mirror of
https://github.com/fscotto/infra.git
synced 2026-07-29 16:20:01 +00:00
ae8a6161cd
Elimina completamente la sessione desktop i3 (X11), ormai non più usata (gli host espongono solo sway e Hyprland su Wayland): - ruolo profile_desktop_i3 e voce emptty i3.desktop - desktop_i3_packages e i guard 'i3' in desktop_sessions_enabled - desktop_i3_dotfiles e host_i3_dotfiles (autorandr X11) - dotfiles i3/X11: .xinitrc, i3, i3blocks, picom, polybar, autorandr - task host-specifici i3 (copy dotfiles, wrap prime-run su nymph) - rimuove st (terminale X11 da sorgente) da desktop_void_source_tools - consolida lo script live in scripts/remove_i3.sh, elimina cleanup-i3.sh - aggiorna la documentazione (README/AGENTS/CLAUDE/knowledge) Config Emacs lasciata invariata di proposito. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
96 lines
7.2 KiB
Markdown
96 lines
7.2 KiB
Markdown
# AGENTS.md
|
|
|
|
Ansible-driven personal infrastructure repo for Void desktops, Linux workstations, WSL, and an Ubuntu server.
|
|
|
|
## Source Of Truth
|
|
- Main orchestration: `ansible/site.yml`
|
|
- Inventory and layering inputs: `ansible/inventory/hosts.yml`, `ansible/inventory/group_vars/*.yml`, `ansible/inventory/host_vars/*.yml`
|
|
- Dotfiles live under `dotfiles/`
|
|
- AI agent instructions (bootstrap, rules, knowledge) are centralized in `dotfiles/common/.config/ai/` and shared between OpenCode, Codex, and Gemini CLI.
|
|
- OpenCode loads its entrypoint configuration from `dotfiles/common/.config/opencode/opencode.json`.
|
|
- Codex config is rendered from `dotfiles/common/.codex/config.toml.j2` so `model_instructions_file` points to the deployed `~/.config/ai/bootstrap.md`.
|
|
|
|
## Topology
|
|
- Void desktops: `ikaros`, `nymph`
|
|
- Native Linux workstation: `deadalus-fedora`
|
|
- WSL dev: `deadalus-wsl`
|
|
- Ubuntu server: `prometheus`
|
|
- Hosts intentionally belong to multiple groups; trust `ansible/site.yml` over hostname assumptions.
|
|
|
|
## Working Rules
|
|
- Preserve layering `all -> OS -> profile -> host`.
|
|
- Keep `ansible/site.yml` small; orchestration belongs there, implementation belongs in roles.
|
|
- Prefer minimal, targeted edits. Preserve idempotency and existing ordering.
|
|
- All hosts use `ansible_connection: local`.
|
|
- Treat `secrets/` as sensitive. Never print secret values.
|
|
- Tmux plugins are bootstrapped by TPM on the host; the repo only keeps tmux config and custom helper scripts.
|
|
- Read the relevant role tasks, templates, vars, and deployed dotfiles before editing.
|
|
|
|
## Validation
|
|
- Default minimum:
|
|
- `ansible-playbook ansible/site.yml --syntax-check`
|
|
- Repo-wide checks:
|
|
- `ansible-lint ansible/site.yml`
|
|
- `ansible-lint ansible/roles`
|
|
- `yamllint ansible/`
|
|
- Host-focused dry runs:
|
|
- Void desktop work: `ansible-playbook ansible/site.yml --limit ikaros --check --diff` or `--limit nymph --check --diff`
|
|
- Fedora workstation: `ansible-playbook ansible/site.yml --limit deadalus-fedora --check --diff`
|
|
- WSL dev: `ansible-playbook ansible/site.yml --limit deadalus-wsl --check --diff`
|
|
- Server: `ansible-playbook ansible/site.yml --limit prometheus --check --diff`
|
|
- Focused checks:
|
|
- Emacs dotfiles only: `ansible-playbook ansible/site.yml --limit ikaros --tags emacs --check --diff` or `--limit nymph --tags emacs --check --diff`
|
|
- Mail bootstrap: `sh -n scripts/bootstrap_mail.sh` and `shellcheck scripts/bootstrap_mail.sh`
|
|
- Server compose render: `docker compose -f /opt/docker/server/docker-compose.yml config`
|
|
|
|
## Conventions
|
|
- Use FQCN Ansible modules.
|
|
- Prefer declarative modules over `command`/`shell`; when `shell` is required, make idempotency and failure behavior explicit.
|
|
- Start YAML files with `---`, use 2-space indentation, and keep file modes quoted like `"0644"`.
|
|
- Keep booleans as booleans and structured vars as YAML lists/maps.
|
|
- Put host-specific overrides in `host_vars`, not shared `group_vars`.
|
|
- Use `no_log: true` for secret-bearing task inputs or outputs.
|
|
|
|
## Desktop Notes
|
|
- `profile_desktop_common` owns the shared desktop bootstrap; `profile_desktop_sway` (Wayland/SwayFX) and `profile_desktop_hyprland` (Wayland) install their respective sessions in parallel and are wired into the `void` play in `ansible/site.yml`. `desktop_sessions_enabled` and `desktop_default_session` in host vars decide which sessions are exposed in `emptty` and which is preselected.
|
|
- `.emacs.d` is deployed by a dedicated `profile_desktop_common` task tagged `emacs`.
|
|
- NTFS filesystem support is provided by `ntfs-3g` in `ansible/inventory/group_vars/void.yml`.
|
|
- Void user services are managed by `turnstile` and live under `dotfiles/desktop/.config/service/`.
|
|
- `ssh-agent` keeps the stable socket `~/.local/state/ssh-agent/socket`.
|
|
- Critical session entrypoints:
|
|
- `dotfiles/desktop/.config/sway/config` plus `host.conf` and `session-env` deployed via `host_sway_dotfiles` (sway / Wayland)
|
|
- `dotfiles/desktop/.config/hypr/hyprland.conf` plus `host.conf` and `session-env` deployed via `host_hyprland_dotfiles` (Hyprland / Wayland)
|
|
- Do not auto-restart `emptty` during playbook runs on active Void desktop hosts; restart it manually from another TTY/SSH session if needed.
|
|
- `nymph` is a Void laptop with NVIDIA Optimus, running sway (Wayland) and Hyprland (Wayland); host-specific tasks in `profile_desktop_host/tasks/nymph.yml` handle GRUB NVIDIA cmdline params, `prime-run` wrapper, and the WirePlumber camera priority config. Multi-monitor on sway is driven by `kanshi` (config deployed via `host_sway_dotfiles`), and on Hyprland by host-specific Hyprland monitor/workspace rules.
|
|
|
|
## Void Package And Dotfile Bucket Rules
|
|
The four Void desktop package lists in `ansible/inventory/group_vars/void.yml` are kept disjoint by role:
|
|
- `void_packages_base` — system runtime only (init/services, kernel, audio core, networking, filesystem, firewall, hardware daemons, runit logging).
|
|
- `desktop_common_packages` — WM-agnostic GUI infra (GTK theme, polkit, keyring, NM-applet, blueman, audio GUI, file manager backend + GVFS, portal, flatpak, printing/scanning).
|
|
- `desktop_sway_packages` / `desktop_hyprland_packages` — binaries specific to each session. Cross-WM packages used by both (`dunst`, `rofi`, `alacritty`) are intentionally duplicated in the two lists.
|
|
`profile_packages` in the same file is cross-distro and is overridden by `group_vars/server.yml` and the workstation group vars; do not move desktop-specific Void entries through it.
|
|
The dotfile vars follow the same split: `desktop_common_dotfiles` (in `group_vars/desktop.yml`) carries WM-agnostic GUI config and user scripts (Thunar, mimeapps, GTK theme setup, Udiskie, fontconfig, WirePlumber, mpv, …); `desktop_void_dotfiles` (in `group_vars/void.yml`) is reserved for files that need Void runtime (turnstile services, bash runit/dbus/ssh-agent fragments, `update-turnstile-env`).
|
|
|
|
## Workstation Notes
|
|
- Native Linux workstation hosts can combine `workstation_host_linux` with an OS-specific dev group.
|
|
- `deadalus-fedora` keeps GNOME managed settings in `ansible/inventory/host_vars/deadalus-fedora.yml`.
|
|
|
|
## Coding Agent Notes
|
|
- Shared agent packages live in `ai_agents_npm_packages` in `ansible/inventory/group_vars/all.yml`.
|
|
- Shared agent dotfiles live in `ai_agents_dotfiles`; rendered configs live in `ai_agents_templates`.
|
|
- Desktop, native workstation, and WSL profiles consume the shared agent package list; do not duplicate package entries in profile-specific vars.
|
|
- `dotfiles_common` copies common dotfiles plus `ai_agents_dotfiles`, then renders `ai_agents_templates`.
|
|
- Keep `.config/ai/` as the common instruction source; update agent-specific entrypoints to reference it rather than duplicating instruction text.
|
|
|
|
## Tooling Notes
|
|
- Install local tooling with:
|
|
- `python3 -m pip install ansible ansible-lint yamllint shellcheck-py`
|
|
- `ansible-galaxy collection install -r ansible/collections/requirements.yml`
|
|
- Required collections currently include `ansible.posix` and `community.general`.
|
|
- `.yamllint` treats `line-length` as a warning at 120 chars and disables `document-start` and `comments-indentation`.
|
|
|
|
## When Updating Docs
|
|
- Keep `README.md` and `AGENTS.md` aligned when workflows materially change.
|
|
- If you add a new operational area, also add the narrowest validation command for it.
|
|
- Call out checks you could not run and any follow-up verification needed.
|