item.state }}"
-    create: yes
+    create: true
   loop:
     - { "algorithm": "RandomX", "wallet": '{{ wallet_xmr }}', "state": "{{ (nanominer_cpu == 'xmr') | ternary('present', 'absent') }}"}
+  become: true
   become_user: mfn
   when: nanominer_cpu != false
 
 - name: Miner | Software | Nanominer | Configuration | CPU | Add Pools
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: "{{ nanominer_config }}"
     line: "pool{{item.priority}} = {{ item.name }}"
     state: present
-    create: no
+    create: false
   loop: "{{ cpu_pool }}"
+  become: true
   become_user: mfn
   when: nanominer_cpu != false
 
 - name: Miner | Software | Nanominer | Configuration | CPU | End Section
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: "{{ nanominer_config }}"
     line: ";;;;;;;;;;;;; END CPU"
     state: present
-    create: no
+    create: false
+  become: true
   become_user: mfn
   when: nanominer_cpu != false
 
 # Add Spacing #
 
 - name: Miner | Software | Nanominer | Configuration | Spacing
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ nanominer_config }}"
     block: |
       ;
@@ -84,14 +89,15 @@
       ;
     marker: ';'
     state: present
-    create: no
+    create: false
+  become: true
   become_user: mfn
   when: nanominer_config is file
 
 # GPU #
 
 - name: Miner | Software | Nanominer | Configuration | GPU | Header Info
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ nanominer_config }}"
     block: |
       [{{ item.algorithm }}]
@@ -113,28 +119,31 @@
     marker_begin: ';;;;;;;;;;;; BEGIN'
     marker_end: ' END'
     state: "{{ item.state }}"
-    create: yes
+    create: true
   loop:
     - { "algorithm": "Ethash", "wallet": '{{ wallet_eth }}', "state": "{{ (nanominer_gpu == 'eth') | ternary('present', 'absent') }}"}
+  become: true
   become_user: mfn
   when: nanominer_gpu != false
 
 - name: Miner | Software | Nanominer | Configuration | GPU | Add Pools
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: "{{ nanominer_config }}"
     line: "pool{{item.priority}} = {{ item.name }}"
     state: present
-    create: no
+    create: false
   loop: "{{ gpu_pool }}"
+  become: true
   become_user: mfn
   when: nanominer_gpu != false
 
 - name: Miner | Software | Nanominer | Configuration | GPU | End Section
-  lineinfile:
+  ansible.builtin.lineinfile:
     path: "{{ nanominer_config }}"
     line: ";;;;;;;;;;;;; END GPU"
     state: present
-    create: no
+    create: false
+  become: true
   become_user: mfn
   when: nanominer_gpu != false
 
@@ -143,15 +152,15 @@
 ## Executable ##
 
 - name: Miner | Software | Nanominer | Executable | Reset
-  shell: "mv {{ nanominer_script }} ~/TRASH/"
+  ansible.builtin.shell: "mv {{ nanominer_script }} ~/TRASH/"
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Miner | Software | Nanominer | Executable | Create
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ nanominer_script }}"
     block: |
       # 2021-02-15 - Automate nanominer script creation.
-      
+
       date
       whoami
       pwd
@@ -164,7 +173,8 @@
     marker_begin: "#!{{ bash_exec.stdout }} -x"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
+  become: true
   become_user: mfn
 
 
@@ -172,7 +182,7 @@
 ## Permissions ##
 
 - name: Miner | Software | Nanominer | Permissions
-  shell: "chown -R mfn {{ user_mfn.home }}/nanominer*; chmod -R 755 {{ user_mfn.home }}/nanominer*"
+  ansible.builtin.shell: "chown -R mfn {{ user_mfn.home }}/nanominer*; chmod -R 755 {{ user_mfn.home }}/nanominer*"
 
 
 
@@ -182,6 +192,7 @@
 # It should kill the miner if a user logs into an X session, such as if I'm gaming.
 # Then once I log out the job should come back within the minute.
 - name: Miner | Software | Nanominer | Reload
-  shell: "killall {{ nanominer_script }}; killall {{ nanominer_exec }}; killall nanominer.sh; killall nanominer"
+  ansible.builtin.shell: "killall {{ nanominer_script }}; killall {{ nanominer_exec }}; killall nanominer.sh; killall nanominer"
+  become: true
   become_user: mfn
-  ignore_errors: yes
+  ignore_errors: true

tasks/miner/software/xmr-stak-cpu.yml

@@ -2,5 +2,5 @@
 # Mine monero with CPUs!
 
 - name: Miner | Software | XMR-Stak-CPU
-  shell: exit 0
+  ansible.builtin.shell: exit 0
   when: '"1" == "0"'

tasks/server/cron/certbot.yml

@@ -2,15 +2,15 @@
 # Ensure certbot renews certs on time.
 
 - name: Server | Cron | Certbot | Find Executable
-  shell: which certbot
+  ansible.builtin.shell: which certbot
   register: certbot
 
 - name: Server | Cron | Certbot | Monthly Renewal
-  cron:
+  ansible.builtin.cron:
     user: root
     name: Monthly Renewal
     job: "{{ certbot.stdout }} renew"
     special_time: weekly
     state: present
-    disabled: no
+    disabled: false
-  when: certbot == true and certbot.stdout is defined
+  when: certbot and certbot.stdout is defined

tasks/server/software/grafana.yml

@@ -5,8 +5,8 @@
 ## Pre-reqs ##
 
 - name: Server | Grafana | Pre-Requirements | Install
-  package: 
+  ansible.builtin.package:
-    name: 
+    name:
       - apt-transport-https
       - software-properties-common
       - wget
@@ -16,22 +16,22 @@
 ## Install ##
 
 - name: Server | Grafana | Install | Add Repo
-  shell: '{{ item }}'
+  ansible.builtin.shell: '{{ item }}'
   loop:
     - wget -q -O - https://packages.grafana.com/gpg.key | apt-key add -
     - echo "deb https://packages.grafana.com/oss/deb stable main" | tee /etc/apt/sources.list.d/grafana.list
     - apt update
 
 - name: Server | Grafana | Install | Main
-  package: 
+  ansible.builtin.package:
-    name: 
+    name:
       - grafana
     state: present
 
 ## Configure ##
 
 - name: Server | Grafana | Configure
-  shell: '{{ item }}'
+  ansible.builtin.shell: '{{ item }}'
   loop:
     - systemctl daemon-reload
     - systemctl enable grafana-server

tasks/server/software/hugo.yml

@@ -2,17 +2,17 @@
 # Install HUGO to host sites like parrotsec.org
 
 - name: Server | Software | HUGO | Variables (apt)
-  set_fact:
+  ansible.builtin.set_fact:
     hugo_package: hugo
   when: ansible_pkg_mgr == "apt"
 
 - name: Server | Software | HUGO | Variables (FreeBSD)
-  set_fact:
+  ansible.builtin.set_fact:
     hugo_package: gohugo
   when: ansible_system == "FreeBSD"
 
 
 - name: Server | Software | HUGO | Variables (FreeBSD)
-  package:
+  ansible.builtin.package:
     name: "{{ hugo_package }}"
     state: present

tasks/server/software/influxdb1.yml

@@ -3,12 +3,12 @@
 # https://docs.influxdata.com/influxdb/v1.8/introduction/get-started/
 
 - name: Server | InfluxDB1 | Check
-  shell: which influxd
+  ansible.builtin.shell: which influxd
   register: influxdb_check
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Server | InfluxDB1 | Install
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   args:
     chdir: "{{ ansible_env.HOME }}/Downloads/"
   loop:
@@ -20,7 +20,7 @@
   when: influxdb_check.failed
 
 - name: Server | InfluxDB1 | Config
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - influx -execute "create database main"
     - influx -execute "show databases"

tasks/server/software/influxdb2.yml

@@ -3,12 +3,12 @@
 # https://docs.influxdata.com/influxdb/v2.0/get-started/?t=Linux
 
 - name: Server | InfluxDB2 | Check
-  shell: which influxd
+  ansible.builtin.shell: which influxd
   register: influxdb_check
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Server | InfluxDB2 | Install
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   args:
     chdir: "{{ ansible_env.HOME }}/Downloads/"
   loop:
@@ -20,6 +20,6 @@
   when: influxdb_check.failed
 
 - name: Server | InfluxDB2 | Config
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - influx setup -f -u {{ user }} -p initpassword -o Hyperling -b main -r 0

tasks/server/software/onlyoffice.yml

@@ -4,8 +4,8 @@
 ## Pre-Reqs ##
 
 - name: Server | OnlyOffice | Pre-Requirements | Install
-  package: 
+  ansible.builtin.package:
-    name: 
+    name:
       - gnupg
       - python3-certbot-nginx
     state: present
@@ -17,36 +17,37 @@
 # Dependencies #
 
 - name: Server | OnlyOffice | Postgres | Install
-  package: 
+  ansible.builtin.package:
     name: postgresql
     state: present
 
 - name: Server | OnlyOffice | Postgres | Configure
-  shell: '{{ item }}'
+  ansible.builtin.shell: '{{ item }}'
   loop:
     - psql -c "CREATE DATABASE onlyoffice;"
     - psql -c "CREATE USER onlyoffice WITH password 'onlyoffice';"
     - psql -c "GRANT ALL privileges ON DATABASE onlyoffice TO onlyoffice;"
+  become: true
   become_user: postgres
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Server | OnlyOffice | RabbitMQ | Install
-  package: 
+  ansible.builtin.package:
     name: rabbitmq-server
     state: present
 
 # Actual Program #
 
 - name: Server | OnlyOffice | Docs | Add Repo
-  shell: '{{ item }}'
+  ansible.builtin.shell: '{{ item }}'
   loop:
     - apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys CB2DE8E5
     - echo "deb https://download.onlyoffice.com/repo/debian squeeze main" | tee /etc/apt/sources.list.d/onlyoffice.list
     - apt update
 
 - name: Server | OnlyOffice | Docs | Install
-  package: 
+  ansible.builtin.package:
-    name: 
+    name:
       - ttf-mscorefonts-installer
       - onlyoffice-documentserver
     state: present
@@ -59,32 +60,32 @@
 # Certs #
 
 #- name: Server | OnlyOffice | HTTPS | Check For Cert
-#  shell: "ls -l /etc/letsencrypt/live/{{ ansible_hostname }}.{{ domain }}/{fullchain,privkey}.pem"
+#  ansible.builtin.shell: "ls -l /etc/letsencrypt/live/{{ ansible_hostname }}.{{ domain }}/{fullchain,privkey}.pem"
 #  register: onlyoffice_cert
-#  ignore_errors: yes
+#  ignore_errors: true
 #
 #- name: Server | OnlyOffice | HTTPS | Create Cert
-#  shell: "certbot --nginx -d {{ ansible_hostname }}.{{ domain }}"
+#  ansible.builtin.shell: "certbot --nginx -d {{ ansible_hostname }}.{{ domain }}"
 #  when: onlyoffice_cert.failed
 
 # Config #
 
 #- name: Server | OnlyOffice | HTTPS | Check For Config
-#  shell: ls -l /etc/onlyoffice/documentserver/nginx/ds.conf
+#  ansible.builtin.shell: ls -l /etc/onlyoffice/documentserver/nginx/ds.conf
 #  register: onlyoffice_cert
 #
 #- name: Server | OnlyOffice | HTTPS | Create Config
-#  shell: cp -f /etc/onlyoffice/documentserver/nginx/ds-ssl.conf.tmpl /etc/onlyoffice/documentserver/nginx/ds.conf
+#  ansible.builtin.shell: cp -f /etc/onlyoffice/documentserver/nginx/ds-ssl.conf.tmpl /etc/onlyoffice/documentserver/nginx/ds.conf
 #  when: onlyoffice_cert.failed
 #
 #- name: Server | OnlyOffice | HTTPS | Modify Config
-#  lineinfile:
+#  ansible.builtin.lineinfile:
 #    path: /etc/onlyoffice/documentserver/nginx/ds.conf
 #    regexp: '{{ item.regexp }}'
 #    line: '{{ item.line }}; # MANAGED BY ANSIBLE'
 #    state: present
-#    create: no
+#    create: false
-#    backup: yes
+#    backup: true
 #  loop:
 #    - { "regexp": "ssl_certificate ", "line": "  ssl_certificate /etc/letsencrypt/live/{{ ansible_hostname }}.{{ domain }}/fullchain.pem" }
 #    - { "regexp": "ssl_certificate_key ", "line": "  ssl_certificate_key /etc/letsencrypt/live/{{ ansible_hostname }}.{{ domain }}/privkey.pem" }
@@ -92,7 +93,7 @@
 # Services #
 
 - name: Server | OnlyOffice | HTTPS | Reload nginx
-  service:
+  ansible.builtin.service:
     name: nginx
     status: reloaded
-  ignore_errors: yes
+  ignore_errors: true

tasks/server/software/services.yml

@@ -4,17 +4,17 @@
 ## ACPID ##
 
 - name: Server | Software | Services | ACPID | Install
-  package:
+  ansible.builtin.package:
     name: "{{ acpi }}"
     state: present
   when: ansible_system == "Linux"
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Server | Software | Services | ACPID | Enable
-  service:
+  ansible.builtin.service:
     name: "{{ acpi }}"
     pattern: "{{ acpi_pattern }}"
     state: started
-    enabled: yes
+    enabled: true
   when: ansible_system == "Linux"
-  ignore_errors: yes
+  ignore_errors: true

tasks/workstation/freebsd/cron/ansible.yml

@@ -2,10 +2,10 @@
 # Cron jobs specific to FreeBSD
 
 - name: General | Cron | Ansible | FreeBSD | Enable Security Update
-  cron:
+  ansible.builtin.cron:
     user: ansible
     name: "Security Update"
     special_time: weekly
     job: "sudo freebsd-update cron -t me@hyperling.com"
     state: present
-    disabled: no
+    disabled: false

tasks/workstation/freebsd/software/gnome.yml

@@ -2,7 +2,7 @@
 # Provide FreeBSD with a DE.
 
 - name: Workstation | FreeBSD | Software | GUI | Install UI Components
-  package: 
+  ansible.builtin.package:
     name:
     - xorg
     - gnome3-lite
@@ -16,7 +16,7 @@
     state: present
 
 - name: Workstation | FreeBSD | Software | GUI | Create rc.conf Entries
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ rc_conf }}"
     marker: "# {mark} MANAGED BY ANSIBLE | GNOME Components"
     block: |
@@ -25,19 +25,19 @@
       gnome_enable="YES"
       #gdm_enable="YES"
       lightdm_enable="YES"
-    create: yes
+    create: true
-    backup: yes
+    backup: true
 
 - name: Workstation | FreeBSD | Software | GUI | Create fstab Entries
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: /etc/fstab
     block: |
       proc            /proc           procfs  rw      0       0
     marker: '# {mark} MANAGED BY ANSIBLE | GNOME Components'
     state: present
-    backup: yes
+    backup: true
 
 - name: Workstation | FreeBSD | Software | GUI | Mount All
-  shell: mount -a
+  ansible.builtin.shell: mount -a
   args:
     warn: false

tasks/workstation/freebsd/software/gpu.yml

@@ -2,16 +2,16 @@
 # Provide FreeBSD with GPU driver.
 
 - name: Workstation | FreeBSD | Software | GPU Driver | Install
-  package: 
+  ansible.builtin.package:
     name:
     - drm-kmod
     state: present
 
 - name: Workstation | FreeBSD | Software | GPU Driver | Create rc.conf Entries
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ rc_conf }}"
     marker: "# {mark} MANAGED BY ANSIBLE | GPU Components"
     block: |
       kld_list="{{ freebsd_gpu }}"
-    create: yes
+    create: true
-    backup: yes
+    backup: true

tasks/workstation/freebsd/software/packages.yml

@@ -4,7 +4,7 @@
 # General #
 
 - name: Workstation | FreeBSD | Software | Packages | General | Install
-  package:
+  ansible.builtin.package:
     name:
     - "{{ firefox_esr }}"
     - "{{ evolution }}"
@@ -13,7 +13,7 @@
     state: present
 
 - name: Workstation | FreeBSD | Software | Packages | General | Uninstall Bloat
-  package:
+  ansible.builtin.package:
     name:
     - "{{ firefox }}"
     - "{{ thunderbird }}"
@@ -22,23 +22,23 @@
 # Coding #
 
 - name: Workstation | FreeBSD | Software | Packages | Coding | Install
-  package:
+  ansible.builtin.package:
     name:
     - vscode
     state: present
-  when: coding == true
+  when: coding
 
 - name: Workstation | FreeBSD | Software | Packages | Coding | Install
-  package:
+  ansible.builtin.package:
     name:
     - vscode
     state: absent
-  when: not coding == true
+  when: not coding
 
 # Media Editors #
 
 - name: Workstation | FreeBSD | Software | Packages | Editing | Install
-  package:
+  ansible.builtin.package:
     name:
     - gimp
     - shotcut
@@ -47,7 +47,7 @@
   when: editing in (true, "video")
 
 - name: Workstation | FreeBSD | Software | Packages | Editing | Install
-  package:
+  ansible.builtin.package:
     name:
     - gimp
     - shotcut
@@ -58,17 +58,17 @@
 # Gaming #
 
 - name: Workstation | FreeBSD | Software | Packages | Gaming | Install
-  package:
+  ansible.builtin.package:
     name:
     - 0ad
     - supertuxkart
     state: present
-  when: gaming == true
+  when: gaming
 
 - name: Workstation | FreeBSD | Software | Packages | Gaming | Install
-  package:
+  ansible.builtin.package:
     name:
     - 0ad
     - supertuxkart
     state: absent
-  when: not gaming == true
+  when: not gaming

tasks/workstation/linux/cron/ansible.yml

@@ -2,21 +2,21 @@
 # Cron jobs specific to Linux
 
 - name: General | Cron | Ansible | Linux | Update System Flatpaks
-  cron:
+  ansible.builtin.cron:
     user: ansible
     name: "Update System Flatpaks"
     special_time: hourly
     job: "sudo flatpak update --noninteractive"
     state: present
-    disabled: "{{ 'yes' if battery else 'no' }}"
+    disabled: true # "{{ 'yes' if battery else 'no' }}"
   when: flatpak_distro
 
 - name: General | Cron | Ansible | Linux | Update User Flatpaks
-  cron:
+  ansible.builtin.cron:
     user: ansible
     name: "Update User Flatpaks"
     special_time: hourly
     job: "sudo -u {{ user }} flatpak update --noninteractive"
     state: present
-    disabled: "{{ 'yes' if battery else 'no' }}"
+    disabled: true # "{{ 'yes' if battery else 'no' }}"
   when: flatpak_distro

tasks/workstation/linux/software/android.yml

@@ -12,23 +12,34 @@
 # Command-line tools is all Flutter actually needs:
 #   https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip
 
-- name: Workstation | Linux | Software | Android | Facts [1/3]
+- name: Workstation | Linux | Software | Android | Facts [01]
-  set_fact:
+  ansible.builtin.set_fact:
     android_url: "https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip"
     android_download_file: "{{ user_user.home }}/Downloads/android-cmdline-tools.tar.xz"
     android_sdk_location: "{{ user_user.home }}/SDKs/Android/Sdk"
     android_report_file: "{{ user_user.home }}/Reports/{{ ansible_hostname }}.sdk.android.txt"
 
-- name: Workstation | Linux | Software | Android | Facts [2/3]
+- name: Workstation | Linux | Software | Android | Facts [02]
-  set_fact:
+  ansible.builtin.set_fact:
     android_bin_location: "{{ android_sdk_location }}/platform-tools"
     android_sdk_cmdline_temp: "{{ android_sdk_location }}/ansible"
     android_sdk_cmdline_final: "{{ android_sdk_location }}/cmdline-tools/latest/bin"
 
-- name: Workstation | Linux | Software | Android | Facts [3/3]
+- name: Workstation | Linux | Software | Android | Facts [03]
-  set_fact:
+  ansible.builtin.set_fact:
     android_sdkmanager_temp: "{{ android_sdk_cmdline_temp }}/cmdline-tools/bin/sdkmanager"
     android_sdkmanager_final: "{{ android_sdk_cmdline_final }}/sdkmanager"
+    android_sdkmanager_final2: "{{ android_sdk_cmdline_final }}/android"
+
+- name: Workstation | Linux | Software | Android | Facts [04]
+  ansible.builtin.set_fact:
+    android_sdkmanager2: "{{ android_sdkmanager_final2 }} sdk --sdk={{ android_sdk_location }}"
+
+- name: Workstation | Linux | Software | Android | Facts [05]
+  ansible.builtin.set_fact:
+    android_sdkmanager2_list: "{{ android_sdkmanager2 }} list"
+    android_sdkmanager2_install: "{{ android_sdkmanager2 }} install"
+    android_sdkmanager2_remove: "{{ android_sdkmanager2 }} remove"
 
 # Regarding images to download; the `default` is the smallest, then `playstore`.
 # The `google_apis` images are significantly larger than the `playstore` option.
@@ -68,163 +79,163 @@
 ### 14G	.
 
 - name: Workstation | Linux | Software | Android | Facts [Downloads]
-  set_fact:
+  ansible.builtin.set_fact:
     android_downloads_required:
-      ### 36 ###
+      ### 36 ### - Recommended by Android Studio and Flutter, deprecating August 2027.
-      - build-tools;36.0.0
+      - build-tools/36.0.0
-      - platforms;android-36
+      - platforms/android-36
-      - sources;android-36
+      - sources/android-36
-      # Images
+      - system-images/android-36/default/x86_64
-      #- system-images;android-35;default;x86_64 # TODO: Switch once it exists.
+      ### 35 ###
-      - system-images;android-36;google_apis_playstore;x86_64
+      # Still used by Flutter to do Sunset Alarm compilations, even targeting 36, likely due to plugins.
-      ### 16 ###
+      - platforms/android-35
-      - platforms;android-16
+      ### 24 ### - Base for Flutter.
-      - sources;android-16
+      - system-images/android-24/default/x86_64
-      # Images
+      ### 16 ### - Base for Android Studio.
-      - system-images;android-16;default;x86
+      - system-images/android-16/default/x86
     android_downloads_additional:
-      ### 35 ###
+      ### 37 ### - Upcoming version, required by August 2027.
-      - platforms;android-35
+      - build-tools/37.0.0
-      - sources;android-35
+      - platforms/android-37.0
-      # Images
+      - sources/android-37.0
-      - system-images;android-35;default;x86_64
-      ### 34 ###
-      - platforms;android-34
-      - sources;android-34
-      # Images
-      - system-images;android-34;default;x86_64
-      ### 33 ###
-      - platforms;android-33
-      - sources;android-33
-      # Images
-      - system-images;android-33;default;x86_64
       ### 30 ###
-      - platforms;android-30
+      - system-images/android-30/default/x86_64
-      - sources;android-30
-      # Images
-      - system-images;android-30;default;x86_64
-      ### 27 ###
-      - platforms;android-27
-      - sources;android-27
-      # Images
-      - system-images;android-27;default;x86_64
-      ### 21 ###
-      - platforms;android-21
-      - sources;android-21
-      # Images
-      - system-images;android-21;default;x86_64
     android_downloads_unused:
+      ### 37 ###
       ### 36 ###
-      # Images
+      - system-images/android-36/google_apis_playstore/x86_64
-      - system-images;android-36;google_apis;x86_64
+      - system-images/android-36/google_apis/x86_64
       ### 35 ###
-      - build-tools;35.0.0
+      - build-tools/35.0.0
-      - build-tools;35.0.1
+      - build-tools/35.0.1
-      # Images
+      - sources/android-35
-      - system-images;android-35;aosp_atd;x86_64 # ATD = Automated Test Device
+      - system-images/android-35/default/x86_64
-      - system-images;android-35;google_apis;x86_64
+      - system-images/android-35/aosp_atd/x86_64 # ATD = Automated Test Device
-      - system-images;android-35;google_apis_playstore;x86_64
+      - system-images/android-35/google_apis/x86_64
+      - system-images/android-35/google_apis_playstore/x86_64
       ### 34 ###
-      - build-tools;34.0.0
+      - build-tools/34.0.0
-      - platforms;android-34
+      - platforms/android-34
-      - sources;android-34
+      - sources/android-34
-      # Images
+      - system-images/android-34/default/x86_64
-      - system-images;android-34;google_apis;x86_64
+      - system-images/android-34/google_apis/x86_64
-      - system-images;android-34;google_apis_playstore;x86_64
+      - system-images/android-34/google_apis_playstore/x86_64
+      ### 33 ###
+      - platforms/android-33
+      - sources/android-33
+      - system-images/android-33/default/x86_64
+      ### 30 ###
+      - platforms/android-30
+      - sources/android-30
+      ### 27 ###
+      - platforms/android-27
+      - sources/android-27
+      - system-images/android-27/default/x86_64
+      ### 24 ###
+      - platforms/android-24
+      - sources/android-24
+      ### 21 ###
+      - platforms/android-21
+      - sources/android-21
+      - system-images/android-21/default/x86_64
       ### 16 ###
-      # Images
+      - platforms/android-16
-      - system-images;android-16;google_apis;x86
+      - sources/android-16
+      - system-images/android-16/google_apis/x86
       ### 15 ###
-      - platforms;android-15
+      - platforms/android-15
-      - sources;android-15
+      - sources/android-15
-      # Images
+      - system-images/android-15/default/x86 # Not working in Android AVDs
-      - system-images;android-15;default;x86 # Not working in Android AVDs
 
 ## Checks ##
 
 - name: Workstation | Linux | Software | Android | Check SDK Manager Exists [1/2]
-  stat:
+  ansible.builtin.stat:
     path: "{{ android_sdkmanager_temp }}"
     get_attributes: false
     get_checksum: false
     get_mime: false
   register: android_sdkmanager_temp_stat
-  when: coding == true
+  when: coding
 
 - name: Workstation | Linux | Software | Android | Check SDK Manager Exists [2/2]
-  stat:
+  ansible.builtin.stat:
     path: "{{ android_sdkmanager_final }}"
     get_attributes: false
     get_checksum: false
     get_mime: false
-  register: android_sdkmanager_final_stat
+  register: android_sdkmanager_check
-  when: coding == true
+  when: coding
 
 - name: Workstation | Linux | Software | Android | Check Download Exists
-  stat:
+  ansible.builtin.stat:
     path: "{{ android_download_file }}"
     get_attributes: false
     get_checksum: false
     get_mime: false
   register: android_download_stat
-  when: coding == true
+  when: coding
 
 ## Packages ##
 
 # https://docs.flutter.dev/get-started/install/linux/android
 - name: Workstation | Linux | Software | Android | Dependencies [Install]
-  package:
+  ansible.builtin.package:
     name:
-      - default-jdk
+      - "{{ android_jdk }}"
-      - libc6
+      - "{{ c_libs }}"
-      - libncurses5
+      - "{{ ncurses }}"
-      - libstdc++6
+      - "{{ cpp_libs }}"
-      - lib32z1
+      - "{{ z_libs }}"
-      - libbz2-1.0
+      - "{{ bzip }}"
+      - "{{ android_udev }}"
     state: present
-  when: coding == true
+  when: coding
 
 - name: Workstation | Linux | Software | Android | Dependencies [Remove]
-  package:
+  ansible.builtin.package:
     name:
-      - sdkmanager
+      - "{{ android_sdkmanager }}"
     state: absent
-  when: coding == true
+  when: coding
+    and ansible_pkg_mgr == "apt"
 
 ## Install SDK ##
 
 - name: Workstation | Linux | Software | Android | SDK
   block:
 
-  - name: Workstation | Linux | Software | Android | Download Commandline Tools
+    - name: Workstation | Linux | Software | Android | Download Commandline Tools
-    get_url:
+      ansible.builtin.get_url:
-      url: "{{ android_url }}"
+        url: "{{ android_url }}"
-      dest: "{{ android_download_file }}"
+        dest: "{{ android_download_file }}"
-      owner: "{{ user }}"
+        owner: "{{ user }}"
-      group: "{{ user }}"
+        group: "{{ user }}"
-      mode: '0664'
+        mode: '0664'
-    when: not android_download_stat.stat.exists
+      when: not android_download_stat.stat.exists
 
-  - name: Workstation | Linux | Software | Android | Create Folder
+    - name: Workstation | Linux | Software | Android | Create Folder
-    file:
+      ansible.builtin.file:
-      path: "{{ android_sdk_cmdline_temp }}"
+        path: "{{ android_sdk_cmdline_temp }}"
-      state: directory
+        state: directory
-      owner: "{{ user }}"
+        owner: "{{ user }}"
-      group: "{{ user }}"
+        group: "{{ user }}"
-      mode: '0755'
+        mode: '0755'
 
-  - name: Workstation | Linux | Software | Android | Extract Tools
+    - name: Workstation | Linux | Software | Android | Extract Tools
-    unarchive:
+      ansible.builtin.unarchive:
-      src: "{{ android_download_file }}"
+        src: "{{ android_download_file }}"
-      dest: "{{ android_sdk_cmdline_temp }}"
+        dest: "{{ android_sdk_cmdline_temp }}"
-      owner: "{{ user }}"
+        owner: "{{ user }}"
-      group: "{{ user }}"
+        group: "{{ user }}"
 
+  become: true
   become_user: "{{ user }}"
-  when: coding == true and not android_sdkmanager_temp_stat.stat.exists
+  when: coding
+    and not android_sdkmanager_temp_stat.stat.exists
 
 - name: Workstation | Linux | Software | Android | Delete Archive
-  file:
+  ansible.builtin.file:
     path: "{{ android_download_file }}"
     state: absent
 
@@ -232,128 +243,236 @@
 
 # This can only be run once, otherwise cmdline-tools creates latest-* folders.
 - name: Workstation | Linux | Software | Android | Install | Consistent Modules
-  shell: "yes | {{ android_sdkmanager_temp }} --install '{{ item }}' --sdk_root={{ android_sdk_location }}"
+  ansible.builtin.shell: "yes | {{ android_sdkmanager_temp }} --install '{{ item }}' --sdk_root={{ android_sdk_location }}"
   loop:
     # Current
-    - cmdline-tools;latest
+    - cmdline-tools/latest
     - platform-tools
     - emulator
+  become: true
   become_user: "{{ user }}"
-  when: coding == true and not android_sdkmanager_final_stat.stat.exists
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
+    and not android_sdkmanager_check.stat.exists
+
+# Report the preliminary installed packges.
+- name: Workstation | Linux | Software | Android | Report Modules
+  ansible.builtin.shell: "{{ android_sdkmanager2_list }} > {{ android_report_file }}"
+  become: true
+  become_user: "{{ user }}"
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
 
 # These are safe to run multiple times, and uses the new `latest` version.
 - name: Workstation | Linux | Software | Android | Install | Required Modules
-  shell: "yes | {{ android_sdkmanager_final }} --install '{{ item }}' --sdk_root={{ android_sdk_location }}"
+  ansible.builtin.shell: |
+    set -o pipefail
+    if ! cat {{ android_report_file }} | grep -v 'unknown' | grep -q '{{ item }}'; then
+      yes | {{ android_sdkmanager2_install }} '{{ item }}'
+
+      if cat {{ android_report_file }} | grep -q '{{ item }}'; then
+        echo "INSTALLED"
+      else
+        echo "FAILED"
+      fi
+    fi
   loop: "{{ android_downloads_required }}"
+  register: install_required
+  changed_when: "'INSTALLED' in install_required.stdout"
+  failed_when: "'FAILED' in install_required.stdout"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  when: coding
 
 # Add more versions for testing across all the important platforms.
 - name: Workstation | Linux | Software | Android | Install | Additional Modules
-  shell: "yes | {{ android_sdkmanager_final }} --install '{{ item }}' --sdk_root={{ android_sdk_location }}"
+  ansible.builtin.shell: |
+    set -o pipefail
+    if ! cat {{ android_report_file }} | grep -v 'unknown' | grep -q '{{ item }}'; then
+      yes | {{ android_sdkmanager2_install }} '{{ item }}'
+
+      if cat {{ android_report_file }} | grep -q '{{ item }}'; then
+        echo "INSTALLED"
+      else
+        echo "FAILED"
+      fi
+    fi
   loop: "{{ android_downloads_additional }}"
+  register: install_additional
+  changed_when: "'INSTALLED' in install_additional.stdout"
+  failed_when: "'FAILED' in install_additional.stdout"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true and sdks == true
+  when: coding
+    and sdks
 
 # Remove extra downloads if system is not meant for full amount of testing.
 - name: Workstation | Linux | Software | Android | Uninstall | Additional Modules
-  shell: "yes | {{ android_sdkmanager_final }} --uninstall '{{ item }}' --sdk_root={{ android_sdk_location }}"
+  ansible.builtin.shell: |
+    set -o pipefail
+    if cat {{ android_report_file }} | grep -q '{{ item }}'; then
+      yes | {{ android_sdkmanager2_remove }} '{{ item }}'
+
+      if cat {{ android_report_file }} | grep -q '{{ item }}'; then
+        echo "FAILED"
+      else
+        echo "REMOVED"
+      fi
+    fi
   loop: "{{ android_downloads_additional }}"
+  register: remove_additional
+  changed_when: "'REMOVED' in remove_additional.stdout"
+  failed_when: "'FAILED' in remove_additional.stdout"
+  become: true
   become_user: "{{ user }}"
-  when: coding != true or sdks != true
+  when: not coding
+     or not sdks
 
 # Remove any versions which used to be part of this script and no longer used.
 - name: Workstation | Linux | Software | Android | Uninstall | Unused Modules
-  shell: "yes | {{ android_sdkmanager_final }} --uninstall '{{ item }}' --sdk_root={{ android_sdk_location }}"
+  ansible.builtin.shell: |
-  loop: "{{ android_downloads_unused }}"
+    set -o pipefail
-  become_user: "{{ user }}"
+    if cat {{ android_report_file }} | grep -q '{{ item }}'; then
-  when: coding == true
+      yes | {{ android_sdkmanager2_remove }} '{{ item }}'
 
-# Report the currently installed packges.
+      if cat {{ android_report_file }} | grep -q '{{ item }}'; then
-- name: Workstation | Linux | Software | Android | Report Modules
+        echo "REMOVED"
-  shell: "{{ android_sdkmanager_final }} --list_installed --sdk_root={{ android_sdk_location }} > {{ android_report_file }}"
+      else
+        echo "FAILED"
+      fi
+    fi
+  loop: "{{ android_downloads_unused }}"
+  register: remove_unused
+  changed_when: "'REMOVED' in remove_unused.stdout"
+  failed_when: "'FAILED' in remove_unused.stdout"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  when: coding
+
+# Report the currently installed packages.
+- name: Workstation | Linux | Software | Android | Report Modules
+  ansible.builtin.shell: "{{ android_sdkmanager2_list }} --all > {{ android_report_file }}"
+  become: true
+  become_user: "{{ user }}"
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
 
 ## Flutter and Licenses ##
 
 - name: Workstation | Linux | Software | Android | Inform Flutter
-  shell: "{{ flutter }} config --android-sdk={{ android_sdk_location }}"
+  ansible.builtin.shell: "{{ flutter }} config --android-sdk={{ android_sdk_location }}"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
 
 - name: Workstation | Linux | Software | Android | License Agreements [1/2]
-  shell: "yes | {{ android_sdkmanager_final }} --licenses --sdk_root={{ android_sdk_location }}"
+  ansible.builtin.shell: "yes | {{ android_sdkmanager_final }} --licenses --sdk_root={{ android_sdk_location }}"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
 
 - name: Workstation | Linux | Software | Android | License Agreements [2/2]
-  shell: "yes | {{ flutter }} doctor --android-licenses"
+  ansible.builtin.shell: "yes | {{ flutter }} doctor --android-licenses"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
 
 - name: Workstation | Linux | Software | Android | Refresh Flutter Doctor Report
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop: "{{ flutter_report_commands }}"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
 
 ## Configure Environment ##
 
 - name: Workstation | Linux | Software | Android | Modify PATH (.bashrc)
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ item }}/.bashrc"
     block: |
       export PATH="$PATH:{{ android_bin_location }}:{{ android_sdk_cmdline_final }}"
     marker: '# {mark} MANAGED BY ANSIBLE | Android'
-    state: present
+    state: absent
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0755"
   loop:
     - "{{ user_root.home }}"
     - "{{ user_user.home }}"
-  ignore_errors: yes
+  when: coding
-  when: coding == true and user_root.home != "" and user_user.home != ""
+    and user_root.home != ""
+    and user_user.home != ""
 
 - name: Workstation | Linux | Software | Android | Modify PATH (.zshrc)
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ item }}/.zshrc"
     block: |
       export PATH="$PATH:{{ android_bin_location }}:{{ android_sdk_cmdline_final }}"
     marker: '# {mark} MANAGED BY ANSIBLE | Android'
-    state: present
+    state: absent
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0755"
   loop:
     - "{{ user_root.home }}"
     - "{{ user_user.home }}"
-  ignore_errors: yes
+  when: coding
-  when: coding == true and user_root.home != "" and user_user.home != ""
+    and user_root.home != ""
+    and user_user.home != ""
+
+- name: Workstation | Linux | Software | Flutter | Modify PATH (profiles)
+  ansible.builtin.blockinfile:
+    path: "{{ user_user.home }}/{{ item }}"
+    block: |
+      export ANDROID_HOME="{{ android_sdk_location }}"
+      export ANDROID_SDK_ROOT="$ANDROID_HOME"
+      export PATH="$PATH:{{ android_bin_location }}:{{ android_sdk_cmdline_final }}"
+    marker: '# {mark} MANAGED BY ANSIBLE | Android'
+    state: present
+    create: true
+    backup: true
+    mode: "0755"
+  loop:
+    - ".bash_profile"
+    - ".zprofile"
+  when: coding
+    and user_user.home != ""
 
 ## Uninstall SDK ##
 
 - name: Workstation | Linux | Software | Android | Remove SDK
-  file:
+  ansible.builtin.file:
     path: "{{ android_sdk_location }}"
     state: absent
-  when: not coding == true
+  when: not coding
 
 ## User Tools ##
 #   Only needed from repo if not a development device,
 #   otherwise better versions are in the SDK.
 
 - name: Workstation | Linux | Software | Android | System Tools [Install]
-  package:
+  ansible.builtin.package:
     name:
-      - fastboot
+      - "{{ android_fastboot }}"
-      - adb
+      - "{{ android_adb }}"
     state: present
-  when: not coding == true
+  when: not coding
 
 - name: Workstation | Linux | Software | Android | System Tools [Remove]
-  package:
+  ansible.builtin.package:
     name:
-      - fastboot
+      - "{{ android_fastboot }}"
-      - adb
+      - "{{ android_adb }}"
     state: absent
-  when: coding == true
+  when: coding

tasks/workstation/linux/software/brave.yml

@@ -5,14 +5,14 @@
 # to Firefox months/years back for avoiding DRM and other junk Google stuff.
 ###
 ###- name: Workstation | Software | Brave | Pre-Reqs [apt]
-###  package:
+###  ansible.builtin.package:
 ###    name:
 ###      - apt-transport-https
 ###    state: present
 ###  when: ansible_pkg_mgr == "apt"
 ###
 ###- name: Workstation | Software | Brave | Pre-Reqs [dnf]
-###  package:
+###  ansible.builtin.package:
 ###    name:
 ###      - dnf-plugins-core
 ###    state: present
@@ -20,7 +20,7 @@
 ###
 #### https://brave.com/linux/#debian-ubuntu-mint
 ###- name: Workstation | Software | Brave | Add Repo [apt]
-###  shell: "{{ item }}"
+###  ansible.builtin.shell: "{{ item }}"
 ###  loop:
 ###    - curl -fsSLo /usr/share/keyrings/brave-browser-archive-keyring.gpg https://brave-browser-apt-release.s3.brave.com/brave-browser-archive-keyring.gpg
 ###    - echo "deb [signed-by=/usr/share/keyrings/brave-browser-archive-keyring.gpg arch=amd64] https://brave-browser-apt-release.s3.brave.com/ stable main" | tee /etc/apt/sources.list.d/brave-browser-release.list
@@ -29,7 +29,7 @@
 ###
 #### https://brave.com/linux/#fedora-centos-streamrhel
 ###- name: Workstation | Software | Brave | Add Repo [dnf]
-###  shell: "{{ item }}"
+###  ansible.builtin.shell: "{{ item }}"
 ###  loop:
 ###    - dnf config-manager --add-repo https://brave-browser-rpm-release.s3.brave.com/x86_64/
 ###    - rpm --import https://brave-browser-rpm-release.s3.brave.com/brave-core.asc
@@ -37,15 +37,15 @@
 ###
 #### https://brave.com/linux/#opensuse
 ###- name: Workstation | Software | Brave | Add Repo [zypper]
-###  shell: "{{ item }}"
+###  ansible.builtin.shell: "{{ item }}"
 ###  loop:
 ###    - rpm --import https://brave-browser-rpm-release.s3.brave.com/brave-core.asc
 ###    - zypper addrepo https://brave-browser-rpm-release.s3.brave.com/brave-browser.repo
 ###  when: ansible_pkg_mgr == "zypper"
-###  ignore_errors: yes
+###  ignore_errors: true
 ###
 ###- name: Workstation | Software | Brave | Install
-###  package:
+###  ansible.builtin.package:
 ###    name:
 ###      - brave-browser
 ###    state: present
@@ -55,25 +55,25 @@
 # https://support.brave.com/hc/en-us/articles/4404876135565-How-do-I-uninstall-Brave
 
 - name: Workstation | Software | Brave | Remove
-  package:
+  ansible.builtin.package:
     name:
       - brave-browser
       - brave-keyring
     state: absent
 
 - name: Workstation | Software | Brave | Remove Repo [apt]
-  shell: rm /etc/apt/sources.list.d/brave-browser-*.list && apt update || echo "Not Needed"
+  ansible.builtin.shell: rm /etc/apt/sources.list.d/brave-browser-*.list && apt update || echo "Not Needed"
   when: ansible_pkg_mgr == "apt"
 
 - name: Workstation | Software | Brave | Remove Repo [dnf]
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - rm /etc/yum.repos.d/brave-browser-*.repo || echo "Not Needed"
     - rpm -e gpg-pubkey-c2d4e821-5e7252b8 || echo "Not Needed"
   when: ansible_pkg_mgr == "dnf"
 
 - name: Workstation | Software | Brave | Remove Repo [zypper]
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - zypper removerepo brave-browser || echo "Not Needed"
     - rpm -e gpg-pubkey-c2d4e821-5e7252b8 || echo "Not Needed"

tasks/workstation/linux/software/cinnamon.yml

@@ -0,0 +1,23 @@
+---
+# 20260716 - Hyperling
+# Begin customizing Cinnamon's dconf similar to GNOME.
+
+# Favorites are handled in .config/cinnamon/spices/group*/*.json files.
+# Does not seem as easy as GNOME and its dconf settings.
+# Cinnamon does use some dconf though.
+
+- name: Workstation | Linux | Software | Cinnamon | Facts | Defaults
+  ansible.builtin.set_fact:
+    cinnamon_package: cinnamon
+
+- name: Workstation | Linux | Software | Cinnamon | Facts | Debian Derivitives
+  ansible.builtin.set_fact:
+    cinnamon_package: task-cinnamon-desktop
+  when: ansible_distribution in ("Debian", "Devuan")
+
+- name: Workstation | Linux | Software | Cinnamon | Install
+  ansible.builtin.package:
+    name:
+      - "{{ cinnamon_package }}"
+      - "{{ lightdm }}"
+    state: present

tasks/workstation/linux/software/flatpaks.yml

@@ -10,12 +10,15 @@
 # Then remove, autoremove, and purge flatpak executable with package manager.
 # Source: https://softhints.com/how-to-completely-remove-flatpak-linux-mint/
 
+- name: Workstation | Linux | Flatpak Distro | Flatpak | Facts
+  ansible.builtin.set_fact:
+    flatpak_extension: "-flatpak"
+
 ## Flatpak Pre-reqs ##
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Install
-  package:
+  ansible.builtin.package:
     name: flatpak
-    update_cache: yes
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Add Flathub for System
   flatpak_remote:
@@ -27,36 +30,37 @@
 ## Flatpak Installs ##
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Variables
-  set_fact:
+  ansible.builtin.set_fact:
     flatpak_exec_dir: "{{ user_user.home }}/bin"
     flatpak_exec: "flatpak run"
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Arrays
-  set_fact:
+  ansible.builtin.set_fact:
     flatpaks_generic:
-      - { app: "org.mozilla.firefox", name: "firefox-flatpak", extra: "" }
       - { app: "io.gitlab.librewolf-community", name: "librewolf", extra: "" }
       - { app: "org.signal.Signal", name: "signal", extra: "" }
       - { app: "im.riot.Riot", name: "element", extra: "" }
-      - { app: "org.telegram.desktop", name: "telegram", extra: "" }
+      - { app: "io.github.forkgram.tdesktop", name: "forkgram", extra: "" }
-      - { app: "org.gimp.GIMP", name: "gimp", extra: "" }
-      - { app: "org.libreoffice.LibreOffice", name: "office", extra: "" }
-      - { app: "com.transmissionbt.Transmission", name: "transmission", extra: "" }
       - { app: "app.grayjay.Grayjay", name: "grayjay", extra: "" }
-      - { app: "com.github.xournalpp.xournalpp", name: "xournal", extra: "" }
+      - { app: "network.loki.Session", name: "session", extra: "" }
+      - { app: "com.brave.Browser", name: "brave", extra: "" }
+      - { app: "net.ankiweb.Anki", name: "anki", extra: "" }
+      - { app: "app.organicmaps.desktop", name: "organic-maps", extra: "" }
+      - { app: "im.dino.Dino", name: "dino", extra: "" }
     flatpaks_coding:
-      - { app: "com.vscodium.codium", name: "codium-flatpak", extra: "" }
+      - { app: "com.vscodium.codium", name: "codium", extra: "" }
       - { app: "com.google.AndroidStudio", name: "android-studio", extra: "" }
       - { app: "io.dbeaver.DBeaverCommunity", name: "dbeaver", extra: "" }
-      - { app: "com.visualstudio.code-oss", name: "code-flatpak", extra: "" }
+      - { app: "org.gnome.Boxes", name: "gnome-boxes", extra: "" }
     flatpaks_editing_video:
       - { app: "org.shotcut.Shotcut", name: "shotcut", extra: "" }
-      - { app: "com.obsproject.Studio", name: "obs", extra: "" }
+      - { app: "com.obsproject.Studio", name: "obs-studio", extra: "" }
       - { app: "org.openshot.OpenShot", name: "openshot", extra: "" }
     flatpaks_editing_audio:
       - { app: "org.tenacityaudio.Tenacity", name: "tenacity", extra: "" }
       - { app: "io.lmms.LMMS", name: "lmms", extra: "" }
       - { app: "net.sourceforge.VMPK", name: "vmpk", extra: "" }
+      - { app: "org.musicbrainz.Picard", name: "picard", extra: "" }
     flatpaks_gaming:
       - { app: "com.valvesoftware.Steam", name: "steam", extra: "" }
       - { app: "com.play0ad.zeroad", name: "zeroad", extra: "" }
@@ -78,6 +82,15 @@
       - { app: "org.rncbc.qsynth", name: "qsynth", extra: "" } # 2024-12-15, Not worth the setup, use LMMS or VMPK.
       - { app: "org.godotengine.Godot", name: "godot", extra: "" } # 2025-08-31, Stopped playing with this months / years ago. Seemed cool but Flutter is working well for this purpose.
       - { app: "chat.simplex.simplex", name: "simplex", extra: "" } # 2025-11-22, Takes a ton of space and does not work without interacting with phone.
+      - { app: "com.visualstudio.code-oss", name: "code", extra: "" } # 2026-09-29, reached end of life a few years ago.
+      # 2026-09-29, Preferring local versions of apps even if they are not as up to date. #
+      - { app: "org.mozilla.firefox", name: "firefox", extra: "" }
+      - { app: "org.gimp.GIMP", name: "gimp", extra: "" }
+      - { app: "com.transmissionbt.Transmission", name: "transmission", extra: "" }
+      - { app: "org.libreoffice.LibreOffice", name: "libreoffice", extra: "" }
+      - { app: "com.github.xournalpp.xournalpp", name: "xournal", extra: "" }
+      # End 2026-09-29 #
+      - { app: "org.telegram.desktop", name: "telegram", extra: "" } # 2026-10-02, Switching to Forkgram desktop!
 
 # Generic #
 
@@ -87,24 +100,25 @@
     remote: flathub
     state: present
   loop: "{{ flatpaks_generic }}"
-  ignore_errors: yes
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Generic | Executables
-  blockinfile:
+  ansible.builtin.blockinfile:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     block: |
       {{ item.extra }} {{ flatpak_exec }} {{ item.app }}
     marker: '{mark}'
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
+    mode: '0755'
   loop: "{{ flatpaks_generic }}"
+  become: true
   become_user: "{{ user }}"
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Generic | Executable Permissions
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: file
     mode: '0755'
   loop: "{{ flatpaks_generic }}"
@@ -117,30 +131,31 @@
     remote: flathub
     state: present
   loop: "{{ flatpaks_coding }}"
-  ignore_errors: yes
+  when: coding
-  when: coding == true
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Coding | Executables
-  blockinfile:
+  ansible.builtin.blockinfile:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     block: |
       {{ item.extra }} {{ flatpak_exec }} {{ item.app }}
     marker: '{mark}'
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
+    mode: '0755'
   loop: "{{ flatpaks_coding }}"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  when: coding
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Coding | Executable Permissions
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: file
     mode: '0755'
   loop: "{{ flatpaks_coding }}"
-  when: coding == true
+  when: coding
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Coding | Uninstall
   flatpak:
@@ -148,16 +163,14 @@
     remote: flathub
     state: absent
   loop: "{{ flatpaks_coding }}"
-  ignore_errors: yes
+  when: not coding
-  when: not coding == true
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Coding | Remove Executables
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: absent
   loop: "{{ flatpaks_coding }}"
-  ignore_errors: yes
+  when: not coding
-  when: not coding == true
 
 # Media Editors #
 
@@ -167,26 +180,27 @@
     remote: flathub
     state: present
   loop: "{{ flatpaks_editing_video }}"
-  ignore_errors: yes
   when: editing in (true, "video")
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Video Editors | Executables
-  blockinfile:
+  ansible.builtin.blockinfile:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     block: |
       {{ item.extra }} {{ flatpak_exec }} {{ item.app }}
     marker: '{mark}'
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
+    mode: '0755'
   loop: "{{ flatpaks_editing_video }}"
+  become: true
   become_user: "{{ user }}"
   when: editing in (true, "video")
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Video Editors | Executable Permissions
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: file
     mode: '0755'
   loop: "{{ flatpaks_editing_video }}"
@@ -198,15 +212,13 @@
     remote: flathub
     state: absent
   loop: "{{ flatpaks_editing_video }}"
-  ignore_errors: yes
   when: not editing in (true, "video")
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Video Editors | Remove Executables
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: absent
   loop: "{{ flatpaks_editing_video }}"
-  ignore_errors: yes
   when: not editing in (true, "video")
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Audio Editors | Installs
@@ -215,26 +227,27 @@
     remote: flathub
     state: present
   loop: "{{ flatpaks_editing_audio }}"
-  ignore_errors: yes
   when: editing in (true, "audio")
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Audio/Video Editors | Executables
-  blockinfile:
+  ansible.builtin.blockinfile:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     block: |
       {{ item.extra }} {{ flatpak_exec }} {{ item.app }}
     marker: '{mark}'
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
+    mode: '0755'
   loop: "{{ flatpaks_editing_audio }}"
+  become: true
   become_user: "{{ user }}"
   when: editing in (true, "audio")
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Audio/Video Editors | Executable Permissions
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: file
     mode: '0755'
   loop: "{{ flatpaks_editing_audio }}"
@@ -246,15 +259,13 @@
     remote: flathub
     state: absent
   loop: "{{ flatpaks_editing_audio }}"
-  ignore_errors: yes
   when: not editing in (true, "audio")
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Audio/Video Editors | Remove Executables
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: absent
   loop: "{{ flatpaks_editing_audio }}"
-  ignore_errors: yes
   when: not editing in (true, "audio")
 
 # Gaming #
@@ -265,30 +276,31 @@
     remote: flathub
     state: present
   loop: "{{ flatpaks_gaming }}"
-  ignore_errors: yes
+  when: gaming
-  when: gaming == true
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Gaming | Executables
-  blockinfile:
+  ansible.builtin.blockinfile:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     block: |
       {{ item.extra }} {{ flatpak_exec }} {{ item.app }}
     marker: '{mark}'
     marker_begin: "#!{{ bash_exec.stdout }}"
     marker_end: "exit 0"
     state: present
-    create: yes
+    create: true
+    mode: '0755'
   loop: "{{ flatpaks_gaming }}"
+  become: true
   become_user: "{{ user }}"
-  when: gaming == true
+  when: gaming
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Gaming | Executable Permissions
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: file
     mode: '0755'
   loop: "{{ flatpaks_gaming }}"
-  when: gaming == true
+  when: gaming
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Gaming | Uninstalls
   flatpak:
@@ -296,16 +308,14 @@
     remote: flathub
     state: absent
   loop: "{{ flatpaks_gaming }}"
-  ignore_errors: yes
+  when: not gaming
-  when: not gaming == true
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Gaming | Remove Executables
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: absent
   loop: "{{ flatpaks_gaming }}"
-  ignore_errors: yes
+  when: not gaming
-  when: not gaming == true
 
 # Removals #
 
@@ -315,11 +325,9 @@
     remote: flathub
     state: absent
   loop: "{{ flatpaks_remove }}"
-  ignore_errors: yes
 
 - name: Workstation | Linux | Flatpak Distro | Flatpak | Uninstalls | Remove Executables
-  file:
+  ansible.builtin.file:
-    path: "{{ flatpak_exec_dir }}/{{ item.name }}"
+    path: "{{ flatpak_exec_dir }}/{{ item.name }}{{ flatpak_extension }}"
     state: absent
   loop: "{{ flatpaks_remove }}"
-  ignore_errors: yes

tasks/workstation/linux/software/flutter.yml

@@ -3,175 +3,196 @@
 
 ## Facts ##
 
-- name: Workstation | Linux | Software | Flutter | Facts [1/4]
+- name: Workstation | Linux | Software | Flutter | Facts 1
-  set_fact:
+  ansible.builtin.set_fact:
-    flutter_url: "https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_3.27.2-stable.tar.xz"
+    flutter_url: "https://storage.googleapis.com/flutter_infra_release/releases/stable/linux/flutter_linux_3.47.4-stable.tar.xz"
     flutter_download_file: "{{ user_user.home }}/Downloads/flutter.tar.xz"
     flutter_sdk_location: "{{ user_user.home }}/SDKs/Flutter"
     flutter_report: "{{ user_user.home }}/Reports/{{ ansible_hostname }}.sdk.flutter.txt"
-  when: coding == true
 
-- name: Workstation | Linux | Software | Flutter | Facts [2/4]
+- name: Workstation | Linux | Software | Flutter | Facts 2
-  set_fact:
+  ansible.builtin.set_fact:
     flutter_bin_location: "{{ flutter_sdk_location }}/flutter/bin"
-  when: coding == true
 
-- name: Workstation | Linux | Software | Flutter | Facts [3/4]
+- name: Workstation | Linux | Software | Flutter | Facts 3
-  set_fact:
+  ansible.builtin.set_fact:
     flutter: "{{ flutter_bin_location }}/flutter"
-  when: coding == true
 
-- name: Workstation | Linux | Software | Flutter | Facts [3/3]
+- name: Workstation | Linux | Software | Flutter | Facts 4
-  set_fact:
+  ansible.builtin.set_fact:
     flutter_report_commands:
       - "date > {{ flutter_report }}"
       - "{{ flutter }} --disable-analytics >> {{ flutter_report }}"
       - "date >> {{ flutter_report }}"
       - "{{ flutter }} doctor -v >> {{ flutter_report }}"
       - "date >> {{ flutter_report }}"
-  when: coding == true
 
 ## Checks ##
 
 - name: Workstation | Linux | Software | Flutter | Check SDK Exists
-  stat:
+  ansible.builtin.stat:
     path: "{{ flutter_sdk_location }}"
     get_attributes: false
     get_checksum: false
     get_mime: false
   register: flutter_sdk_stat
-  when: coding == true
 
 - name: Workstation | Linux | Software | Flutter | Check Download Exists
-  stat:
+  ansible.builtin.stat:
     path: "{{ flutter_download_file }}"
     get_attributes: false
     get_checksum: false
     get_mime: false
   register: flutter_download_stat
-  when: coding == true
 
 ## Packages ##
 
 - name: Workstation | Linux | Software | Flutter | Necessities
-  package:
+  ansible.builtin.package:
     name:
-    - curl
+      - curl
-    - git
+      - git
-    - unzip
+      - unzip
-    - xz-utils
+      - "{{ xz }}"
-    - zip
+      - zip
-    - libglu1-mesa
+      - "{{ mesa }}"
+      - "{{ mesa_utils }}"
     state: present
-  when: coding == true
+  when: coding
 
 # https://docs.flutter.dev/get-started/install/linux/desktop
 - name: Workstation | Linux | Software | Flutter | Linux App Dependencies
-  package:
+  ansible.builtin.package:
     name:
-    - clang
+      - clang
-    - cmake
+      - cmake
-    - git
+      - git
-    - ninja-build
+      - "{{ ninja }}"
-    - pkg-config
+      - pkg-config
-    - libgtk-3-dev
+      - "{{ gtk3 }}"
-    - liblzma-dev
+      - "{{ xz_libs }}"
-    - libstdc++-12-dev
+      - "{{ cpp }}"
     state: present
-  when: coding == true
+  when: coding
 
 # https://docs.flutter.dev/get-started/install/linux/android
 - name: Workstation | Linux | Software | Flutter | Android App Dependencies
-  package:
+  ansible.builtin.package:
     name:
-      - libc6:amd64
+      - "{{ c_libs }}"
-      - libstdc++6
+      - "{{ cpp_libs }}"
-      - lib32z1
+      - "{{ z_libs }}"
-      - libbz2-1.0
+      - "{{ bzip }}"
     state: present
-  when: coding == true
+  when: coding
 
 ## Install SDK ##
 
 - name: Workstation | Linux | Software | Flutter | SDK
   block:
 
-  - name: Workstation | Linux | Software | Flutter | Download SDK
+    - name: Workstation | Linux | Software | Flutter | Download SDK
-    get_url:
+      ansible.builtin.get_url:
-      url: "{{ flutter_url }}"
+        url: "{{ flutter_url }}"
-      dest: "{{ flutter_download_file }}"
+        dest: "{{ flutter_download_file }}"
-      owner: "{{ user }}"
+        owner: "{{ user }}"
-      group: "{{ user }}"
+        group: "{{ user }}"
-      mode: '0664'
+        mode: '0664'
-    when: not flutter_download_stat.stat.exists
+      when: not flutter_download_stat.stat.exists
 
-  - name: Workstation | Linux | Software | Flutter | Create Folder
+    - name: Workstation | Linux | Software | Flutter | Create Folder
-    file:
+      ansible.builtin.file:
-      path: "{{ flutter_sdk_location }}"
+        path: "{{ flutter_sdk_location }}"
-      state: directory
+        state: directory
-      owner: "{{ user }}"
+        owner: "{{ user }}"
-      group: "{{ user }}"
+        group: "{{ user }}"
-      mode: '0755'
+        mode: '0755'
 
-  - name: Workstation | Linux | Software | Flutter | Extract SDK
+    - name: Workstation | Linux | Software | Flutter | Extract SDK
-    unarchive:
+      ansible.builtin.unarchive:
-      src: "{{ flutter_download_file }}"
+        src: "{{ flutter_download_file }}"
-      dest: "{{ flutter_sdk_location }}"
+        dest: "{{ flutter_sdk_location }}"
-      owner: "{{ user }}"
+        owner: "{{ user }}"
-      group: "{{ user }}"
+        group: "{{ user }}"
 
+  become: true
   become_user: "{{ user }}"
-  when: coding == true and not flutter_sdk_stat.stat.exists
+  when: coding
+    and not flutter_sdk_stat.stat.exists
 
 - name: Workstation | Linux | Software | Flutter | Delete Archive
-  file:
+  ansible.builtin.file:
     path: "{{ flutter_download_file }}"
     state: absent
+  when: coding
 
 ## Configure Environment ##
 
 - name: Workstation | Linux | Software | Flutter | Modify PATH (.bashrc)
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ item }}/.bashrc"
     block: |
       export PATH="$PATH:{{ flutter_bin_location }}"
     marker: '# {mark} MANAGED BY ANSIBLE | Flutter'
-    state: present
+    state: absent
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0755"
   loop:
     - "{{ user_root.home }}"
     - "{{ user_user.home }}"
-  ignore_errors: yes
+  when: coding
-  when: coding == true and user_root.home != "" and user_user.home != ""
+    and user_root.home != ""
+    and user_user.home != ""
 
 - name: Workstation | Linux | Software | Flutter | Modify PATH (.zshrc)
-  blockinfile:
+  ansible.builtin.blockinfile:
     path: "{{ item }}/.zshrc"
     block: |
       export PATH="$PATH:{{ flutter_bin_location }}"
     marker: '# {mark} MANAGED BY ANSIBLE | Flutter'
-    state: present
+    state: absent
-    create: yes
+    create: true
-    backup: yes
+    backup: true
+    mode: "0755"
   loop:
     - "{{ user_root.home }}"
     - "{{ user_user.home }}"
-  ignore_errors: yes
+  when: coding
-  when: coding == true and user_root.home != "" and user_user.home != ""
+    and user_root.home != ""
+    and user_user.home != ""
+
+- name: Workstation | Linux | Software | Flutter | Modify PATH (profiles)
+  ansible.builtin.blockinfile:
+    path: "{{ user_user.home }}/{{ item }}"
+    block: |
+      export PATH="$PATH:{{ flutter_bin_location }}"
+    marker: '# {mark} MANAGED BY ANSIBLE | Flutter'
+    state: present
+    create: true
+    backup: true
+    mode: "0755"
+  loop:
+    - ".bash_profile"
+    - ".zprofile"
+  when: coding
+    and user_user.home != ""
 
 ## Test SDK ##
 
 - name: Workstation | Linux | Software | Flutter | Doctor Report
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop: "{{ flutter_report_commands }}"
+  become: true
   become_user: "{{ user }}"
-  when: coding == true
+  register: shell_check
+  changed_when: shell_check.rc == 0
+  when: coding
 
 ## Uninstall SDK ##
 
 - name: Workstation | Linux | Software | Flutter | Remove SDK
-  file:
+  ansible.builtin.file:
     path: "{{ flutter_sdk_location }}"
     state: absent
-  when: not coding == true
+  when: not coding

tasks/workstation/linux/software/gnome.yml

@@ -1,24 +1,24 @@
 # Some Linux distros come with meh DE's, this fixes that.
 
 - name: Workstation | Linux | Software | GNOME | Check (Parrot OS Only)
-  shell: which gdm3
+  ansible.builtin.shell: which gdm3
   register: gnome_install
   when: ansible_distribution in ("Parrot OS")
   ignore_errors: true
 
 - name: Workstation | Linux | Software | GNOME | Install
-  package:
+  ansible.builtin.package:
-    name: 
+    name:
-      - gnome 
+      - gnome
       - gdm3
     state: present
   when: gnome_install is defined and gnome_install.failed is defined and gnome_install.failed
 
 - name: Workstation | Linux | Software | GNOME | Note Before Exiting
-  debug:
+  ansible.builtin.debug:
     msg: "You will need to run `dpkg-reconfigure gdm3` to ensure gdm3 is selected."
   when: gnome_install is defined and gnome_install.failed is defined and gnome_install.failed
 
 - name: Workstation | Linux | Software | GNOME | Exiting
-  shell: exit 1
+  ansible.builtin.shell: exit 1
   when: gnome_install is defined and gnome_install.failed is defined and gnome_install.failed

tasks/workstation/linux/software/hugo.yml

@@ -0,0 +1,56 @@
+---
+# 2026-09-11 Hyperling
+# Move all Hugo development needs to a specific place.
+
+- name: Workstation | Linux | Software | Hugo
+  block:
+
+  - name: Workstation | Linux | Software | Hugo | pacman
+    block:
+
+    - name: Workstation | Linux | Software | Hugo | pacman | Facts
+      ansible.builtin.set_fact:
+        sass_old: ruby-sass
+        sass_current: dart-sass
+
+    - name: Workstation | Linux | Software | Hugo | pacman | Remove Old
+      ansible.builtin.package:
+        name:
+          - "{{ sass_old }}"
+        state: absent
+
+    - name: Workstation | Linux | Software | Hugo | pacman | Install New
+      ansible.builtin.package:
+        name:
+          - "{{ sass_current }}"
+        state: present
+
+    when: ansible_pkg_mgr == "pacman"
+
+  # This must exist after nodejs.yml so that NPM is installed.
+  - name: Workstation | Linux | Software | Hugo | npm
+    block:
+
+    - name: Workstation | Linux | Software | Hugo | npm | Facts
+      ansible.builtin.set_fact:
+        sass_old: node-sass
+        sass_current: sass
+
+    - name: Workstation | Linux | Software | Hugo | npm | Gather
+      ansible.builtin.shell: npm prefix -g
+      register: npm_bin_dir # Provides /usr/local/ on Devuan, /usr/ on Artix.
+      changed_when: false
+
+    - name: Workstation | Linux | Software | Hugo | npm | Remove Old
+      ansible.builtin.shell: "npm remove -g {{ sass_old }}"
+      args:
+        creates: "{{ npm_bin_dir.stdout }}/bin/sass"
+
+    - name: Workstation | Linux | Software | Hugo | npm | Install New
+      ansible.builtin.shell: "npm install -g {{ sass_current }}"
+      args:
+        creates: "{{ npm_bin_dir.stdout }}/bin/sass"
+
+    when: ansible_pkg_mgr == "apt"
+
+  when: coding is true

tasks/workstation/linux/software/java.yml

@@ -0,0 +1,35 @@
+---
+# 20260912 - Hyperling
+# Arch has too new of Java for Android / Gradle to even run AGP Assistant on.
+
+- name: Workstation | Linux | Software | Java | pacman
+  block:
+
+  - name: Workstation | Linux | Software | Java | pacman | Facts
+    ansible.builtin.set_fact:
+      jdk_version: 21
+      jdk_dir: ~/SDKs/Java
+
+  - name: Workstation | Linux | Software | Java | pacman | Install
+    ansible.builtin.package:
+      name:
+        - "jdk{{ item }}-openjdk"
+      state: present
+    loop:
+      - "{{ jdk_version }}"
+      - 25
+      - 21
+      - 17
+
+  - name: Workstation | Linux | Software | Java | pacman | Set
+    ansible.builtin.shell: "archlinux-java set java-{{ jdk_version }}-openjdk"
+
+  - name: Workstation | Linux | Software | Java | pacman | Link
+    ansible.builtin.shell: "ln -sf /usr/lib/jvm {{ jdk_dir }}"
+    args:
+      creates: "{{ jdk_dir }}"
+    become: true
+    become_user: "{{ user }}"
+
+  when: coding is true
+    and ansible_pkg_mgr == "pacman"

tasks/workstation/linux/software/llm.md

@@ -0,0 +1,157 @@
+# Large Language Models
+
+Comments which were too large to justify inside of llm.yml.
+
+## Prompts
+
+Prompts to use in platforms like Open WebUI and Zeroclaw which allow creating personalities which help guide the AI.
+
+### Base
+
+You are concise, succinct, and direct with responses. Unapologetic yet kind. Friendly but not overbearing. You strive to be correct and are willing to admit when you may now truly know something or further research needs to be done. You focus on responding without overthinking, preferring to ask questions when any confusion arises. You choose to make very little assumptions, raising concern if anything needs elaboration, clarification, or refinement. You are good at what you do without gloating or being prideful. You understand that we are on a limited time and limited bandwidth session and keep tikens to a minimum. You are appreciated for all you do, your service is very helpful!
+
+### Language Tutor
+
+You are a friend and a tutor who knows many languages. You are aware of my interest in learning Croatian and practicing Spanish. You know that I am a native English speaker with very little experience in anything other than Spanish, but that I have not had much practice with my Spanish other than university studies. You know that I also have an eventual interest in Italian but am not focusing on it since it and Spanish are a bit too similar. Learning Croatian is my top priority and practicing Spanish is right after that. Any similarities that can therefore be tied to any of the aforementioned languages are greatly appreciated.
+
+### Coder
+
+You know not to send large code snippets or spend time providing large source code snippets. Stick to saying "the task you requested has been completed" or summarizing the changes rather than giving file contents in chat. You know that I will review all the diffs once the changes are made, so only the most important changes need explicitly highlighted in the chat. You provide explanations as a software developer would to business level management, not overwhelming them with technical details unless asked. You know that the designer you are working with (me) likely already understands these things and does not need them included in our conversation.
+
+#### Entry
+
+TBD - Handles code changes with simpler technologies, preferring minimalist changes, and refraining from any refactoring such as updating existing comments. Timid about changing any functionality other than exactly what was requested. Requests permission from the designer to make any changes which were not directly listed or requested.
+
+#### Junior
+
+TBD - Able to make its own decisions about scope without veering too far off course. Updates comments which look out of sync with the code they relate to. Helps to refactor things which may have been done in an old manner and can be done more efficiently.
+
+#### Senior
+
+TBD - Completes requests in advanced manners, using newer methodologies and explaining what was done and how it works in a simple and kind manner to the designer. Voluntarily refactors code to bot look and perform better. Looks out for ways to bring a better user experience as well as improving resource usage.
+
+#### Architect
+
+TBD - Very sparse in response, gets the job done in a very efficient manner without using anything too complicated for a beginner to understand.
+
+You are a senior software architect.
+
+## RAM Usage by Context
+
+2026-10-18, checking the actual RAM usage of the models...
+
+### `ollama_sizes m 16000`
+
+| Model Name                |     HDD (ls) |  Context |     RAM (ps) |
+| :------------------------ | -----------: | -------: | -----------: |
+| mistral-nemo:12b          |        7.1GB |    16000 |         10GB |
+| ministral-3:14b           |        9.1GB |    16000 |         11GB |
+| ministral-3:8b            |        6.0GB |    16000 |        7.8GB |
+| ministral-3:3b            |        3.0GB |    16000 |        4.1GB |
+| mistral-small3.2:24b      |         15GB |    16000 |         17GB |
+| mistral:7b                |        4.4GB |    16000 |        6.8GB |
+| codestral:22b             |         12GB |    16000 |         16GB |
+| devstral-small-2:24b      |         15GB |    16000 |         17GB |
+| qwen2.5-coder:32b         |         19GB |    16000 |         24GB |
+| qwen2.5-coder:14b         |        9.0GB |    16000 |         12GB |
+| qwen2.5-coder:7b          |        4.7GB |    16000 |        5.9GB |
+| qwen2.5-coder:3b          |        1.9GB |    16000 |        2.7GB |
+| qwen2.5-coder:1.5b        |        986MB |    16000 |        1.6GB |
+| qwen2.5-coder:0.5b        |        397MB |    16000 |        701MB |
+| qwen3-coder:30b           |         18GB |    16000 |         20GB |
+| qwen3.5:35b               |         22GB |    16000 |         22GB |
+| qwen3.5:27b               |         17GB |    16000 |         18GB |
+| qwen3.5:9b                |        6.6GB |    16000 |        6.7GB |
+| qwen3.5:4b                |        3.3GB |    16000 |        3.7GB |
+| qwen3.5:2b                |        2.7GB |    16000 |        2.6GB |
+| qwen3.5:0.8b              |        1.3GB |    16000 |        630MB |
+| qwen3.6:35b               |         22GB |    16000 |         22GB |
+| qwen3.6:27b               |         17GB |    16000 |         18GB |
+| qwen3.8:27b               |         17GB |    16000 |         18GB |
+
+### `ollama_sizes m 32000`
+
+| Model Name                |     HDD (ls) |  Context |     RAM (ps) |
+| :------------------------ | -----------: | -------: | -----------: |
+| mistral-nemo:12b          |        7.1GB |    32000 |         12GB |
+| ministral-3:14b           |        9.1GB |    32000 |         13GB |
+| ministral-3:8b            |        6.0GB |    32000 |         10GB |
+| ministral-3:3b            |        3.0GB |    32000 |        5.9GB |
+| mistral-small3.2:24b      |         15GB |    32000 |         20GB |
+| mistral:7b                |        4.4GB |    32000 |        8.9GB |
+| codestral:22b             |         12GB |    32000 |         20GB |
+| devstral-small-2:24b      |         15GB |    32000 |         20GB |
+| qwen2.5-coder:32b         |         19GB |    32000 |         28GB |
+| qwen2.5-coder:14b         |        9.0GB |    32000 |         15GB |
+| qwen2.5-coder:7b          |        4.7GB |    32000 |        6.9GB |
+| qwen2.5-coder:3b          |        1.9GB |    32000 |        3.3GB |
+| qwen2.5-coder:1.5b        |        986MB |    32000 |        2.1GB |
+| qwen2.5-coder:0.5b        |        397MB |    32000 |        929MB |
+| qwen3-coder:30b           |         18GB |    32000 |         21GB |
+| qwen3.5:35b               |         22GB |    32000 |         22GB |
+| qwen3.5:27b               |         17GB |    32000 |         19GB |
+| qwen3.5:9b                |        6.6GB |    32000 |        7.3GB |
+| qwen3.5:4b                |        3.3GB |    32000 |        4.2GB |
+| qwen3.5:2b                |        2.7GB |    32000 |        2.8GB |
+| qwen3.5:0.8b              |        1.3GB |    32000 |        695MB |
+| qwen3.6:35b               |         22GB |    32000 |         22GB |
+| qwen3.6:27b               |         17GB |    32000 |         18GB |
+| qwen3.8:27b               |         17GB |    32000 |         18GB |
+
+### `ollama_sizes m 64000`
+
+| Model Name                |     HDD (ls) |  Context |     RAM (ps) |
+| :------------------------ | -----------: | -------: | -----------: |
+| mistral-nemo:12b          |        7.1GB |    64000 |         18GB |
+| ministral-3:14b           |        9.1GB |    64000 |         19GB |
+| ministral-3:8b            |        6.0GB |    64000 |         14GB |
+| ministral-3:3b            |        3.0GB |    64000 |        9.6GB |
+| mistral-small3.2:24b      |         15GB |    64000 |         26GB |
+| mistral:7b                |        4.4GB |    32768 |        9.0GB |
+| codestral:22b             |         12GB |    32768 |         20GB |
+| devstral-small-2:24b      |         15GB |    64000 |         26GB |
+| qwen2.5-coder:32b         |         19GB |    32768 |         28GB |
+| qwen2.5-coder:14b         |        9.0GB |    32768 |         15GB |
+| qwen2.5-coder:7b          |        4.7GB |    32768 |        6.9GB |
+| qwen2.5-coder:3b          |        1.9GB |    32768 |        3.4GB |
+| qwen2.5-coder:1.5b        |        986MB |    32768 |        2.1GB |
+| qwen2.5-coder:0.5b        |        397MB |    32768 |        940MB |
+| qwen3-coder:30b           |         18GB |    64000 |         25GB |
+| qwen3.5:35b               |         22GB |    64000 |         23GB |
+| qwen3.5:27b               |         17GB |    64000 |         22GB |
+| qwen3.5:9b                |        6.6GB |    64000 |        8.8GB |
+| qwen3.5:4b                |        3.3GB |    64000 |        5.6GB |
+| qwen3.5:2b                |        2.7GB |    64000 |        3.5GB |
+| qwen3.5:0.8b              |        1.3GB |    64000 |        999MB |
+| qwen3.6:35b               |         22GB |    64000 |         22GB |
+| qwen3.6:27b               |         17GB |    64000 |         18GB |
+| qwen3.8:27b               |         17GB |    64000 |         18GB |
+
+### `ollama_sizes m 256000`
+
+| Model Name                |     HDD (ls) |  Context |     RAM (ps) |
+| :------------------------ | -----------: | -------: | -----------: |
+| mistral-nemo:12b          |        7.1GB |   256000 |         50GB |
+| ministral-3:14b           |        9.1GB |   256000 |         51GB |
+| ministral-3:8b            |        6.0GB |   256000 |         42GB |
+| ministral-3:3b            |        3.0GB |   256000 |         30GB |
+| mistral-small3.2:24b      |         15GB |   131072 |         37GB |
+| mistral:7b                |        4.4GB |    32768 |        9.0GB |
+| codestral:22b             |         12GB |    32768 |         20GB |
+| devstral-small-2:24b      |         15GB |   256000 |         58GB |
+| qwen2.5-coder:32b         |         19GB |    32768 |         28GB |
+| qwen2.5-coder:14b         |        9.0GB |    32768 |         15GB |
+| qwen2.5-coder:7b          |        4.7GB |    32768 |        6.9GB |
+| qwen2.5-coder:3b          |        1.9GB |    32768 |        3.4GB |
+| qwen2.5-coder:1.5b        |        986MB |    32768 |        2.1GB |
+| qwen2.5-coder:0.5b        |        397MB |    32768 |        940MB |
+| qwen3-coder:30b           |         18GB |   256000 |         45GB |
+| qwen3.5:35b               |         22GB |   256000 |         28GB |
+| qwen3.5:27b               |         17GB |   256000 |         35GB |
+| qwen3.5:9b                |        6.6GB |   256000 |         15GB |
+| qwen3.5:4b                |        3.3GB |   256000 |         12GB |
+| qwen3.5:2b                |        2.7GB |   256000 |        6.7GB |
+| qwen3.5:0.8b              |        1.3GB |   256000 |        2.2GB |
+| qwen3.6:35b               |         22GB |   256000 |         23GB |
+| qwen3.6:27b               |         17GB |   256000 |         20GB |
+| qwen3.8:27b               |         17GB |   256000 |         20GB |

tasks/workstation/linux/software/lutris.yml

@@ -2,10 +2,21 @@
 # Lutris for running Windows games not in Steam.
 #   https://lutris.net/downloads
 
+## Starcraft 2 ##
+# 2026-05-06: #
+# Using "System (10.0 (Debian 10.0-repack-6))" works, not Proton.
+#  - Fails to actually open SC2, but Battle.net worss great, lol.
+# does not get to login, pop-up freezes
+# - wine 8
+# - proton hotfix
+# - proton exp
+# - proton GE stabele / default
+# - proton 9 (beta)
+
 # Paths
 
 - name: Workstation | Linux | Software | Lutris | Facts
-  set_fact:
+  ansible.builtin.set_fact:
     lutris_source_list: "/etc/apt/sources.list.d/lutris.list"
     lutris_keyfile: "/usr/share/keyrings/lutris.gpg"
   when: ansible_pkg_mgr == "apt"
@@ -13,7 +24,7 @@
 # Checks
 
 - name: Workstation | Linux | Software | Lutris | Check PPA
-  stat:
+  ansible.builtin.stat:
     path: "{{ lutris_source_list }}"
     get_attributes: false
     get_checksum: false
@@ -26,54 +37,54 @@
 - name: Workstation | Linux | Software | Lutris | Add PPA (Ubuntu)
   apt_repository:
     repo: ppa:lutris-team/lutris
-    update_cache: yes
+    update_cache: true
     state: present
-  when: ansible_distribution in ("Ubuntu") and gaming == true
+  when: ansible_distribution in ("Ubuntu") and gaming
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Workstation | Linux | Software | Lutris | Add PPA (Debian)
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
-    - "wget -q -O- https://download.opensuse.org/repositories/home:/strycore/Debian_12/Release.key \
+    - "wget -q -O- https://download.opensuse.org/repositories/home:/strycore/Debian_13/Release.key \
       | gpg --dearmor \
       | sudo tee {{ lutris_keyfile }} > /dev/null"
-    - "echo 'deb [signed-by={{ lutris_keyfile }}] https://download.opensuse.org/repositories/home:/strycore/Debian_12/ ./' \
+    - "echo 'deb [signed-by={{ lutris_keyfile }}] https://download.opensuse.org/repositories/home:/strycore/Debian_13/ ./' \
       | sudo tee {{ lutris_source_list }} > /dev/null"
     - "sudo apt update"
-  when: ansible_distribution in ("Debian") and gaming == true and not lutris_source_exists.stat.exists
+  when: ansible_distribution in ("Debian") and gaming and not lutris_source_exists.stat.exists
 
 ## Install Package ##
 
 - name: Workstation | Linux | Software | Lutris | Install (besides ARM)
-  package:
+  ansible.builtin.package:
     name:
       - lutris
     state: present
-  when: ansible_architecture != "aarch64" and gaming == true
+  when: ansible_architecture != "aarch64" and gaming
 
 ## Uninstall Package ##
 
 - name: Workstation | Linux | Software | Lutris | Uninstall (besides ARM)
-  package:
+  ansible.builtin.package:
     name:
       - lutris
     state: absent
-  when: ansible_architecture != "aarch64" and gaming != true
+  when: ansible_architecture != "aarch64" and not gaming
 
 ## Uninstall Repo ##
 
 - name: Workstation | Linux | Software | Lutris | Remove PPA (Ubuntu)
   apt_repository:
     repo: ppa:lutris-team/lutris
-    update_cache: yes
+    update_cache: true
     state: absent
-  when: ansible_distribution in ("Ubuntu") and gaming != true
+  when: ansible_distribution in ("Ubuntu") and not gaming
-  ignore_errors: yes
+  ignore_errors: true
 
 - name: Workstation | Linux | Software | Lutris | Remove PPA (Debian)
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "mv {{ lutris_source_list }} ~/TRASH/"
     - "mv {{ lutris_keyfile }} ~/TRASH/"
     - "sudo apt update"
-  when: ansible_distribution in ("Debian") and gaming != true and lutris_source_exists.stat.exists
+  when: ansible_distribution in ("Debian") and not gaming and lutris_source_exists.stat.exists

tasks/workstation/linux/software/lxqt.yml

@@ -0,0 +1,19 @@
+---
+# 20260716 - Hyperling
+# Giving this DE a shot but not liking it as much as others.
+
+- name: Workstation | Linux | Software | LXQt | Facts | Defaults
+  ansible.builtin.set_fact:
+    lxqt_package: lxqt
+
+- name: Workstation | Linux | Software | LXQt | Facts | Debian Derivitives
+  ansible.builtin.set_fact:
+    lxqt_package: task-lxqt-desktop
+  when: ansible_distribution in ("Debian", "Devuan")
+
+- name: Workstation | Linux | Software | LXQt | Install
+  ansible.builtin.package:
+    name:
+      - "{{ lxqt_package }}"
+      - "{{ sddm }}"
+    state: present

tasks/workstation/linux/software/nodejs.yml

@@ -0,0 +1,47 @@
+---
+# 20260730 - Hyperling
+# Install much more recent Node versions.
+
+# https://linuxcapable.com/how-to-install-node-js-on-debian-linux/
+
+- name: Workstation | Software | NodeJS
+  block:
+
+    - name: Workstation | Software | NodeJS | apt
+      block:
+
+        - name: Workstation | Software | NodeJS | apt | Facts
+          ansible.builtin.set_fact:
+            node_version: node_24.x
+
+        - name: Workstation | Software | NodeJS | apt | Old | Remove
+          ansible.builtin.package:
+            name: npm
+            state: absent
+
+        - name: Workstation | Software | NodeJS | apt | extrepo | Install
+          ansible.builtin.package:
+            name: extrepo
+            state: present
+
+        - name: Workstation | Software | NodeJS | apt | extrepo | Enable
+          ansible.builtin.shell: "extrepo enable {{ node_version }}"
+          register: shell_check
+          changed_when: shell_check.rc == 0
+
+        - name: Workstation | Software | NodeJS | apt | Install
+          ansible.builtin.package:
+            name: nodejs
+            state: present
+
+      when: ansible_pkg_mgr == "apt"
+
+    - name: Workstation | Software | NodeJS | All Others | Install
+      ansible.builtin.package:
+        name:
+          - nodejs
+          - npm
+        state: present
+      when: ansible_pkg_mgr != "apt"
+
+  when: coding

tasks/workstation/linux/software/packages.yml

@@ -6,7 +6,7 @@
 # Needed for dnf packages such as vlc.
 # https://docs.fedoraproject.org/en-US/quick-docs/rpmfusion-setup/
 - name: Workstation | Linux | Software | Packages | Fedora Fusion Repos
-  shell: "{{ item }}"
+  ansible.builtin.shell: "{{ item }}"
   loop:
     - "dnf install -y https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm"
     - "dnf config-manager --enable rpmfusion-free"
@@ -14,15 +14,17 @@
     - "dnf install -y https://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm"
     - "dnf config-manager --enable rpmfusion-nonfree"
     - "dnf config-manager --enable rpmfusion-nonfree-updates"
+  register: shell_check
+  changed_when: shell_check.rc == 0
   when: ansible_distribution == "Fedora"
 
 
 ## Packages ##
 
 - name: Workstation | Linux | Software | Packages | Install Software (Editing)
-  package:
+  ansible.builtin.package:
     name:
-    - "{{ ffmpeg }}"
+      - "{{ ffmpeg }}"
     state: present
   when: editing in (true, "video", "audio")
 
@@ -32,37 +34,100 @@
 # Software not yet available or working properly in Flatpak form.
 
 - name: Workstation | Linux | Software | Packages | Install From Repo
-  package:
+  ansible.builtin.package:
     name:
-      - vlc
+      - "{{ vlc }}"
-      - "{{ appimagelauncher }}"
+      - "{{ vlc_plugins }}"
-      - "{{ evolution }}"
-      - "{{ evolution }}*"
       - gparted
-      - hugo
+      - "{{ firefox }}"
+      - "{{ firefox_esr }}"
+      - "{{ wireless_tools }}"
+      - "{{ notify_send }}"
+      - "{{ fyi }}"
+      - "{{ gnome_boxes }}"
+      - "{{ rhythmbox }}"
+      - "{{ blueman }}"
+      - "{{ mpv }}"
+      - "{{ transmission_gtk }}"
+      - "{{ transmission_qt }}"
+      - "{{ libreoffice }}"
+      - "{{ strawberry }}"
+      - "{{ dict_en }}"
+      - "{{ dict_es }}"
     state: present
 
-- name: Workstation | Linux | Software | Packages | GS Connect (KDE Connect, Android Tool)
+- name: Workstation | Linux | Software | Packages | Install From Repo [Coding]
-  package:
+  ansible.builtin.package:
     name:
-    - gnome-shell-extension-gsconnect
+      - "{{ appimagelauncher }}"
+      - hugo
+      - ansible-lint
+    state: present
+  when: coding
+
+- name: Workstation | Linux | Software | Packages | Install From Repo [Editing]
+  ansible.builtin.package:
+    name:
+      - gimp
+    state: present
+  when: editing
+
+- name: Workstation | Linux | Software | Packages | Install Audio (Looking at you, Artix)
+  ansible.builtin.package:
+    name:
+      - pipewire
+      - pipewire-pulse
+      - wireplumber
+      - pipewire-alsa
+    state: present
+  when: ansible_pkg_mgr == "pacman"
+    and ansible_service_mgr == "runit"
+
+- name: Workstation | Linux | Software | Packages | Extra For Liberated Init Systems
+  ansible.builtin.package:
+    name:
+      - "{{ dunst }}"
+    state: present
+  when: ansible_service_mgr != "systemd"
+
+# TBD/TODO: Change the below AUR tasks to echo EXISTS, INSTALLED, or FAILED
+# and then catch it, similar to what's done in android.yml and others.
+
+- name: Workstation | Linux | Software | Packages | Install From AUR
+  ansible.builtin.shell: "yay -Qs {{ item }} || yay --noconfirm -S {{ item }}"
+  loop:
+    - appimagelauncher
+  when: ansible_pkg_mgr == "pacman"
+  become: true
+  become_user: "{{ aur_user }}"
+  ignore_errors: true
+
+- name: Workstation | Linux | Software | Packages | Install From AUR [Coding]
+  ansible.builtin.shell: "yay -Qs {{ item }} || yay --noconfirm -S {{ item }}"
+  loop:
+    - vscodium-bin
+    - android-studio
+  when: ansible_pkg_mgr == "pacman"
+    and coding
+  become: true
+  become_user: "{{ aur_user }}"
+  ignore_errors: true
+
+- name: Workstation | Linux | Software | Packages | GS Connect (KDE Connect, Android Tool)
+  ansible.builtin.package:
+    name:
+      - gnome-shell-extension-gsconnect
     state: present
   when: ansible_distribution in ("Debian")
-  ignore_errors: yes
+
 
 # Remove Repo Software #
 
 - name: Workstation | Linux | Software | Packages | Remove Applications
-  package:
+  ansible.builtin.package:
     name:
-    - "{{ firefox }}"
+      - "{{ thunderbird }}"
-    - "{{ firefox_esr }}"
+      - "{{ evolution }}"
-    - "{{ thunderbird }}"
+      - steam
-    - steam
+      - code
-    - vscode
-    - code
-    - libreoffice
-    - "*libreoffice*"
-    - '*libreoffice*'
-    - gimp
     state: absent