Clean up Arch profile: remove i3/Void-specific config and fix GNOME integration

- Remove XFCE/i3-specific packages and dotfiles from Arch path (xarchiver,
  udiskie, Thunar, xfce-polkit, clipman, screenshooter)
- Separate per-OS dotfiles: mimeapps, udiskie config, GTK theme script,
  udiskie-password, dbus-session and ssh-agent fragments moved to Void-only
- Add mimeapps.arch.list with Nautilus/GNOME associations for nymph
- Move dunst/rofi directory creation from common to profile_desktop_i3
- Add gnome-keyring PAM hooks for GDM (gdm-password) in profile_desktop_gnome
- Remove ssh-agent.service from desktop_systemd_user_services on Arch;
  drop ssh-agent dependency and hardcoded socket from emacs.service
- Add ttf-hack-nerd to Arch font packages
- Fix rustup bootstrap: use rustup-init on Void, rustup toolchain install on Arch

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/settings.local.json

@@ -0,0 +1,7 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(xargs ls -la)"
+    ]
+  }
+}

AGENTS.md

@@ -1,15 +1,18 @@
 # AGENTS.md
 
-Ansible-driven personal infrastructure repo for Void desktops, Linux workstations, Windows+WSL, and an Ubuntu server.
+Ansible-driven personal infrastructure repo for Void/Arch desktops, Linux workstations, Windows+WSL, and an Ubuntu server.
 
 ## Source Of Truth
 - Main orchestration: `ansible/site.yml`
 - Inventory and layering inputs: `ansible/inventory/hosts.yml`, `ansible/inventory/group_vars/*.yml`, `ansible/inventory/host_vars/*.yml`
 - Dotfiles live under `dotfiles/`
-- OpenCode loads global instructions from `dotfiles/desktop/.config/opencode/opencode.json`
+- AI agent instructions (bootstrap, rules, knowledge) are centralized in `dotfiles/common/.config/ai/` and shared between OpenCode, Codex, and Gemini CLI.
+- OpenCode loads its entrypoint configuration from `dotfiles/common/.config/opencode/opencode.json`.
+- Codex config is rendered from `dotfiles/common/.codex/config.toml.j2` so `model_instructions_file` points to the deployed `~/.config/ai/bootstrap.md`.
 
 ## Topology
-- Void desktops: `ikaros`, `nymph`
+- Void desktops: `ikaros`
+- Arch desktops: `nymph`
 - Native Linux workstations: `deadalus-ubuntu`, `deadalus-fedora`
 - Windows host + WSL dev: `deadalus-win`, `deadalus-wsl`
 - Ubuntu server: `prometheus`
@@ -32,14 +35,15 @@ Ansible-driven personal infrastructure repo for Void desktops, Linux workstation
   - `ansible-lint ansible/roles`
   - `yamllint ansible/`
 - Host-focused dry runs:
-  - Void desktop work: `ansible-playbook ansible/site.yml --limit ikaros --check --diff` or `--limit nymph --check --diff`
+  - Void desktop work: `ansible-playbook ansible/site.yml --limit ikaros --check --diff`
+  - Arch desktop work: `ansible-playbook ansible/site.yml --limit nymph --check --diff`
   - Ubuntu workstation: `ansible-playbook ansible/site.yml --limit deadalus-ubuntu --check --diff`
   - Fedora workstation: `ansible-playbook ansible/site.yml --limit deadalus-fedora --check --diff`
   - WSL dev: `ansible-playbook ansible/site.yml --limit deadalus-wsl --check --diff`
   - Server: `ansible-playbook ansible/site.yml --limit prometheus --check --diff`
 - Focused checks:
   - Emacs dotfiles only: `ansible-playbook ansible/site.yml --limit ikaros --tags emacs --check --diff` or `--limit nymph --tags emacs --check --diff`
-  - Sway/Noctalia bootstrap on nymph: `ansible-playbook ansible/site.yml --limit nymph --tags packages,dotfiles:desktop,sway --check --diff`
+  - Arch GNOME desktop bootstrap on nymph: `ansible-playbook ansible/site.yml --limit nymph --tags packages,services,gnome --check --diff`
   - Mail bootstrap: `sh -n scripts/bootstrap_mail.sh` and `shellcheck scripts/bootstrap_mail.sh`
   - Windows bootstrap parse: `pwsh -NoProfile -Command "[void][System.Management.Automation.Language.Parser]::ParseFile('scripts/bootstrap_windows_workstation.ps1', [ref]$null, [ref]$null)"`
   - Server compose render: `docker compose -f /opt/docker/server/docker-compose.yml config`
@@ -52,17 +56,21 @@ Ansible-driven personal infrastructure repo for Void desktops, Linux workstation
 - Put host-specific overrides in `host_vars`, not shared `group_vars`.
 - Use `no_log: true` for secret-bearing task inputs or outputs.
 
-## Desktop Void Notes
+## Desktop Notes
 - `profile_desktop_common` owns the shared desktop bootstrap.
 - `.emacs.d` is deployed by a dedicated `profile_desktop_common` task tagged `emacs`.
-- User services are managed by `turnstile` and live under `dotfiles/desktop/.config/service/`.
-- `ssh-agent` runs under `turnstile` with stable socket `~/.local/state/ssh-agent/socket`.
+- NTFS filesystem support is provided by `ntfs-3g` in `ansible/inventory/group_vars/void.yml`.
+- Void user services are managed by `turnstile` and live under `dotfiles/desktop/.config/service/`.
+- Arch user services are systemd user units under `dotfiles/desktop/.config/systemd/user/`.
+- `ssh-agent` keeps the stable socket `~/.local/state/ssh-agent/socket`.
 - Critical session entrypoints:
   - `dotfiles/desktop/.xinitrc`
   - `dotfiles/desktop/.local/bin/start-sway-session`
-- Do not auto-restart `emptty` during playbook runs on active desktop hosts; restart it manually from another TTY/SSH session if needed.
-- `profile_desktop_sway` owns the Sway session, Noctalia config rendering, and official plugin linking.
-- Noctalia shared config lives in `dotfiles/desktop/.config/noctalia/`; bar monitors and `screenOverrides` come from inventory (`noctalia_bar_monitors`, `noctalia_screen_overrides`).
+- Do not auto-restart `emptty` during playbook runs on active Void desktop hosts; restart it manually from another TTY/SSH session if needed.
+- `nymph` is an Arch GNOME/GDM desktop; do not route it through Void/i3/Sway/emptty tasks.
+- `nymph` uses systemd-boot; keep loader entries and kernel cmdline in `ansible/inventory/host_vars/nymph.yml`.
+- `profile_desktop_sway` owns the Sway session, Noctalia config rendering, and official plugin linking when a Sway desktop is explicitly enabled.
+- Noctalia shared config lives in `dotfiles/desktop/.config/noctalia/`; bar monitors and `screenOverrides` come from inventory (`noctalia_bar_monitors`, `noctalia_screen_overrides`) on Sway hosts.
 - On Sway hosts, `udiskie` is the backend for automount/LUKS but runs without tray; USB device UI is handled by `usb-drive-manager`.
 - Do not re-introduce `network-manager-applet` or `blueman` on Sway hosts without an explicit host-specific reason.
 
@@ -73,6 +81,13 @@ Ansible-driven personal infrastructure repo for Void desktops, Linux workstation
 - `workstation_host_windows` runs with `gather_facts: false` and validates PSRP settings plus `windows_package_backend` before role execution.
 - Windows taskbar pins are driven by `windows_taskbar_pins` in `ansible/inventory/group_vars/workstation_host_windows.yml`; validate identifiers from a real Windows session before changing them.
 
+## Coding Agent Notes
+- Shared agent packages live in `ai_agents_npm_packages` in `ansible/inventory/group_vars/all.yml`.
+- Shared agent dotfiles live in `ai_agents_dotfiles`; rendered configs live in `ai_agents_templates`.
+- Desktop, native workstation, and WSL profiles consume the shared agent package list; do not duplicate package entries in profile-specific vars.
+- `dotfiles_common` copies common dotfiles plus `ai_agents_dotfiles`, then renders `ai_agents_templates`.
+- Keep `.config/ai/` as the common instruction source; update agent-specific entrypoints to reference it rather than duplicating instruction text.
+
 ## Tooling Notes
 - Install local tooling with:
   - `python3 -m pip install ansible ansible-lint yamllint shellcheck-py`

README.md

@@ -436,6 +436,7 @@ Allo stato attuale `ansible/site.yml` espone questi tag:
 | `emptty` | gestione display manager `emptty` | desktop Void |
 | `gnome` | configurazione host GNOME | workstation host Linux, parte desktop |
 | `i3` | sessione/configurazione i3 | desktop Void |
+| `npm` | installazione pacchetti npm globali | desktop Void, workstation Linux, WSL |
 | `nvidia` | componenti NVIDIA desktop | desktop Void |
 | `packages` | installazione e aggiornamento pacchetti | tutti i profili |
 | `services` | gestione servizi runit/systemd/Windows | tutti i profili |

ansible/inventory/group_vars/all.yml

@@ -50,6 +50,42 @@ common_dotfiles:
     dest: .vimrc
     mode: "0644"
   - name: bat config
-    src: .config/bat/.config/bat/
+    src: .config/bat/
     dest: .config/bat/
     mode: preserve
+
+ai_agents_npm_packages:
+  - name: "opencode-ai"
+    state: latest
+  - name: "@anthropic-ai/claude-code"
+    state: latest
+  - name: "@openai/codex"
+    state: latest
+  - name: "@google/gemini-cli"
+    state: latest
+
+ai_agents_enabled: true
+
+ai_agents_dotfiles:
+  - name: AI common config
+    src: .config/ai/
+    dest: .config/ai/
+    mode: preserve
+  - name: Gemini CLI config
+    src: .gemini/
+    dest: .gemini/
+    mode: preserve
+  - name: OpenCode config
+    src: .config/opencode/
+    dest: .config/opencode/
+    mode: preserve
+  - name: Claude Code memory
+    src: .claude/
+    dest: .claude/
+    mode: preserve
+
+ai_agents_templates:
+  - name: Codex config
+    src: .codex/config.toml.j2
+    dest: .codex/config.toml
+    mode: "0644"

ansible/inventory/group_vars/arch.yml

@@ -0,0 +1,139 @@
+---
+arch_packages_base:
+  - 7zip
+  - archlinux-keyring
+  - avahi
+  - base-devel
+  - bluez
+  - clang
+  - cmake
+  - cups
+  - cups-filters
+  - cups-pk-helper
+  - fastfetch
+  - flatpak
+  - fuse3
+  - gcc
+  - gdb
+  - git-delta
+  - github-cli
+  - gnome-keyring
+  - go
+  - gvfs
+  - gvfs-mtp
+  - gvfs-smb
+  - imagemagick
+  - isync
+  - libsecret
+  - libtool
+  - linux
+  - linux-headers
+  - lm_sensors
+  - man-db
+  - man-pages
+  - msmtp
+  - networkmanager
+  - nodejs
+  - npm
+  - pavucontrol
+  - pipewire
+  - pipewire-alsa
+  - pipewire-jack
+  - pipewire-pulse
+  - pkgconf
+  - plocate
+  - podman
+  - podman-compose
+  - rclone
+  - sane
+  - sane-airscan
+  - seahorse
+  - simple-scan
+  - speech-dispatcher
+  - syncthing
+  - system-config-printer
+  - tealdeer
+  - tmux
+  - tree-sitter-cli
+  - ufw
+  - wireplumber
+  - xdotool
+  - yt-dlp
+
+arch_desktop_common_packages:
+  - brightnessctl
+  - dex
+  - pinentry
+  - xdg-desktop-portal
+  - xdg-desktop-portal-gtk
+  - xdg-user-dirs
+
+arch_desktop_gnome_packages:
+  - gdm
+  - gnome-control-center
+  - gnome-session
+  - gnome-settings-daemon
+  - gnome-shell
+  - gnome-shell-extensions
+  - gnome-tweaks
+  - mutter
+  - nautilus
+  - xdg-desktop-portal-gnome
+
+arch_profile_packages:
+  - alacritty
+  - deluge
+  - dnsmasq
+  - edk2-ovmf
+  - emacs
+  - ffmpegthumbnailer
+  - firefox
+  - fontconfig
+  - freetype2
+  - gufw
+  - iproute2
+  - libvterm
+  - libx11
+  - libxft
+  - libvirt
+  - libreoffice-fresh
+  - meld
+  - mpv
+  - noto-fonts
+  - noto-fonts-emoji
+  - pdfarranger
+  - playerctl
+  - poppler
+  - poppler-glib
+  - qemu-desktop
+  - remmina
+  - ripgrep
+  - rsync
+  - ruff
+  - rustup
+  - texlive-basic
+  - texlive-binextra
+  - texlive-latex
+  - texlive-latexextra
+  - ttf-hack-nerd
+  - ttf-liberation
+  - ttf-nerd-fonts-symbols
+  - ctags
+  - uv
+  - virt-manager
+  - xournalpp
+  - zstd
+
+enabled_services:
+  - NetworkManager
+  - avahi-daemon
+  - bluetooth
+  - cups
+  - gdm
+  - libvirtd
+  - ufw
+
+desktop_systemd_user_services:
+  - emacs.service
+  - syncthing.service
+  - rclone-pcloud.service

ansible/inventory/group_vars/desktop.yml

@@ -6,113 +6,6 @@ desktop_sessions_enabled:
 
 desktop_default_session: i3
 desktop_default_session_env: xorg
-desktop_restart_emptty_automatically: false
-desktop_emptty_session_error_logging: disabled
-
-desktop_common_packages:
-  - brightnessctl
-  - dex
-  - emptty
-  - pinentry-emacs
-  - pinentry-gtk
-  - turnstile
-  - udiskie
-  - xdg-desktop-portal
-  - xdg-desktop-portal-gtk
-  - xdg-user-dirs
-
-desktop_i3_packages:
-  - arandr
-  - autorandr
-  - feh
-  - i3
-  - i3blocks
-  - i3blocks-blocklets
-  - i3lock-color
-  - i3status
-  - dunst
-  - network-manager-applet
-  - rofi
-  - scrot
-  - setxkbmap
-  - blueman
-  - volumeicon
-  - xclip
-  - xfce-polkit
-  - xfce4-clipman-plugin
-  - xfce4-screenshooter
-  - xkbutils
-  - xorg-fonts
-  - xorg-minimal
-  - xss-lock
-
-desktop_sway_packages:
-  - grim
-  - kanshi
-  - slurp
-  - swayfx
-  - wl-clipboard
-  - xdg-desktop-portal-wlr
-
-profile_packages:
-  - alacritty
-  - bluez
-  - bridge-utils
-  - ctags
-  - firefox
-  - deluge-gtk
-  - dnsmasq
-  - emacs-gtk3
-  - poppler-glib
-  - poppler-utils
-  - exo
-  - fontconfig-devel
-  - freetype-devel
-  - gvfs-cdda
-  - gvfs-mtp
-  - gvfs-smb
-  - gufw
-  - libvirt
-  - libspa-bluetooth
-  - libreoffice
-  - liberation-fonts-ttf
-  - libvterm-devel
-  - libX11-devel
-  - libXft-devel
-  - meld
-  - mpv
-  - nerd-fonts-ttf
-  - nerd-fonts-symbols-ttf
-  - pdfarranger
-  - playerctl
-  - qemu
-  - qemu-firmware
-  - qemu-img
-  - qemu-tools
-  - remmina
-  - ripgrep
-  - rustup
-  - ristretto
-  - rsync
-  - shotwell
-  - ruff
-  - terminus-font
-  - texlive
-  - ty
-  - tumbler
-  - uv
-  - Thunar
-  - thunar-archive-plugin
-  - thunar-volman
-  - ffmpegthumbnailer
-  - virt-manager
-  - virt-manager-tools
-  - wireplumber
-  - xarchiver
-  - xournalpp
-  - yaru
-  - yaru-plus
-  - zstd
 
 desktop_source_tools:
   - name: st
@@ -146,9 +39,7 @@ desktop_source_tools:
 
 desktop_binary_tools: []
 
-desktop_npm_packages:
-  - name: "opencode-ai"
-    state: latest
+desktop_npm_packages: "{{ ai_agents_npm_packages + [] }}"
 
 desktop_common_dotfiles:
   - name: XDG autostart entries
@@ -159,14 +50,6 @@ desktop_common_dotfiles:
     src: .config/alacritty/
     dest: .config/alacritty/
     mode: preserve
-  - name: Thunar config
-    src: .config/Thunar/
-    dest: .config/Thunar/
-    mode: preserve
-  - name: MIME application defaults
-    src: .config/mimeapps.list
-    dest: .config/mimeapps.list
-    mode: "0644"
   - name: fastfetch config
     src: .config/fastfetch/
     dest: .config/fastfetch/
@@ -183,26 +66,38 @@ desktop_common_dotfiles:
     src: .config/yt-dlp/
     dest: .config/yt-dlp/
     mode: preserve
-  - name: OpenCode config
-    src: .config/opencode/
-    dest: .config/opencode/
-    mode: preserve
   - name: MPV config
     src: .config/mpv/
     dest: .config/mpv/
     mode: preserve
-  - name: Udiskie config
-    src: .config/udiskie/
-    dest: .config/udiskie/
-    mode: preserve
-  - name: Turnstile user services
-    src: .config/service/
-    dest: .config/service/
-    mode: preserve
-  - name: Bash profile fragments
-    src: .bashrc.d/
-    dest: .bashrc.d/
-    mode: preserve
+  - name: Bash cargo env fragment
+    src: .bashrc.d/08-cargo-env.sh
+    dest: .bashrc.d/08-cargo-env.sh
+    mode: "0644"
+  - name: Bash GPG TTY fragment
+    src: .bashrc.d/10-gpg-tty.sh
+    dest: .bashrc.d/10-gpg-tty.sh
+    mode: "0644"
+  - name: Bash man page colors fragment
+    src: .bashrc.d/12-manpages.sh
+    dest: .bashrc.d/12-manpages.sh
+    mode: "0644"
+  - name: Bash editor fragment
+    src: .bashrc.d/20-editor-desktop.sh
+    dest: .bashrc.d/20-editor-desktop.sh
+    mode: "0644"
+  - name: Bash Emacs client fragment
+    src: .bashrc.d/25-emacs-client-desktop.sh
+    dest: .bashrc.d/25-emacs-client-desktop.sh
+    mode: "0644"
+  - name: Bash VM helper fragment
+    src: .bashrc.d/30-runvm.sh
+    dest: .bashrc.d/30-runvm.sh
+    mode: "0644"
+  - name: Bash Ansible playbook helper fragment
+    src: .bashrc.d/50-ap.sh
+    dest: .bashrc.d/50-ap.sh
+    mode: "0644"
   - name: .gitignore_global
     src: .gitignore_global
     dest: .gitignore_global
@@ -223,23 +118,25 @@ desktop_common_dotfiles:
     src: .authinfo.gpg
     dest: .authinfo.gpg
     mode: "0600"
-  - name: GTK theme setup script
-    src: .local/bin/setup-gtk-theme
-    dest: .local/bin/setup-gtk-theme
-    mode: "0755"
-  - name: Turnstile environment update script
-    src: .local/bin/update-turnstile-env
-    dest: .local/bin/update-turnstile-env
-    mode: "0755"
-  - name: Udiskie password helper
-    src: .local/bin/udiskie-password
-    dest: .local/bin/udiskie-password
+  - name: Calibre database Flatpak wrapper
+    src: .local/bin/calibredb
+    dest: .local/bin/calibredb
     mode: "0755"
   - name: SSH config
     src: .ssh/config
     dest: .ssh/config
     mode: "0600"
 
+desktop_arch_dotfiles:
+  - name: systemd user services
+    src: .config/systemd/user/
+    dest: .config/systemd/user/
+    mode: preserve
+  - name: MIME application defaults
+    src: .config/mimeapps.arch.list
+    dest: .config/mimeapps.list
+    mode: "0644"
+
 desktop_emacs_dotfiles:
   - name: Emacs config
     src: .emacs.d/

ansible/inventory/group_vars/fedora.yml

@@ -50,6 +50,9 @@ workstation_host_linux_packages_fedora:
   - code
   - firewall-config
   - gnome-extensions-app
+  - gnome-shell-extension-appindicator
+  - gnome-shell-extension-just-perfection
+  - gnome-shell-extension-no-overview
   - gnome-tweaks
   - libreoffice
   - meld
@@ -58,6 +61,7 @@ workstation_host_linux_packages_fedora:
   - pinentry-gnome3
   - podman
   - podman-compose
+  - rclone
   - yubikey-manager
 
 workstation_flatpak_remote_name: flathub

ansible/inventory/group_vars/server.yml

@@ -6,6 +6,7 @@ effective_username: "{{ server_username }}"
 effective_user_group: "{{ server_user_group }}"
 effective_user_home: "{{ server_user_home }}"
 server_container_stack_dir: /opt/docker/server
+ai_agents_enabled: false
 
 profile_packages:
   - avahi-daemon
@@ -92,6 +93,14 @@ server_directories:
     owner: "1000"
     group: "1000"
     mode: "0755"
+  - path: /srv/nextcloud
+    owner: root
+    group: root
+    mode: "0755"
+  - path: /srv/nextcloud/data
+    owner: root
+    group: root
+    mode: "0755"
 
 server_ufw_rules:
   - rule: allow

ansible/inventory/group_vars/void.yml

@@ -18,18 +18,25 @@ void_packages_base:
   - fuse3
   - gcc
   - gdb
+  - gist
+  - github-cli
   - gnome-keyring
   - go
   - gvfs
+  - hugo
   - ImageMagick
   - isync
   - libsecret
   - libtool
+  - linux-mainline
   - lm_sensors
+  - man-pages-devel
+  - man-pages-posix
   - msmtp
   - mu4e
   - network-manager-applet
   - nodejs
+  - ntfs-3g
   - pavucontrol
   - pipewire
   - pkg-config
@@ -42,6 +49,7 @@ void_packages_base:
   - simple-scan
   - socklog
   - socklog-void
+  - speech-dispatcher
   - syncthing
   - system-config-printer
   - tmux
@@ -71,3 +79,153 @@ enabled_services:
   - ufw
   - virtlockd
   - virtlogd
+
+desktop_restart_emptty_automatically: false
+desktop_emptty_session_error_logging: disabled
+
+desktop_void_dotfiles:
+  - name: Turnstile user services
+    src: .config/service/
+    dest: .config/service/
+    mode: preserve
+  - name: Thunar config
+    src: .config/Thunar/
+    dest: .config/Thunar/
+    mode: preserve
+  - name: MIME application defaults
+    src: .config/mimeapps.list
+    dest: .config/mimeapps.list
+    mode: "0644"
+  - name: Bash DBus session fragment
+    src: .bashrc.d/14-dbus-session.sh
+    dest: .bashrc.d/14-dbus-session.sh
+    mode: "0644"
+  - name: Bash SSH agent socket fragment
+    src: .bashrc.d/16-ssh-agent-socket.sh
+    dest: .bashrc.d/16-ssh-agent-socket.sh
+    mode: "0644"
+  - name: Bash runit desktop fragment
+    src: .bashrc.d/15-runit-desktop.sh
+    dest: .bashrc.d/15-runit-desktop.sh
+    mode: "0644"
+  - name: GTK theme setup script
+    src: .local/bin/setup-gtk-theme
+    dest: .local/bin/setup-gtk-theme
+    mode: "0755"
+  - name: Udiskie password helper
+    src: .local/bin/udiskie-password
+    dest: .local/bin/udiskie-password
+    mode: "0755"
+  - name: Udiskie config
+    src: .config/udiskie/
+    dest: .config/udiskie/
+    mode: preserve
+  - name: Turnstile environment update script
+    src: .local/bin/update-turnstile-env
+    dest: .local/bin/update-turnstile-env
+    mode: "0755"
+
+desktop_common_packages:
+  - brightnessctl
+  - dex
+  - emptty
+  - pinentry-emacs
+  - pinentry-gtk
+  - turnstile
+  - udiskie
+  - xdg-desktop-portal
+  - xdg-desktop-portal-gtk
+  - xdg-user-dirs
+
+desktop_i3_packages:
+  - arandr
+  - autorandr
+  - feh
+  - i3
+  - i3blocks
+  - i3blocks-blocklets
+  - i3lock-color
+  - i3status
+  - dunst
+  - network-manager-applet
+  - rofi
+  - scrot
+  - setxkbmap
+  - blueman
+  - volumeicon
+  - xclip
+  - xfce-polkit
+  - xfce4-clipman-plugin
+  - xfce4-screenshooter
+  - xkbutils
+  - xorg-fonts
+  - xorg-minimal
+  - xss-lock
+
+desktop_sway_packages:
+  - grim
+  - kanshi
+  - slurp
+  - swayfx
+  - wl-clipboard
+  - xdg-desktop-portal-wlr
+
+profile_packages:
+  - alacritty
+  - bluez
+  - bridge-utils
+  - ctags
+  - firefox
+  - deluge-gtk
+  - dnsmasq
+  - emacs-gtk3
+  - poppler-glib
+  - poppler-utils
+  - exo
+  - fontconfig-devel
+  - freetype-devel
+  - gvfs-cdda
+  - gvfs-mtp
+  - gvfs-smb
+  - gufw
+  - libvirt
+  - libspa-bluetooth
+  - libreoffice
+  - liberation-fonts-ttf
+  - libvterm-devel
+  - libX11-devel
+  - libXft-devel
+  - meld
+  - mpv
+  - nerd-fonts-ttf
+  - nerd-fonts-symbols-ttf
+  - pdfarranger
+  - playerctl
+  - qemu
+  - qemu-firmware
+  - qemu-img
+  - qemu-tools
+  - remmina
+  - ripgrep
+  - rustup
+  - ristretto
+  - rsync
+  - shotwell
+  - ruff
+  - terminus-font
+  - texlive
+  - ty
+  - tumbler
+  - uv
+  - Thunar
+  - thunar-archive-plugin
+  - thunar-volman
+  - ffmpegthumbnailer
+  - virt-manager
+  - virt-manager-tools
+  - wireplumber
+  - xarchiver
+  - xournalpp
+  - yaru
+  - yaru-plus
+  - zstd

ansible/inventory/group_vars/workstation.yml

@@ -1,6 +1,4 @@
 ---
 workstation_manage_opencode: true
 
-workstation_npm_packages:
-  - name: "opencode-ai"
-    state: latest
+workstation_npm_packages: "{{ ai_agents_npm_packages + [] }}"

ansible/inventory/host_vars/deadalus-fedora.yml

@@ -148,3 +148,29 @@ workstation_gnome_managed_settings:
   - schema: org.gnome.TextEditor
     key: wrap-text
     value: "true"
+  - schema: org.gnome.desktop.background
+    key: picture-uri
+    value: "'file:///usr/share/backgrounds/gnome/lcd-rainbow-l.jxl'"
+  - schema: org.gnome.desktop.background
+    key: picture-uri-dark
+    value: "'file:///usr/share/backgrounds/gnome/lcd-rainbow-d.jxl'"
+
+workstation_gnome_extension_dconf_settings:
+  - path: /org/gnome/shell/extensions/paperwm/
+    key: selection-border-radius-bottom
+    value: "15"
+  - path: /org/gnome/shell/extensions/paperwm/
+    key: selection-border-radius-top
+    value: "15"
+  - path: /org/gnome/shell/extensions/paperwm/
+    key: selection-border-size
+    value: "5"
+  - path: /org/gnome/shell/extensions/paperwm/
+    key: show-window-position-bar
+    value: "false"
+  - path: /org/gnome/shell/extensions/paperwm/
+    key: show-workspace-indicator
+    value: "false"
+  - path: /org/gnome/shell/extensions/paperwm/
+    key: window-gap
+    value: "10"

ansible/inventory/host_vars/nymph.yml

@@ -2,54 +2,48 @@
 hostname: nymph
 
 desktop_sessions_enabled:
-  - sway
+  - gnome
 
-desktop_default_session: sway
+desktop_default_session: gnome
 desktop_default_session_env: wayland
-desktop_emptty_session_error_logging: rotate
 
-host_xbps_repositories:
-  - name: noctalia
-    url: https://universalrepo.r1xelelo.workers.dev/void
+host_kernel_cmdline: >-
+  rd.luks.uuid=1e15d159-5d05-4a1f-9639-ac200dff9f9c rootflags=subvol=@
+  apparmor=1 security=apparmor nouveau.modeset=0 nvidia-drm.modeset=1
+
+host_systemd_boot_esp_path: /boot
+host_systemd_boot_default: arch.conf
+host_systemd_boot_timeout: 3
+host_systemd_boot_console_mode: max
+host_systemd_boot_editor: false
+host_systemd_boot_entries:
+  - filename: arch.conf
+    title: Arch Linux
+    linux: /vmlinuz-linux
+    initrds:
+      - /intel-ucode.img
+      - /initramfs-linux.img
+    options: "{{ host_kernel_cmdline }}"
+  - filename: arch-fallback.conf
+    title: Arch Linux fallback
+    linux: /vmlinuz-linux
+    initrds:
+      - /intel-ucode.img
+      - /initramfs-linux-fallback.img
+    options: "{{ host_kernel_cmdline }}"
 
 host_packages:
-  - cliphist
-  - grimshot
-  - nvidia
-  - noctalia-shell
+  - intel-ucode
+  - intel-media-driver
+  - libva-intel-driver
+  - mesa
+  - nvidia-open
+  - nvidia-settings
+  - nvidia-utils
   - power-profiles-daemon
-  - mesa-dri
-  - vulkan-loader
-  - mesa-vulkan-intel
-  - intel-video-accel
-  - tlp
-  - tlp-rdw
   - upower
+  - vulkan-icd-loader
+  - vulkan-intel
 
 host_enabled_services:
-  - tlp
-
-host_sway_dotfiles:
-  - src: .config/sway/host.conf
-    dest: .config/sway/host.conf
-    mode: "0644"
-  - src: .config/sway/session-env
-    dest: .config/sway/session-env
-    mode: "0644"
-  - src: .config/kanshi/config
-    dest: .config/kanshi/config
-    mode: "0644"
-
-noctalia_bar_monitors:
-  - DP-1
-  - eDP-1
-
-noctalia_screen_overrides:
-  - name: DP-1
-    enabled: false
-  - name: eDP-1
-    enabled: false
-
-host_packages_absent:
-  - network-manager-applet
-  - blueman
+  - power-profiles-daemon

ansible/inventory/hosts.yml

@@ -5,8 +5,10 @@ all:
       hosts:
         ikaros:
           ansible_connection: local
-        nymph:
-          ansible_connection: local
+
+    arch:
+      children:
+        arch_desktop:
 
     desktop:
       hosts:
@@ -55,6 +57,11 @@ all:
         deadalus-fedora:
           ansible_connection: local
 
+    arch_desktop:
+      hosts:
+        nymph:
+          ansible_connection: local
+
     workstation_host_linux:
       hosts:
         deadalus-ubuntu:

ansible/roles/dotfiles_common/tasks/main.yml

@@ -14,7 +14,16 @@
     group: "{{ effective_user_group }}"
     mode: "0755"
   loop: "{{ xdg_user_directories | default([]) }}"
-  when: "'void' in group_names"
+  when: "'desktop' in group_names"
+
+- name: Extract templates kit to Templates directory
+  tags: [dotfiles, dotfiles:common]
+  ansible.builtin.unarchive:
+    src: "{{ playbook_dir }}/../dotfiles/common/templates_kit.zip"
+    dest: "{{ effective_user_home }}/Templates"
+    owner: "{{ effective_username }}"
+    group: "{{ effective_user_group }}"
+  when: "'desktop' in group_names"
 
 - name: Ensure SSH socket directory exists
   tags: [dotfiles, dotfiles:common]
@@ -33,10 +42,41 @@
     owner: "{{ effective_username }}"
     group: "{{ effective_user_group }}"
     mode: "{{ item.mode }}"
-  loop: "{{ common_dotfiles | default([]) }}"
+  loop: >-
+    {{
+      (common_dotfiles | default([]))
+      + ((ai_agents_dotfiles | default([])) if (ai_agents_enabled | default(false)) else [])
+    }}
   loop_control:
     label: "{{ item.dest }}"
 
+- name: Ensure AI config directories exist
+  tags: [dotfiles, dotfiles:common]
+  ansible.builtin.file:
+    path: "{{ effective_user_home }}/{{ item }}"
+    state: directory
+    owner: "{{ effective_username }}"
+    group: "{{ effective_user_group }}"
+    mode: "0755"
+  loop:
+    - .codex
+  when:
+    - ai_agents_enabled | default(false)
+    - (ai_agents_templates | default([])) | length > 0
+
+- name: Render AI agent templates
+  tags: [dotfiles, dotfiles:common]
+  ansible.builtin.template:
+    src: "{{ playbook_dir }}/../dotfiles/common/{{ item.src }}"
+    dest: "{{ effective_user_home }}/{{ item.dest }}"
+    owner: "{{ effective_username }}"
+    group: "{{ effective_user_group }}"
+    mode: "{{ item.mode }}"
+  loop: "{{ ai_agents_templates | default([]) }}"
+  loop_control:
+    label: "{{ item.dest }}"
+  when: ai_agents_enabled | default(false)
+
 - name: Refresh bat cache
   tags: [dotfiles, dotfiles:common]
   ansible.builtin.command:

ansible/roles/packages_arch/tasks/main.yml

@@ -0,0 +1,27 @@
+---
+- name: Synchronize and upgrade Arch Linux packages
+  tags: [packages]
+  community.general.pacman:
+    update_cache: true
+    upgrade: true
+
+- name: Install packages on Arch Linux
+  tags: [packages]
+  community.general.pacman:
+    name: >-
+      {{
+        (
+          (common_packages | default([]))
+        + (arch_packages_base | default([]))
+        + (arch_desktop_common_packages | default([]))
+        + (
+            (arch_desktop_gnome_packages | default([]))
+            if 'gnome' in (desktop_sessions_enabled | default([]))
+            else []
+          )
+        + (arch_profile_packages | default([]))
+        + (host_packages | default([]))
+        )
+        | unique
+      }}
+    state: present

ansible/roles/profile_desktop_common/handlers/main.yml

@@ -5,6 +5,7 @@
   changed_when: true
   when:
     - not ansible_check_mode
+    - "'void' in group_names"
     - desktop_restart_emptty_automatically | default(false)
 
 - name: Report manual emptty restart requirement
@@ -16,10 +17,22 @@
       to avoid dropping the active graphical session.
   when:
     - not ansible_check_mode
+    - "'void' in group_names"
     - not (desktop_restart_emptty_automatically | default(false))
 
-- name: Reload SSH service
+- name: Reload SSH service with runit
   listen: Reload SSH service
   ansible.builtin.command: sv reload sshd
   changed_when: true
-  when: not ansible_check_mode
+  when:
+    - not ansible_check_mode
+    - "'void' in group_names"
+
+- name: Reload SSH service with systemd
+  listen: Reload SSH service
+  ansible.builtin.systemd:
+    name: "{{ desktop_ssh_service_name | default('sshd') }}"
+    state: reloaded
+  when:
+    - not ansible_check_mode
+    - "'arch' in group_names"

ansible/roles/profile_desktop_common/tasks/main.yml

@@ -6,6 +6,7 @@
     regexp: '^#?HandleLidSwitch='
     line: 'HandleLidSwitch=suspend'
     state: present
+  when: "'void' in group_names"
 
 - name: Ensure common config directories exist
   tags: [dotfiles, dotfiles:desktop]
@@ -18,10 +19,10 @@
   loop:
     - "{{ user_home }}/.config"
     - "{{ user_home }}/.config/autostart"
-    - "{{ user_home }}/.config/dunst"
     - "{{ user_home }}/.config/alacritty"
-    - "{{ user_home }}/.config/Thunar"
-    - "{{ user_home }}/.config/rofi"
+    - "{{ user_home }}/.config/systemd"
+    - "{{ user_home }}/.config/systemd/user"
+    - "{{ user_home }}/.bashrc.d"
     - "{{ user_home }}/.tmux"
     - "{{ user_home }}/.tmux/bin"
     - "{{ user_home }}/.tmux/plugins"
@@ -42,6 +43,7 @@
     insertafter: '^auth\s+include\s+system-local-login$'
     line: "auth       optional  pam_gnome_keyring.so"
     state: present
+  when: "'void' in group_names"
 
 - name: Enable gnome-keyring PAM session hook
   tags: [packages, gnome]
@@ -50,6 +52,7 @@
     insertafter: '^session\s+include\s+system-local-login$'
     line: "session    optional  pam_gnome_keyring.so auto_start"
     state: present
+  when: "'void' in group_names"
 
 - name: Enable gnome-keyring PAM password hook
   tags: [packages, gnome]
@@ -58,6 +61,7 @@
     insertafter: '^password\s+include\s+system-local-login$'
     line: "password   optional  pam_gnome_keyring.so use_authtok"
     state: present
+  when: "'void' in group_names"
 
 - name: Check whether SSH host ed25519 key exists
   tags: [services]
@@ -181,6 +185,7 @@
   ansible.builtin.stat:
     path: /etc/sv/libvirtd
   register: libvirtd_service_dir
+  when: "'void' in group_names"
 
 - name: Enable libvirt daemon service
   tags: [packages, services]
@@ -188,7 +193,9 @@
     src: /etc/sv/libvirtd
     dest: /var/service/libvirtd
     state: link
-  when: libvirtd_service_dir.stat.exists
+  when:
+    - "'void' in group_names"
+    - libvirtd_service_dir.stat.exists
 
 - name: Check virtualization group availability
   tags: [packages]
@@ -229,6 +236,7 @@
     owner: root
     group: root
     mode: "0755"
+  when: "'void' in group_names"
 
 - name: Ensure emptty session directories exist
   tags: [packages, services, emptty]
@@ -241,6 +249,7 @@
   loop:
     - /etc/emptty/xsessions
     - /etc/emptty/wayland-sessions
+  when: "'void' in group_names"
 
 - name: Configure emptty
   tags: [packages, services, emptty]
@@ -251,6 +260,7 @@
     group: root
     mode: "0644"
   notify: Restart emptty
+  when: "'void' in group_names"
 
 - name: Copy common desktop dotfiles
   tags: [dotfiles, dotfiles:desktop]
@@ -260,10 +270,41 @@
     owner: "{{ username }}"
     group: "{{ user_group }}"
     mode: "{{ item.mode }}"
-  loop: "{{ desktop_common_dotfiles | default([]) }}"
+  loop: >-
+    {{
+      (desktop_common_dotfiles | default([]))
+      + ((desktop_void_dotfiles | default([])) if 'void' in group_names else [])
+      + ((desktop_arch_dotfiles | default([])) if 'arch' in group_names else [])
+    }}
   loop_control:
     label: "{{ item.dest }}"
 
+- name: Ensure systemd user enablement directory exists
+  tags: [services, dotfiles, dotfiles:desktop]
+  ansible.builtin.file:
+    path: "{{ user_home }}/.config/systemd/user/default.target.wants"
+    state: directory
+    owner: "{{ username }}"
+    group: "{{ user_group }}"
+    mode: "0755"
+  when:
+    - "'arch' in group_names"
+    - (desktop_systemd_user_services | default([])) | length > 0
+
+- name: Enable desktop systemd user services
+  tags: [services, dotfiles, dotfiles:desktop]
+  ansible.builtin.file:
+    src: "{{ user_home }}/.config/systemd/user/{{ item }}"
+    dest: "{{ user_home }}/.config/systemd/user/default.target.wants/{{ item }}"
+    state: link
+    owner: "{{ username }}"
+    group: "{{ user_group }}"
+    force: true
+  loop: "{{ desktop_systemd_user_services | default([]) }}"
+  loop_control:
+    label: "{{ item }}"
+  when: "'arch' in group_names"
+
 - name: Copy Emacs desktop dotfiles
   tags: [dotfiles, dotfiles:desktop, emacs]
   ansible.builtin.copy:
@@ -460,14 +501,27 @@
         path: "{{ user_home }}/.cargo/bin/rustc"
       register: rustup_initialized
 
-    - name: Run rustup-init with cargo env sourced
+    - name: Run rustup-init with cargo env sourced (Void)
       ansible.builtin.shell:
         cmd: . ~/.cargo/env && rustup-init -y --no-modify-path
         creates: "{{ user_home }}/.cargo/bin/rustc"
       become_user: "{{ username }}"
       environment:
         HOME: "{{ user_home }}"
-      when: not rustup_initialized.stat.exists
+      when:
+        - not rustup_initialized.stat.exists
+        - "'void' in group_names"
+
+    - name: Install Rust stable toolchain via rustup (Arch)
+      ansible.builtin.command:
+        cmd: rustup toolchain install stable
+        creates: "{{ user_home }}/.cargo/bin/rustc"
+      become_user: "{{ username }}"
+      environment:
+        HOME: "{{ user_home }}"
+      when:
+        - not rustup_initialized.stat.exists
+        - "'arch' in group_names"
 
     - name: Ensure cargo env is sourced in shell profile
       ansible.builtin.lineinfile:
@@ -518,7 +572,7 @@
     label: "{{ binary_tool.name }}"
 
 - name: Install desktop npm packages
-  tags: [packages]
+  tags: [packages, npm]
   community.general.npm:
     name: "{{ item.name }}"
     global: true

ansible/roles/profile_desktop_gnome/tasks/main.yml

@@ -0,0 +1,42 @@
+---
+- name: Ensure GNOME desktop session is enabled for this profile
+  tags: [gnome]
+  ansible.builtin.assert:
+    that:
+      - "'gnome' in (desktop_sessions_enabled | default([]))"
+    fail_msg: >-
+      profile_desktop_gnome requires desktop_sessions_enabled to include gnome.
+
+- name: Ensure systemd boots to the graphical target
+  tags: [services, gnome]
+  ansible.builtin.file:
+    src: /usr/lib/systemd/system/graphical.target
+    dest: /etc/systemd/system/default.target
+    state: link
+    force: true
+    owner: root
+    group: root
+
+- name: Enable gnome-keyring PAM auth hook for GDM
+  tags: [gnome]
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/gdm-password
+    insertafter: '^auth\s+include\s+system-local-login$'
+    line: "auth       optional  pam_gnome_keyring.so"
+    state: present
+
+- name: Enable gnome-keyring PAM session hook for GDM
+  tags: [gnome]
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/gdm-password
+    insertafter: '^session\s+include\s+system-local-login$'
+    line: "session    optional  pam_gnome_keyring.so auto_start"
+    state: present
+
+- name: Enable gnome-keyring PAM password hook for GDM
+  tags: [gnome]
+  ansible.builtin.lineinfile:
+    path: /etc/pam.d/gdm-password
+    insertafter: '^password\s+include\s+system-local-login$'
+    line: "password   optional  pam_gnome_keyring.so use_authtok"
+    state: present

ansible/roles/profile_desktop_host/tasks/nymph.yml

@@ -1,16 +1,75 @@
 ---
-- name: Configure GRUB kernel parameters for NVIDIA hybrid graphics
+- name: Ensure systemd-boot loader entries directory exists
   tags: [packages, nvidia]
-  ansible.builtin.lineinfile:
-    path: /etc/default/grub
-    regexp: '^GRUB_CMDLINE_LINUX='
-    line: 'GRUB_CMDLINE_LINUX="rd.luks.uuid=1e15d159-5d05-4a1f-9639-ac200dff9f9c rootflags=subvol=@ apparmor=1 security=apparmor nouveau.modeset=0 nvidia-drm.modeset=1"'
-    state: present
+  ansible.builtin.file:
+    path: "{{ host_systemd_boot_esp_path }}/loader/entries"
+    state: directory
+    owner: root
+    group: root
+    mode: "0755"
+  when: host_systemd_boot_esp_path is defined
 
-- name: Regenerate GRUB configuration
+- name: Check whether systemd-boot is installed
   tags: [packages, nvidia]
-  ansible.builtin.command: grub-mkconfig -o /boot/grub/grub.cfg
+  ansible.builtin.command:
+    argv:
+      - bootctl
+      - "--esp-path={{ host_systemd_boot_esp_path }}"
+      - is-installed
+  register: nymph_systemd_boot_state
+  changed_when: false
+  failed_when: false
+  when:
+    - host_systemd_boot_esp_path is defined
+    - not ansible_check_mode
+
+- name: Install systemd-boot
+  tags: [packages, nvidia]
+  ansible.builtin.command:
+    argv:
+      - bootctl
+      - "--esp-path={{ host_systemd_boot_esp_path }}"
+      - install
   changed_when: true
+  when:
+    - host_systemd_boot_esp_path is defined
+    - not ansible_check_mode
+    - nymph_systemd_boot_state.rc | default(1) != 0
+
+- name: Configure systemd-boot loader defaults
+  tags: [packages, nvidia]
+  ansible.builtin.copy:
+    dest: "{{ host_systemd_boot_esp_path }}/loader/loader.conf"
+    content: |
+      default {{ host_systemd_boot_default }}
+      timeout {{ host_systemd_boot_timeout | default(3) }}
+      console-mode {{ host_systemd_boot_console_mode | default('max') }}
+      editor {{ 'yes' if host_systemd_boot_editor | default(false) else 'no' }}
+    owner: root
+    group: root
+    mode: "0644"
+  when:
+    - host_systemd_boot_esp_path is defined
+    - host_systemd_boot_default is defined
+
+- name: Configure systemd-boot Arch entries
+  tags: [packages, nvidia]
+  ansible.builtin.copy:
+    dest: "{{ host_systemd_boot_esp_path }}/loader/entries/{{ item.filename }}"
+    content: |-
+      title {{ item.title }}
+      linux {{ item.linux }}
+      {% for initrd in item.initrds | default([]) %}
+      initrd {{ initrd }}
+      {% endfor %}
+      options {{ item.options }}
+    owner: root
+    group: root
+    mode: "0644"
+  loop: "{{ host_systemd_boot_entries | default([]) }}"
+  loop_control:
+    label: "{{ item.filename }}"
+  when: host_systemd_boot_esp_path is defined
 
 - name: Configure NVIDIA power management for hybrid graphics
   tags: [packages, nvidia]

ansible/roles/profile_desktop_i3/tasks/main.yml

@@ -8,8 +8,10 @@
     group: "{{ user_group }}"
     mode: "0755"
   loop:
+    - "{{ user_home }}/.config/dunst"
     - "{{ user_home }}/.config/i3"
     - "{{ user_home }}/.config/i3blocks"
+    - "{{ user_home }}/.config/rofi"
   when: "'i3' in (desktop_sessions_enabled | default([]))"
 
 - name: Install allowed emptty X11 sessions

ansible/roles/profile_workstation_dev_common/tasks/main.yml

@@ -36,7 +36,7 @@
     label: "{{ item.dest }}"
 
 - name: Install workstation npm packages
-  tags: [packages]
+  tags: [packages, npm]
   community.general.npm:
     name: "{{ item.name }}"
     global: true

ansible/roles/profile_workstation_gnome/tasks/main.yml

@@ -74,6 +74,20 @@
   changed_when: true
   when: item.stdout | trim != item.item.value
 
+- name: Apply workstation GNOME extension dconf settings
+  tags: [gnome]
+  ansible.builtin.command:
+    argv:
+      - dconf
+      - write
+      - "{{ item.path }}{{ item.key }}"
+      - "{{ item.value }}"
+  become_user: "{{ username }}"
+  loop: "{{ workstation_gnome_extension_dconf_settings | default([]) }}"
+  loop_control:
+    label: "{{ item.path }}{{ item.key }}"
+  changed_when: true
+
 - name: Check whether VS Code CLI is available on workstation host
   tags: [packages, vscode]
   ansible.builtin.command:

ansible/site.yml

@@ -28,6 +28,16 @@
     - profile_desktop_sway
     - profile_desktop_host
 
+- hosts: arch
+  become: true
+
+  roles:
+    - packages_arch
+    - services_systemd
+    - profile_desktop_common
+    - profile_desktop_gnome
+    - profile_desktop_host
+
 - hosts: workstation_dev_ubuntu
   become: true
 

ansible/templates/server/docker-compose.yml.j2

@@ -36,6 +36,25 @@ services:
       - web
       - gitea
 
+  # Disabled: prometheus does not have enough resources to run Nextcloud AIO.
+  # nextcloud-aio-mastercontainer:
+  #   image: ghcr.io/nextcloud-releases/all-in-one:latest
+  #   container_name: nextcloud-aio-mastercontainer
+  #   init: true
+  #   restart: always
+  #   ports:
+  #     - "127.0.0.1:8080:8080"
+  #   environment:
+  #     APACHE_PORT: "11000"
+  #     APACHE_IP_BINDING: "0.0.0.0"
+  #     APACHE_ADDITIONAL_NETWORK: "server_web"
+  #     NEXTCLOUD_DATADIR: "/srv/nextcloud/data"
+  #   volumes:
+  #     - "nextcloud_aio_mastercontainer:/mnt/docker-aio-config"
+  #     - "/var/run/docker.sock:/var/run/docker.sock:ro"
+  #   networks:
+  #     - web
+
   navidromedb:
     image: postgres:13
     container_name: navidromedb
@@ -87,6 +106,11 @@ services:
 
 networks:
   web:
+    name: server_web
     external: false
   gitea:
     external: false
+
+# volumes:
+#   nextcloud_aio_mastercontainer:
+#     name: nextcloud_aio_mastercontainer

dotfiles/common/.claude/CLAUDE.md

@@ -0,0 +1,5 @@
+# Claude Code Global Context
+
+Import the shared coding agent bootstrap context:
+
+@~/.config/ai/bootstrap.md

dotfiles/common/.codex/config.toml.j2

@@ -0,0 +1,16 @@
+model = "gpt-5.5"
+model_reasoning_effort = "medium"
+
+model_instructions_file = "{{ effective_user_home }}/.config/ai/bootstrap.md"
+
+[projects."/home/fscotto/AnsiblePlaybook"]
+trust_level = "trusted"
+
+[tui]
+theme = "coldark-dark"
+
+[tui.model_availability_nux]
+"gpt-5.5" = 3
+
+[features]
+memories = true

dotfiles/common/.config/opencode/opencode.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "instructions": [
+    "~/.config/ai/bootstrap.md",
+    "~/.config/ai/rules/safety.md"
+  ]
+}

dotfiles/common/.gemini/settings.json

@@ -0,0 +1,14 @@
+{
+  "security": {
+    "auth": {
+      "selectedType": "oauth-personal"
+    }
+  },
+  "context": {
+    "fileName": [
+      "~/.config/ai/bootstrap.md",
+      "~/.config/ai/rules/safety.md",
+      "~/.config/ai/AGENTS.md"
+    ]
+  }
+}

dotfiles/desktop/.bashrc.d/14-dbus-session.sh

@@ -0,0 +1,39 @@
+# Validate DBUS_SESSION_BUS_ADDRESS: a stale value (e.g. inherited from a
+# dead X session) makes secret-tool, mbsync, msmtp fail with
+# "Could not connect: No such file or directory".
+# Fall back to ~/.dbus-session-bus-address (written by .xinitrc) or
+# /run/user/$UID/bus, mirroring scripts/bootstrap_mail.sh.
+
+_dbus_addr_socket_path() {
+  printf '%s' "${1#unix:path=}" | sed 's/,.*//'
+}
+
+_dbus_addr_is_live() {
+  case "$1" in
+    unix:path=*)
+      [ -S "$(_dbus_addr_socket_path "$1")" ]
+      ;;
+    unix:abstract=*)
+      return 0
+      ;;
+    *)
+      return 1
+      ;;
+  esac
+}
+
+if ! _dbus_addr_is_live "${DBUS_SESSION_BUS_ADDRESS:-}"; then
+  unset DBUS_SESSION_BUS_ADDRESS
+  if [ -f "$HOME/.dbus-session-bus-address" ]; then
+    _saved=$(tr -d '\n' <"$HOME/.dbus-session-bus-address" 2>/dev/null)
+    if [ -n "$_saved" ] && _dbus_addr_is_live "$_saved"; then
+      export DBUS_SESSION_BUS_ADDRESS="$_saved"
+    fi
+    unset _saved
+  fi
+  if [ -z "${DBUS_SESSION_BUS_ADDRESS:-}" ] && [ -S "/run/user/$(id -u)/bus" ]; then
+    export DBUS_SESSION_BUS_ADDRESS="unix:path=/run/user/$(id -u)/bus"
+  fi
+fi
+
+unset -f _dbus_addr_socket_path _dbus_addr_is_live

dotfiles/desktop/.bashrc.d/15-runit-desktop.sh

@@ -1,2 +1 @@
 export SVDIR="$HOME/.config/service"
-export SSH_AUTH_SOCK="$HOME/.local/state/ssh-agent/socket"

dotfiles/desktop/.bashrc.d/16-ssh-agent-socket.sh

@@ -0,0 +1 @@
+export SSH_AUTH_SOCK="$HOME/.local/state/ssh-agent/socket"

dotfiles/desktop/.bashrc.d/25-emacs-client-desktop.sh

@@ -1,14 +1,14 @@
 if command -v emacsclient >/dev/null 2>&1; then
   ec() {
     emacsclient -c -n "$@" || {
-      printf '%s\n' "Emacs server is not available. Log into a graphical session and ensure the turnstile-managed 'emacs' service is running." >&2
+      printf '%s\n' "Emacs server is not available. Log into a graphical session and ensure the user 'emacs' service is running." >&2
       return 1
     }
   }
 
   et() {
     emacsclient -t "$@" || {
-      printf '%s\n' "Emacs server is not available. Ensure the turnstile-managed 'emacs' service is running in your graphical session." >&2
+      printf '%s\n' "Emacs server is not available. Ensure the user 'emacs' service is running in your graphical session." >&2
       return 1
     }
   }

dotfiles/desktop/.bashrc.d/50-ap.sh

@@ -12,7 +12,7 @@ ap() {
       cmd+=(--tag "$1")
     fi
 
-    printf '+ %s\n' "${cmd[*]}"
+    printf '\033[0;36m+ %s\033[0m\n' "${cmd[*]}"
     "${cmd[@]}"
   )
 }

dotfiles/desktop/.config/alacritty/alacritty.toml

@@ -40,5 +40,6 @@ white   = "#ffffff"
 [keyboard]
 bindings = [
   { key = "V", mods = "Control|Shift", action = "Paste" },
-  { key = "C", mods = "Control|Shift", action = "Copy" }
+  { key = "C", mods = "Control|Shift", action = "Copy" },
+  { key = "Return", mods = "Shift", chars = "\u001B\r" }
 ]

dotfiles/desktop/.config/i3/config

@@ -9,7 +9,7 @@ font pango:Liberation Mono 10
 exec --no-startup-id dex --autostart --environment i3
 exec --no-startup-id gnome-keyring-daemon --start --components=secrets
 exec_always --no-startup-id setxkbmap -layout us -variant intl
-exec_always --no-startup-id feh --bg-fill ~/.config/i3/wallpapers/void-minimalist2.png
+exec_always --no-startup-id feh --bg-center ~/.config/i3/wallpapers/wallpaper-161664.jpg
 exec_always --no-startup-id ~/.config/i3/scripts/setup-gtk-theme.sh
 exec --no-startup-id /usr/libexec/xdg-desktop-portal
 

dotfiles/desktop/.config/i3/scripts/lockscreen

@@ -1,6 +1,6 @@
 #!/bin/sh
 
-wallpaper="$HOME/.config/i3/wallpapers/void-minimalist.png"
+wallpaper="$HOME/.config/i3/wallpapers/maxresdefault.jpg"
 cached="$HOME/.cache/i3lock/wallpaper.png"
 dims_cache="$HOME/.cache/i3lock/dims.txt"
 dims=$(xdotool getdisplaygeometry | tr ' ' 'x')

dotfiles/desktop/.config/mimeapps.arch.list

@@ -0,0 +1,250 @@
+[Default Applications]
+text/html=userapp-Firefox-91DVN3.desktop
+x-scheme-handler/http=userapp-Firefox-91DVN3.desktop
+x-scheme-handler/https=userapp-Firefox-91DVN3.desktop
+x-scheme-handler/about=firefox.desktop
+x-scheme-handler/unknown=firefox.desktop
+application/pdf=com.github.xournalpp.xournalpp.desktop
+application/json=emacs.desktop
+application/json5=emacs.desktop
+application/xml=emacs.desktop
+application/xml-external-parsed-entity=emacs.desktop
+application/x-shellscript=emacs.desktop
+application/yaml=emacs.desktop
+inode/directory=org.gnome.Nautilus.desktop
+audio/aac=mpv.desktop
+audio/flac=mpv.desktop
+audio/m4a=mpv.desktop
+audio/mp3=mpv.desktop
+audio/mpeg=mpv.desktop
+audio/mp4=mpv.desktop
+audio/ogg=mpv.desktop
+audio/opus=mpv.desktop
+audio/vnd.wave=mpv.desktop
+audio/wav=mpv.desktop
+audio/webm=mpv.desktop
+audio/x-aac=mpv.desktop
+audio/x-m4a=mpv.desktop
+audio/x-matroska=mpv.desktop
+audio/x-mp3=mpv.desktop
+audio/x-mpegurl=mpv.desktop
+audio/x-ms-wma=mpv.desktop
+audio/x-ogg=mpv.desktop
+audio/x-pn-wav=mpv.desktop
+audio/x-scpls=mpv.desktop
+audio/x-wav=mpv.desktop
+video/3gp=mpv.desktop
+video/3gpp=mpv.desktop
+video/3gpp2=mpv.desktop
+video/avi=mpv.desktop
+video/mp2t=mpv.desktop
+video/mp4=mpv.desktop
+video/mp4v-es=mpv.desktop
+video/mpeg=mpv.desktop
+video/ogg=mpv.desktop
+video/quicktime=mpv.desktop
+video/vnd.avi=mpv.desktop
+video/webm=mpv.desktop
+video/x-avi=mpv.desktop
+video/x-flc=mpv.desktop
+video/x-flic=mpv.desktop
+video/x-flv=mpv.desktop
+video/x-m4v=mpv.desktop
+video/x-matroska=mpv.desktop
+video/x-mpeg2=mpv.desktop
+video/x-ms-asf=mpv.desktop
+video/x-ms-wmv=mpv.desktop
+video/x-msvideo=mpv.desktop
+video/x-ogm+ogg=mpv.desktop
+video/x-theora=mpv.desktop
+video/x-theora+ogg=mpv.desktop
+application/msword=libreoffice-writer.desktop
+application/rtf=libreoffice-writer.desktop
+application/vnd.ms-word=libreoffice-writer.desktop
+application/vnd.ms-word.document.macroEnabled.12=libreoffice-writer.desktop
+application/vnd.ms-word.template.macroEnabled.12=libreoffice-writer.desktop
+application/vnd.oasis.opendocument.text=libreoffice-writer.desktop
+application/vnd.oasis.opendocument.text-template=libreoffice-writer.desktop
+application/vnd.openxmlformats-officedocument.wordprocessingml.document=libreoffice-writer.desktop
+application/vnd.openxmlformats-officedocument.wordprocessingml.template=libreoffice-writer.desktop
+application/x-doc=libreoffice-writer.desktop
+text/rtf=libreoffice-writer.desktop
+application/csv=libreoffice-calc.desktop
+application/excel=libreoffice-calc.desktop
+application/msexcel=libreoffice-calc.desktop
+application/tab-separated-values=libreoffice-calc.desktop
+application/vnd.ms-excel=libreoffice-calc.desktop
+application/vnd.ms-excel.sheet.binary.macroEnabled.12=libreoffice-calc.desktop
+application/vnd.ms-excel.sheet.macroEnabled.12=libreoffice-calc.desktop
+application/vnd.ms-excel.template.macroEnabled.12=libreoffice-calc.desktop
+application/vnd.oasis.opendocument.spreadsheet=libreoffice-calc.desktop
+application/vnd.oasis.opendocument.spreadsheet-template=libreoffice-calc.desktop
+application/vnd.openxmlformats-officedocument.spreadsheetml.sheet=libreoffice-calc.desktop
+application/vnd.openxmlformats-officedocument.spreadsheetml.template=libreoffice-calc.desktop
+application/x-dos_ms_excel=libreoffice-calc.desktop
+application/x-excel=libreoffice-calc.desktop
+application/x-ms-excel=libreoffice-calc.desktop
+application/x-msexcel=libreoffice-calc.desktop
+text/comma-separated-values=libreoffice-calc.desktop
+text/csv=libreoffice-calc.desktop
+text/tab-separated-values=libreoffice-calc.desktop
+text/x-comma-separated-values=libreoffice-calc.desktop
+text/x-csv=libreoffice-calc.desktop
+application/mspowerpoint=libreoffice-impress.desktop
+application/vnd.ms-powerpoint=libreoffice-impress.desktop
+application/vnd.ms-powerpoint.presentation.macroEnabled.12=libreoffice-impress.desktop
+application/vnd.ms-powerpoint.slideshow.macroEnabled.12=libreoffice-impress.desktop
+application/vnd.ms-powerpoint.template.macroEnabled.12=libreoffice-impress.desktop
+application/vnd.oasis.opendocument.presentation=libreoffice-impress.desktop
+application/vnd.oasis.opendocument.presentation-template=libreoffice-impress.desktop
+application/vnd.openxmlformats-officedocument.presentationml.presentation=libreoffice-impress.desktop
+application/vnd.openxmlformats-officedocument.presentationml.slide=libreoffice-impress.desktop
+application/vnd.openxmlformats-officedocument.presentationml.slideshow=libreoffice-impress.desktop
+application/vnd.openxmlformats-officedocument.presentationml.template=libreoffice-impress.desktop
+text/markdown=emacs.desktop
+text/org=emacs.desktop
+text/plain=emacs.desktop
+text/rust=emacs.desktop
+text/x-c++hdr=emacs.desktop
+text/x-c++src=emacs.desktop
+text/x-chdr=emacs.desktop
+text/x-csrc=emacs.desktop
+text/x-emacs-lisp=emacs.desktop
+text/x-go=emacs.desktop
+text/x-java=emacs.desktop
+text/x-makefile=emacs.desktop
+text/x-patch=emacs.desktop
+text/x-python=emacs.desktop
+text/x-python3=emacs.desktop
+text/x-readme=emacs.desktop
+text/x-rst=emacs.desktop
+text/x-tex=emacs.desktop
+text/x-texinfo=emacs.desktop
+x-scheme-handler/chrome=userapp-Firefox-91DVN3.desktop
+application/x-extension-htm=userapp-Firefox-91DVN3.desktop
+application/x-extension-html=userapp-Firefox-91DVN3.desktop
+application/x-extension-shtml=userapp-Firefox-91DVN3.desktop
+application/xhtml+xml=userapp-Firefox-91DVN3.desktop
+application/x-extension-xhtml=userapp-Firefox-91DVN3.desktop
+application/x-extension-xht=userapp-Firefox-91DVN3.desktop
+
+[Added Associations]
+application/json=emacs.desktop;
+application/json5=emacs.desktop;
+application/pdf=com.github.xournalpp.xournalpp.desktop;
+application/xml=emacs.desktop;
+application/xml-external-parsed-entity=emacs.desktop;
+application/x-shellscript=emacs.desktop;
+application/yaml=emacs.desktop;
+text/plain=emacs.desktop;
+inode/directory=org.gnome.Nautilus.desktop;
+audio/aac=mpv.desktop;
+audio/flac=mpv.desktop;
+audio/m4a=mpv.desktop;
+audio/mp3=mpv.desktop;
+audio/mpeg=mpv.desktop;
+audio/mp4=mpv.desktop;
+audio/ogg=mpv.desktop;
+audio/opus=mpv.desktop;
+audio/vnd.wave=mpv.desktop;
+audio/wav=mpv.desktop;
+audio/webm=mpv.desktop;
+audio/x-aac=mpv.desktop;
+audio/x-m4a=mpv.desktop;
+audio/x-matroska=mpv.desktop;
+audio/x-mp3=mpv.desktop;
+audio/x-mpegurl=mpv.desktop;
+audio/x-ms-wma=mpv.desktop;
+audio/x-ogg=mpv.desktop;
+audio/x-pn-wav=mpv.desktop;
+audio/x-scpls=mpv.desktop;
+audio/x-wav=mpv.desktop;
+video/3gp=mpv.desktop;
+video/3gpp=mpv.desktop;
+video/3gpp2=mpv.desktop;
+video/avi=mpv.desktop;
+video/mp2t=mpv.desktop;
+video/mp4=mpv.desktop;
+video/mp4v-es=mpv.desktop;
+video/mpeg=mpv.desktop;
+video/ogg=mpv.desktop;
+video/quicktime=mpv.desktop;
+video/vnd.avi=mpv.desktop;
+video/webm=mpv.desktop;
+video/x-avi=mpv.desktop;
+video/x-flc=mpv.desktop;
+video/x-flic=mpv.desktop;
+video/x-flv=mpv.desktop;
+video/x-m4v=mpv.desktop;
+video/x-matroska=mpv.desktop;
+video/x-mpeg2=mpv.desktop;
+video/x-ms-asf=mpv.desktop;
+video/x-ms-wmv=mpv.desktop;
+video/x-msvideo=mpv.desktop;
+video/x-ogm+ogg=mpv.desktop;
+video/x-theora=mpv.desktop;
+video/x-theora+ogg=mpv.desktop;
+application/msword=libreoffice-writer.desktop;
+application/rtf=libreoffice-writer.desktop;
+application/vnd.ms-word=libreoffice-writer.desktop;
+application/vnd.ms-word.document.macroEnabled.12=libreoffice-writer.desktop;
+application/vnd.ms-word.template.macroEnabled.12=libreoffice-writer.desktop;
+application/vnd.oasis.opendocument.text=libreoffice-writer.desktop;
+application/vnd.oasis.opendocument.text-template=libreoffice-writer.desktop;
+application/vnd.openxmlformats-officedocument.wordprocessingml.document=libreoffice-writer.desktop;
+application/vnd.openxmlformats-officedocument.wordprocessingml.template=libreoffice-writer.desktop;
+application/x-doc=libreoffice-writer.desktop;
+text/rtf=libreoffice-writer.desktop;
+application/csv=libreoffice-calc.desktop;
+application/excel=libreoffice-calc.desktop;
+application/msexcel=libreoffice-calc.desktop;
+application/tab-separated-values=libreoffice-calc.desktop;
+application/vnd.ms-excel=libreoffice-calc.desktop;
+application/vnd.ms-excel.sheet.binary.macroEnabled.12=libreoffice-calc.desktop;
+application/vnd.ms-excel.sheet.macroEnabled.12=libreoffice-calc.desktop;
+application/vnd.ms-excel.template.macroEnabled.12=libreoffice-calc.desktop;
+application/vnd.oasis.opendocument.spreadsheet=libreoffice-calc.desktop;
+application/vnd.oasis.opendocument.spreadsheet-template=libreoffice-calc.desktop;
+application/vnd.openxmlformats-officedocument.spreadsheetml.sheet=libreoffice-calc.desktop;
+application/vnd.openxmlformats-officedocument.spreadsheetml.template=libreoffice-calc.desktop;
+application/x-dos_ms_excel=libreoffice-calc.desktop;
+application/x-excel=libreoffice-calc.desktop;
+application/x-ms-excel=libreoffice-calc.desktop;
+application/x-msexcel=libreoffice-calc.desktop;
+text/comma-separated-values=libreoffice-calc.desktop;
+text/csv=libreoffice-calc.desktop;
+text/tab-separated-values=libreoffice-calc.desktop;
+text/x-comma-separated-values=libreoffice-calc.desktop;
+text/x-csv=libreoffice-calc.desktop;
+application/mspowerpoint=libreoffice-impress.desktop;
+application/vnd.ms-powerpoint=libreoffice-impress.desktop;
+application/vnd.ms-powerpoint.presentation.macroEnabled.12=libreoffice-impress.desktop;
+application/vnd.ms-powerpoint.slideshow.macroEnabled.12=libreoffice-impress.desktop;
+application/vnd.ms-powerpoint.template.macroEnabled.12=libreoffice-impress.desktop;
+application/vnd.oasis.opendocument.presentation=libreoffice-impress.desktop;
+application/vnd.oasis.opendocument.presentation-template=libreoffice-impress.desktop;
+application/vnd.openxmlformats-officedocument.presentationml.presentation=libreoffice-impress.desktop;
+application/vnd.openxmlformats-officedocument.presentationml.slide=libreoffice-impress.desktop;
+application/vnd.openxmlformats-officedocument.presentationml.slideshow=libreoffice-impress.desktop;
+application/vnd.openxmlformats-officedocument.presentationml.template=libreoffice-impress.desktop;
+text/markdown=emacs.desktop;
+text/org=emacs.desktop;
+text/rust=emacs.desktop;
+text/x-c++hdr=emacs.desktop;
+text/x-c++src=emacs.desktop;
+text/x-chdr=emacs.desktop;
+text/x-csrc=emacs.desktop;
+text/x-emacs-lisp=emacs.desktop;
+text/x-go=emacs.desktop;
+text/x-java=emacs.desktop;
+text/x-makefile=emacs.desktop;
+text/x-patch=emacs.desktop;
+text/x-python=emacs.desktop;
+text/x-python3=emacs.desktop;
+text/x-readme=emacs.desktop;
+text/x-rst=emacs.desktop;
+text/x-tex=emacs.desktop;
+text/x-texinfo=emacs.desktop;
+x-scheme-handler/http=userapp-Firefox-91DVN3.desktop;
+x-scheme-handler/https=userapp-Firefox-91DVN3.desktop;
+x-scheme-handler/chrome=userapp-Firefox-91DVN3.desktop;

dotfiles/desktop/.config/mimeapps.list

@@ -1,7 +1,7 @@
 [Default Applications]
-text/html=firefox.desktop
-x-scheme-handler/http=firefox.desktop
-x-scheme-handler/https=firefox.desktop
+text/html=userapp-Firefox-91DVN3.desktop
+x-scheme-handler/http=userapp-Firefox-91DVN3.desktop
+x-scheme-handler/https=userapp-Firefox-91DVN3.desktop
 x-scheme-handler/about=firefox.desktop
 x-scheme-handler/unknown=firefox.desktop
 application/pdf=com.github.xournalpp.xournalpp.desktop
@@ -164,6 +164,13 @@ text/x-readme=emacs.desktop
 text/x-rst=emacs.desktop
 text/x-tex=emacs.desktop
 text/x-texinfo=emacs.desktop
+x-scheme-handler/chrome=userapp-Firefox-91DVN3.desktop
+application/x-extension-htm=userapp-Firefox-91DVN3.desktop
+application/x-extension-html=userapp-Firefox-91DVN3.desktop
+application/x-extension-shtml=userapp-Firefox-91DVN3.desktop
+application/xhtml+xml=userapp-Firefox-91DVN3.desktop
+application/x-extension-xhtml=userapp-Firefox-91DVN3.desktop
+application/x-extension-xht=userapp-Firefox-91DVN3.desktop
 
 [Added Associations]
 application/json=emacs.desktop;
@@ -326,3 +333,6 @@ text/x-readme=emacs.desktop;
 text/x-rst=emacs.desktop;
 text/x-tex=emacs.desktop;
 text/x-texinfo=emacs.desktop;
+x-scheme-handler/http=userapp-Firefox-91DVN3.desktop;
+x-scheme-handler/https=userapp-Firefox-91DVN3.desktop;
+x-scheme-handler/chrome=userapp-Firefox-91DVN3.desktop;

dotfiles/desktop/.config/opencode/opencode.json

@@ -1,7 +0,0 @@
-{
-  "$schema": "https://opencode.ai/config.json",
-  "instructions": [
-    "~/.config/opencode/bootstrap.md",
-    "~/.config/opencode/rules/safety.md"
-  ]
-}

dotfiles/desktop/.config/systemd/user/emacs.service

@@ -0,0 +1,11 @@
+[Unit]
+Description=Emacs daemon
+
+[Service]
+Type=simple
+WorkingDirectory=%h
+ExecStart=/usr/bin/emacs --fg-daemon
+Restart=on-failure
+
+[Install]
+WantedBy=default.target

dotfiles/desktop/.config/systemd/user/rclone-pcloud.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=Mount pCloud remote with rclone
+
+[Service]
+Type=simple
+ExecStart=/bin/sh -lc 'mkdir -p "$HOME/.cache/rclone/pcloud" "$HOME/Remotes/pCloud"; mountpoint -q "$HOME/Remotes/pCloud" && exit 0; exec /usr/bin/rclone mount pcloud: "$HOME/Remotes/pCloud" --config "$HOME/.config/rclone/rclone.conf" --cache-dir "$HOME/.cache/rclone/pcloud" --vfs-cache-mode writes --dir-cache-time 10m --poll-interval 1m --log-level INFO'
+ExecStop=/bin/sh -lc 'mountpoint -q "$HOME/Remotes/pCloud" && exec /usr/bin/fusermount3 -u "$HOME/Remotes/pCloud" || exit 0'
+Restart=on-failure
+RestartSec=10
+
+[Install]
+WantedBy=default.target

dotfiles/desktop/.config/systemd/user/ssh-agent.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=SSH key agent
+
+[Service]
+Type=simple
+Environment=SSH_AUTH_SOCK=%h/.local/state/ssh-agent/socket
+ExecStartPre=/usr/bin/mkdir -p %h/.local/state/ssh-agent
+ExecStartPre=/usr/bin/rm -f %h/.local/state/ssh-agent/socket
+ExecStart=/usr/bin/ssh-agent -D -a %h/.local/state/ssh-agent/socket
+Restart=on-failure
+
+[Install]
+WantedBy=default.target

dotfiles/desktop/.config/systemd/user/syncthing.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=Syncthing file synchronization
+
+[Service]
+Type=simple
+ExecStart=/usr/bin/syncthing serve --no-browser --no-restart --logfile=default
+Restart=on-failure
+
+[Install]
+WantedBy=default.target

dotfiles/desktop/.emacs.d/init.el

@@ -45,8 +45,7 @@
   'misc/rss
   'misc/terminal
   'misc/vcs
-  'misc/pdf
-  'misc/epub
+  'misc/documents
   'misc/i3-config)
 
 (message "...user configuration loaded")

dotfiles/desktop/.emacs.d/lisp/core/keybindings.el

@@ -105,8 +105,8 @@
   (define-key projectile-command-map (kbd "v") #'fscotto/project-multi-vterm)
   (define-key projectile-command-map (kbd "V") nil)
   (define-key projectile-command-map (kbd "x") #'fscotto/project-external-terminal)
-  (define-key projectile-command-map (kbd "a") #'fscotto/project-opencode-dwim)
-  (define-key projectile-command-map (kbd "A") #'fscotto/project-opencode-session)
+  (define-key projectile-command-map (kbd "a") #'fscotto/project-agent-dwim)
+  (define-key projectile-command-map (kbd "A") #'fscotto/project-agent-session)
   (define-key projectile-command-map (kbd "g") #'fscotto/project-magit-status))
 
 ;;;; LSP

dotfiles/desktop/.emacs.d/lisp/core/ui.el

@@ -2,9 +2,9 @@
 
 ;; Load default theme
 (use-package nordic-night-theme
-  :ensure t)
-
-(load-theme 'nordic-night t)
+  :ensure t
+  :config
+  (load-theme 'nordic-night t))
 
 ;; Setting default font
 (set-frame-font "Liberation Mono 14" nil t)

dotfiles/desktop/.emacs.d/lisp/lang/json.el

@@ -1,6 +1,23 @@
 ;;; json.el -*- lexical-binding: t -*-
+
+(defun fscotto/json-maybe-start-lsp ()
+  "Start LSP for JSON buffers when lsp-mode is available."
+  (when (fboundp 'lsp-deferred)
+    (lsp-deferred)))
+
 (use-package json-mode
-  :ensure t)
+  :ensure t
+  :mode
+  (("\\.json\\'" . json-mode)
+   ("\\.jsonc\\'" . json-mode))
+  :hook
+  (json-mode . fscotto/json-maybe-start-lsp))
+
+(with-eval-after-load 'json-ts-mode
+  (add-hook 'json-ts-mode-hook #'fscotto/json-maybe-start-lsp))
+
+(with-eval-after-load 'jsonc-mode
+  (add-hook 'jsonc-mode-hook #'fscotto/json-maybe-start-lsp))
 
 (provide 'json)
 

dotfiles/desktop/.emacs.d/lisp/misc/custom-functions.el

@@ -1,4 +1,5 @@
-;;functions to support syncing .elfeed between machines
+(require 'seq)
+(require 'subr-x)
 ;;makes sure elfeed reads index from disk before launching
 (defvar fscotto/elfeed-initial-update-done nil
   "Non-nil once Elfeed has triggered its first automatic update this session.")
@@ -128,16 +129,24 @@ Each entry is a cons cell of display string and session id."
   "Return the latest saved OpenCode session id for the current project."
   (cdr (car (fscotto/opencode-session-candidates (fscotto/project-root)))))
 
-(defun fscotto/project-opencode-dwim ()
-  "Open the most useful OpenCode session for the current project.
-
-Resume the latest saved session when available, otherwise create a new one."
+(defun fscotto/project-agent-dwim ()
+  "Choose an agent for the current project and launch it externally."
   (interactive)
+  (let ((agent (completing-read "Agent: " '("Claude" "Codex" "Gemini" "OpenCode") nil t)))
+    (pcase agent
+      ("Claude"
+       (fscotto/launch-external-terminal '("claude" "--continue")))
+      ("OpenCode"
        (let ((session-id (fscotto/project-opencode-latest-session-id)))
          (if session-id
              (fscotto/launch-external-terminal (list "opencode" "--session" session-id)
                                                (fscotto/project-root))
            (fscotto/project-opencode))))
+      ("Codex"
+       (fscotto/launch-external-terminal '("codex" "resume" "--last")))
+      ("Gemini"
+       (fscotto/launch-external-terminal '("gemini" "--resume" "latest")
+                                         (fscotto/project-root))))))
 
 (defun fscotto/project-opencode-session ()
   "Resume a saved OpenCode session for the current project."
@@ -151,6 +160,78 @@ Resume the latest saved session when available, otherwise create a new one."
       (fscotto/launch-external-terminal (list "opencode" "--session" session-id)
                                         project-directory))))
 
+(defun fscotto/gemini-session-candidates (directory)
+  "Return Gemini session candidates for DIRECTORY.
+
+Each entry is a cons cell of display string and session index.
+Tries JSON output first, falls back to text parsing if unavailable."
+  (let* ((default-directory (file-name-as-directory directory))
+         (json-output (shell-command-to-string
+                       "gemini --list-sessions --output-format json 2>/dev/null")))
+    (cond
+     ((string-match "^{" json-output)
+      (ignore-errors
+        (require 'json)
+        (let* ((parsed (json-parse-string json-output))
+               (sessions (gethash "sessions" parsed)))
+          (when (vectorp sessions)
+            (seq-map-indexed
+             (lambda (s idx)
+               (let* ((idx-str (number-to-string (1+ idx)))
+                      (msg (if (hash-table-p s)
+                               (or (gethash "firstUserMessage" s) "Session")
+                             "Session"))
+                      (ts (and (hash-table-p s)
+                               (ignore-errors (gethash "lastUpdated" s))
+                               (when (stringp it) (string-trim it))))
+                      (label (if ts (format "%s [%s]" msg ts) msg)))
+                 (cons label idx-str)))
+             sessions)))))
+     (t
+      (let* ((output (shell-command-to-string "gemini --list-sessions"))
+             (lines (seq-filter (lambda (s) (string-match "\\S-" s))
+                                (split-string output "\n" t)))
+             (data-lines (seq-drop lines 1))
+             (candidates nil))
+        (dolist (line data-lines)
+          (let ((trimmed (string-trim line)))
+            (when (string-match
+                   (rx (group (one-or-more digit))
+                       (one-or-more whitespace)
+                       (group (one-or-more nonl)))
+                   trimmed)
+              (push (cons (match-string 2 trimmed)
+                          (match-string 1 trimmed))
+                    candidates))))
+        (nreverse candidates))))))
+
+(defun fscotto/project-gemini-session ()
+  "Choose and resume a Gemini session for the current project."
+  (interactive)
+  (let* ((project-directory (fscotto/project-root))
+         (candidates (fscotto/gemini-session-candidates project-directory)))
+    (unless candidates
+      (user-error "No Gemini sessions found for %s" project-directory))
+    (let* ((selection (completing-read "Gemini session: " candidates nil t))
+           (session-idx (cdr (assoc selection candidates))))
+      (fscotto/launch-external-terminal
+       (list "gemini" "--resume" session-idx)
+       project-directory))))
+
+(defun fscotto/project-agent-session ()
+  "Choose an agent and resume a saved session for the current project."
+  (interactive)
+  (let ((agent (completing-read "Agent session: " '("Claude" "Codex" "Gemini" "OpenCode") nil t)))
+    (pcase agent
+      ("Claude"
+       (fscotto/launch-external-terminal '("claude" "--resume")))
+      ("OpenCode"
+       (fscotto/project-opencode-session))
+      ("Codex"
+       (fscotto/launch-external-terminal '("codex" "resume")))
+      ("Gemini"
+       (fscotto/project-gemini-session)))))
+
 (defun fscotto/project-external-terminal ()
   "Open the external terminal in project root."
   (interactive)

dotfiles/desktop/.emacs.d/lisp/misc/documents.el

@@ -0,0 +1,39 @@
+;;; documents.el -*- lexical-binding: t; -*-
+
+(use-package pdf-tools
+  :ensure t
+  :config
+  (pdf-tools-install))
+
+(use-package pdf-view
+  :config
+  (setq-default pdf-view-display-size 'fit-width)
+  (setq pdf-cache-org-imgparams t
+        pdf-view-use-smooth-scrolling t)
+  (setq pdf-annot-default-visible-properties t))
+
+(with-eval-after-load 'pdf-view
+  (define-key pdf-view-mode-map (kbd "n") 'pdf-view-next-page)
+  (define-key pdf-view-mode-map (kbd "p") 'pdf-view-previous-page)
+  (define-key pdf-view-mode-map (kbd "q") 'pdf-view-close))
+
+(use-package nov
+  :ensure t
+  :mode ("\\.epub\\'" . nov-mode))
+
+(use-package calibre
+  :ensure t
+  :commands calibre-library
+  :config
+  (setq calibre-calibredb-executable
+        (or (executable-find "calibredb")
+            (let ((flatpak-wrapper (expand-file-name "~/.local/bin/calibredb")))
+              (when (file-executable-p flatpak-wrapper)
+                flatpak-wrapper))
+            "calibredb")
+        calibre-libraries
+        `(("Library" . ,(expand-file-name "~/Documents/Library")))))
+
+(provide 'misc/documents)
+
+;;; documents.el ends here

dotfiles/desktop/.emacs.d/lisp/misc/epub.el

@@ -1,3 +0,0 @@
-(use-package nov
-  :ensure t
-  :mode ("\\.epub\\'" . nov-mode))

dotfiles/desktop/.emacs.d/lisp/misc/pdf.el

@@ -1,22 +0,0 @@
-;;; pdf.el -*- lexical-binding: t; -*-
-
-(use-package pdf-tools
-  :ensure t
-  :config
-  (pdf-tools-install))
-
-(use-package pdf-view
-  :config
-  (setq-default pdf-view-display-size 'fit-width)
-  (setq pdf-cache-org-imgparams t
-        pdf-view-use-smooth-scrolling t)
-  (setq pdf-annot-default-visible-properties t))
-
-(with-eval-after-load 'pdf-view
-  (define-key pdf-view-mode-map (kbd "n") 'pdf-view-next-page)
-  (define-key pdf-view-mode-map (kbd "p") 'pdf-view-previous-page)
-  (define-key pdf-view-mode-map (kbd "q") 'pdf-view-close))
-
-(provide 'misc/pdf)
-
-;;; pdf.el ends here

dotfiles/desktop/.emacs.d/lisp/misc/which-key.el

@@ -145,8 +145,8 @@
     "C-c p t" "Test"
     "C-c p v" "Open multi-vterm in project"
     "C-c p x" "Open external term"
-    "C-c p a" "OpenCode (dwim)"
-    "C-c p A" "Choose OpenCode session"
+    "C-c p a" "Choose agent"
+    "C-c p A" "Choose agent session"
     "C-c p e" "Edit project config"
     "C-c p g" "Project Git status"
     "C-c p 4" "Other Window"

dotfiles/desktop/.local/bin/calibredb

@@ -0,0 +1,2 @@
+#!/bin/sh
+exec flatpak run --command=calibredb com.calibre_ebook.calibre "$@"

dotfiles/desktop/.ssh/config

@@ -1,4 +1,8 @@
+Host vps
+    IdentityFile ~/.ssh/id_rsa_vps
+
 Host *
+    IdentityFile ~/.ssh/id_ed25519
     ControlMaster auto
     ControlPath ~/.local/state/ssh/sockets/%r@%h-%p
     ControlPersist 600

scripts/bootstrap_mail.sh

@@ -198,9 +198,21 @@ parse_secret_lookup_args() {
 
 resolve_dbus_session_bus_address() {
   if [ -n "${DBUS_SESSION_BUS_ADDRESS:-}" ]; then
+    case "$DBUS_SESSION_BUS_ADDRESS" in
+      unix:path=*)
+        _path=${DBUS_SESSION_BUS_ADDRESS#unix:path=}
+        _path=${_path%%,*}
+        if [ -S "$_path" ]; then
           printf '%s\n' "$DBUS_SESSION_BUS_ADDRESS"
           return 0
         fi
+        ;;
+      unix:abstract=*)
+        printf '%s\n' "$DBUS_SESSION_BUS_ADDRESS"
+        return 0
+        ;;
+    esac
+  fi
 
   if [ -f "$HOME/.dbus-session-bus-address" ]; then
     saved_bus_address=$(tr -d '\n' <"$HOME/.dbus-session-bus-address")

scripts/cleanup_nymph_sway.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env sh
+
+set -eu
+
+PACKAGES="
+swayfx
+kanshi
+grim
+grimshot
+slurp
+wl-clipboard
+xdg-desktop-portal-wlr
+cliphist
+noctalia-shell
+"
+
+USER_PATHS="
+$HOME/.config/sway
+$HOME/.config/kanshi
+$HOME/.config/noctalia
+$HOME/.local/share/noctalia-plugins
+$HOME/.local/bin/start-sway-session
+"
+
+SYSTEM_FILES="
+/etc/emptty/wayland-sessions/Sway.desktop
+/etc/xbps.d/noctalia.conf
+"
+
+check_host() {
+  if [ "$(hostname)" != "nymph" ]; then
+    printf 'Error: questo script è destinato solo a nymph (hostname attuale: %s)\n' "$(hostname)" >&2
+    exit 1
+  fi
+}
+
+remove_packages() {
+  printf 'Rimozione pacchetti swayfx+noctalia...\n'
+  # shellcheck disable=SC2086
+  sudo xbps-remove -Ry $PACKAGES
+  printf 'Rimozione dipendenze orfane...\n'
+  sudo xbps-remove -o
+}
+
+remove_user_configs() {
+  printf 'Rimozione configurazioni utente...\n'
+  for path in $USER_PATHS; do
+    if [ -e "$path" ]; then
+      rm -rf "$path"
+      printf '  rimosso: %s\n' "$path"
+    fi
+  done
+}
+
+remove_system_files() {
+  printf 'Rimozione file di sistema...\n'
+  for file in $SYSTEM_FILES; do
+    if [ -e "$file" ]; then
+      sudo rm -f "$file"
+      printf '  rimosso: %s\n' "$file"
+    fi
+  done
+}
+
+main() {
+  check_host
+  remove_packages
+  remove_user_configs
+  remove_system_files
+  printf 'Cleanup completato.\n'
+}
+
+main "$@"