nix: Make nix the root

Which means now I'll have to think about real prefixes in commit names.

unprocessed/config/automatrop/roles/dotfiles/handlers/main.yml

@@ -0,0 +1,3 @@
+---
+- name: Install dotfiles
+  ansible.builtin.command: "{{ ansible_user_dir }}/.dotfiles/config/scripts/dotfiles install"

unprocessed/config/automatrop/roles/dotfiles/tasks/main.yml

@@ -0,0 +1,9 @@
+---
+- name: Install dotfiles repository
+  ansible.builtin.git:
+    repo: "{% if has_forge_access %}git@git.frogeye.fr:{% else %}https://git.frogeye.fr/{% endif %}geoffrey/dotfiles.git"
+    dest: "{{ ansible_user_dir }}/.dotfiles"
+    update: true
+  notify: install dotfiles
+  tags: dotfiles_repo
+# TODO Put actual dotfiles in a subdirectory of the repo, so we don't have to put everything in config

unprocessed/config/automatrop/roles/extensions/tasks/main.yml

@@ -0,0 +1,14 @@
+---
+- name: Load extensions
+  ansible.builtin.include_role:
+    name: geoffreyfrogeye.{{ extension }}automatrop.entry
+  loop: "{{ extensions }}"
+  loop_control:
+    loop_var: extension
+  tags: always
+
+- name: Configure extensions rc sourcing
+  ansible.builtin.template:
+    src: extrc.sh.j2
+    dest: "{{ ansible_user_dir }}/.config/shell/extrc"
+    mode: u=rw,g=r,o=r

unprocessed/config/automatrop/roles/extensions/templates/extrc.sh.j2

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+{% for extension in extensions %}
+trysource ~/.config/{{ extension }}scripts/{{ extension }}profile
+{% endfor %}
+{# TODO Rename profile as rc, and add env #}
+{# TODO Put in non-linked path #}

unprocessed/config/automatrop/roles/system/files/getty.service

@@ -0,0 +1,2 @@
+[Service]
+ExecStartPre=/bin/sh -c 'setleds +num < /dev/%I'

unprocessed/config/automatrop/roles/system/files/xorg/intel_backlight.conf

@@ -0,0 +1,5 @@
+Section "Device"
+    Identifier  "Intel Graphics"
+    Driver      "intel"
+    Option      "Backlight"  "intel_backlight"
+EndSection

unprocessed/config/automatrop/roles/system/files/xorg/joystick.conf

@@ -0,0 +1,15 @@
+Section "InputClass"
+        Identifier "joystick catchall"
+        MatchIsJoystick "on"
+        MatchDevicePath "/dev/input/event*"
+        Driver "joystick"
+        Option "StartKeysEnabled" "False"       #Disable mouse
+        Option "StartMouseEnabled" "False"      #support
+EndSection
+# Same thing for DualShock 4 touchpad
+Section "InputClass"
+       Identifier   "ds4-touchpad"
+       Driver       "libinput"
+       MatchProduct "Wireless Controller Touchpad"
+       Option       "Ignore" "True"
+EndSection

unprocessed/config/automatrop/roles/system/handlers/main.yaml

@@ -0,0 +1,10 @@
+- name: Reload systemd daemon
+  ansible.builtin.systemd:
+    daemon_reload: true
+  listen: systemd changed
+  become: true
+
+- name: Warn about changed Panfrost config
+  ansible.builtin.debug:
+    msg: The Panfrost display driver configuration was changed, but needs a reboot to be applied.
+  listen: panfrost config changed

unprocessed/config/automatrop/roles/system/tasks/main.yml

@@ -0,0 +1,70 @@
+# Xorg configuration
+
+- name: Check if there is Intel backlight
+  ansible.builtin.stat:
+    path: /sys/class/backlight/intel_backlight
+  register: intel_backlight
+  when: display_server == 'x11'
+
+- name: Install Intel video drivers (Arch based)
+  community.general.pacman:
+    name: xf86-video-intel
+    # state: "{{ intel_backlight.stat.exists }}"
+    state: present
+  become: true
+  when: display_server == 'x11' and intel_backlight.stat.exists and arch_based
+  # TODO With software role? Would permit other distributions
+
+- name: Configure Xorg Intel backlight
+  ansible.builtin.copy:
+    src: xorg/intel_backlight.conf
+    dest: "{{ item }}/20-intel_backlight.conf"
+  become: true
+  when: display_server == 'x11' and intel_backlight.stat.exists
+  loop: "{{ xorg_common_config_dirs }}"
+
+- name: Configure Xorg joystick behaviour
+  ansible.builtin.copy:
+    src: xorg/joystick.conf
+    dest: "{{ item }}/50-joystick.conf"
+  become: true
+  when: display_server == 'x11'
+  loop: "{{ xorg_common_config_dirs }}"
+
+- name: List modules we're using
+  ansible.builtin.slurp:
+    src: /proc/modules
+  register: modules
+  when: display_server
+# Not sure the module will be loaded in early setup stages though
+
+- name: Make panfrost use OpenGL 3.3
+  ansible.builtin.lineinfile:
+    path: /etc/environment
+    line: PAN_MESA_DEBUG="gl3"
+    regexp: ^#? ?PAN_MESA_DEBUG=
+  become: true
+  when: display_server and using_panfrost
+  vars:
+    using_panfrost: "{{ 'panfrost' in (modules.content | b64decode) }}"
+  notify: panfrost config changed
+
+# Numlock on boot
+
+- name: Set numlock on boot
+  ansible.builtin.copy:
+    src: getty.service
+    dest: /etc/systemd/system/getty@.service.d/override.conf
+  become: true
+  notify:
+    - systemd changed
+  when: auto_numlock
+
+- name: Unset numlock on boot
+  ansible.builtin.file:
+    path: /etc/systemd/system/getty@.service.d/override.conf
+    state: absent
+  become: true
+  notify:
+    - systemd changed
+  when: not auto_numlock

unprocessed/config/automatrop/roles/termux/tasks/main.yml

@@ -0,0 +1,29 @@
+---
+- name: Create Termux directory
+  ansible.builtin.file:
+    state: directory
+    path: "{{ ansible_user_dir }}/.termux"
+    mode: u=rwx,g=rx,o=rx
+# TODO This is a dotfiles directory.
+# Make it not install unless it's Termux
+
+- name: Silence Termux login message
+  ansible.builtin.file:
+    state: file
+    path: "{{ ansible_user_dir }}/.hushlogin"
+    mode: u=rw,g=r,o=r
+
+# https://github.com/kdrag0n/base16-termux/blob/master/templates/default.mustache
+- name: Download base16 theme for Termux
+  ansible.builtin.copy:
+    content: "{{ base16_schemes['schemes'][base16_scheme]['termux']['colors']['base16-' + base16_scheme + '.properties'] }}"
+    dest: "{{ ansible_env.HOME }}/.termux/colors.properties"
+    mode: u=rw,g=r,o=r
+  tags:
+    - color
+
+# TODO
+# Upgrade
+# If root:
+# $ apt install tsu
+# $ echo '/system/bin/mount -o remount,rw /; ln -s /data/data/com.termux/files/usr /usr; /system/bin/mount -o remount,ro /' | tsu

unprocessed/config/automatrop/roles/vdirsyncer/templates/config.j2

@@ -0,0 +1,44 @@
+[general]
+status_path = "~/.cache/vdirsyncer/status/"
+
+{% for config in configs %}
+
+# CarDAV
+
+[pair geoffrey_contacts]
+a = "geoffrey_contacts_local"
+b = "geoffrey_contacts_remote"
+collections = ["from a", "from b"]
+metadata = ["displayname"]
+
+[storage geoffrey_contacts_local]
+type = "filesystem"
+path = "~/.cache/vdirsyncer/contacts/"
+fileext = ".vcf"
+
+[storage geoffrey_contacts_remote]
+type = "carddav"
+url = "https://cloud.frogeye.fr/remote.php/dav"
+username = "geoffrey"
+password.fetch = ["command", "sh", "-c", "cat ~/.config/vdirsyncer/pass"]
+
+# CalDAV
+
+[pair geoffrey_calendar]
+a = "geoffrey_calendar_local"
+b = "geoffrey_calendar_remote"
+collections = ["from a", "from b"]
+metadata = ["displayname", "color"]
+
+[storage geoffrey_calendar_local]
+type = "filesystem"
+path = "~/.cache/vdirsyncer/calendars/"
+fileext = ".ics"
+
+[storage geoffrey_calendar_remote]
+type = "caldav"
+url = "https://cloud.frogeye.fr/remote.php/dav"
+username = "geoffrey"
+password.fetch = ["command", "sh", "-c", "cat ~/.config/vdirsyncer/pass"]
+
+{% endfor %}