update

.config/autostart/jetbrains-toolbox.desktop

@@ -1,15 +0,0 @@
-[Desktop Entry]
-Icon=/opt/jetbrains-toolbox/bin/toolbox.svg
-Exec=/opt/jetbrains-toolbox/bin/jetbrains-toolbox --minimize
-Version=1.0
-Type=Application
-Categories=Development
-Name=JetBrains Toolbox
-StartupWMClass=jetbrains-toolbox
-Terminal=false
-MimeType=x-scheme-handler/jetbrains;
-X-GNOME-Autostart-enabled=true
-StartupNotify=false
-X-GNOME-Autostart-Delay=10
-X-MATE-Autostart-Delay=10
-X-KDE-autostart-after=panel

.config/nvim/lua/plugins/codecomapnion.lua

@@ -65,7 +65,7 @@ return {
             name = "ollama",
             schema = {
               model = {
-                default = "mistral:latest",
+                default = "mistral:v0.3",
               },
             },
             env = {

.config/scripts/sessions.sh

@@ -10,7 +10,7 @@ new() {
    name=$(find "$HOME/Documents/gitlab" -mindepth 2 -maxdepth 2 -type d \
         | awk -F/ '{print $(NF-1)"/"$NF}' \
         | sort \
-        | wofi -dmenu -i -p "New Session" --columns 1)
+        | wofi --dmenu -i -p "New Session" --columns 1)
 
     if [ -z "$name" ]; then
         return
@@ -61,7 +61,7 @@ goland-new() {
    name=$(find "$HOME/Documents/gitlab" -mindepth 2 -maxdepth 2 -type d \
         | awk -F/ '{print $(NF-1)"/"$NF}' \
         | sort \
-        | wofi -dmenu -i -p "New JetBrains Session" --columns 1)
+        | wofi --dmenu -i -p "New JetBrains Session" --columns 1)
 
   if [ -z "$name" ]; then
       return

.config/shell/alias.zsh

@@ -20,3 +20,4 @@ alias gc='git commit -a'
 alias gd='git diff'
 alias gp='git push'
 alias bw='NODE_OPTIONS="" bw'
+alias devpod='flatpak run --arch=x86_64 --command=devpod-cli sh.loft.devpod'

.nixpkgs/config.nix

@@ -36,6 +36,7 @@
         libnotify
         wl-clipboard
         dnsutils
+        golangci-lint
       ];
     };
   };

Makefile

@@ -4,6 +4,9 @@ export
 run:
 	ansible-playbook ./ansible/local.yml -K
 
+security:
+	ansible-playbook ./ansible/security.yml -K
+
 update:
 	ansible-playbook ./ansible/update.yml -K
 

ansible/roles/packages/vars/Pop!_OS-24.04.yml

@@ -1,27 +1,8 @@
 install_homebrew_if_missing: true
 
 required_packages_brew:
-  #- lazygit
-  #- glab
-  #- oh-my-posh
-  #- tpm
-  #- kubernetes-cli
   - zsh-autosuggestions
-  #- bitwarden-cli
-  #- ttyd
-  #- fastfetch
-  #- vivid
-  #- yazi
   - zsh-history-substring-search
-  #- opentofu
-  #- helm
-  #- bat
-  #- neovim
-  #- eza
-  #- zoxide
-  #- ansible
-  #- ffmpeg
-  #- k9s
   - helm
 
 required_packages_apt:
@@ -44,26 +25,8 @@ required_packages_apt:
   - yubikey-personalization 
   - yubikey-manager
   - distrobox
-  #- htop
-  #- curl
-  #- xsel
-  #- wl-clipboard  
-  #- podman
-  #- wget
-  #- apt-transport-https
-  #- software-properties-common
-  #- python3 
-  #- python3-pip 
-  #- libvirt-clients 
-  #- libvirt-daemon-system 
-  #- bridge-utils 
-  #- virtinst 
-  #- vlc
-  #- vault
-  #- fzf
-  #- ripgrep
-  #- libsecret-tools
-  #- rclone
+  - unattended-upgrades
+  - timeshift
 
 #apt_keys:
 #  - https://packages.microsoft.com/keys/microsoft.asc
@@ -74,7 +37,7 @@ required_packages_apt:
 #  - {name: "hashicorp-archive-keyring", url: "https://apt.releases.hashicorp.com/gpg"}
 
 flatpak_remote:
-  - {name: 'flathub', url: "https://dl.flathub.org/repo/flathub.flatpakrepo"}
+  - {name: 'flathub', url: "https://dl.flathub.org/repo/flathub.flatpakrepo", method: "user"}
 
 required_packages_flatpak:
   - me.proton.Mail
@@ -83,19 +46,14 @@ required_packages_flatpak:
   - com.github.tchx84.Flatseal
   - com.vscodium.codium
   - org.chromium.Chromium
-  - org.libreoffice.LibreOffice
   - com.parsecgaming.parsec
   - org.videolan.VLC
   - fr.handbrake.ghb
   - com.spotify.Client
   - org.signal.Signal
   - com.yubico.yubioath
-  - org.gnome.Calculator
   - io.gitlab.librewolf-community
-
-#go_version_target: "go version go1.23.4 linux/amd64"
-#go_tarball: "go1.23.5.linux-amd64.tar.gz"
-#go_checksum: "sha256:cbcad4a6482107c7c7926df1608106c189417163428200ce357695cc7e01d091"
+  - com.brave.Browser
 
 go_apps:
   - github.com/charmbracelet/vhs@latest

ansible/roles/security/tasks/defaults.yml

@@ -0,0 +1,20 @@
+- name: Configure Security Auto Updates
+  shell:
+    cmd: dpkg-reconfigure -p medium unattended-upgrades
+  become: yes
+  when: ansible_facts["os_family"] == 'Debian'
+
+- name: Check if UFW is installed
+  command: ufw version
+  register: ufw_version
+  ignore_errors: true
+  changed_when: false
+
+- name: Configure UFW
+  shell:
+    cmd: |
+      ufw enable
+      ufw default deny incoming
+      ufw default allow outgoing
+  become: yes
+  when: ufw_version.rc == 0

ansible/roles/security/tasks/main.yml

@@ -0,0 +1,11 @@
+- name: Load a variable file
+  include_vars: "{{ item }}"
+  with_first_found:
+  - "vars/{{ ansible_distribution }}-{{ ansible_distribution_version }}.yml"
+  - "vars/{{ ansible_distribution }}.yml"
+  - "vars/{{ ansible_os_family }}.yml"
+  - "vars/defaults.yml"
+
+- name: "load tasks"
+  include_tasks: "defaults.yml"
+

ansible/roles/update/tasks/main.yml

@@ -1,13 +1,15 @@
-#- name: Update Pacman
-#  community.general.pacman:
-#    update_cache: true
-#    upgrade: true
+- name: Update Pacman
+  community.general.pacman:
+    update_cache: true
+    upgrade: true
+  when: ansible_facts["os_family"] == 'Archlinux'
 
 - name: Upgrade Packages
   package:
     update_cache: yes
     upgrade: safe 
   become: yes
+  when: ansible_facts["os_family"] == 'Debian'
 
 - name: Update Nix Packages
   become_user: user

ansible/scripts/install_flatpak.yml

@@ -3,7 +3,7 @@
     name: "{{ item.name }}"
     state: present
     flatpakrepo_url: "{{ item.url }}"
-    method: user
+    method: "{{ item.method }}"
   with_items:  "{{ flatpak_remote }}"      
   when: flatpak_remote is defined   
 
@@ -17,6 +17,8 @@
   become_user: user
   community.general.flatpak:
     name: "{{ item }}"
+    method: user
+    state: latest
   with_items:  "{{ required_packages_flatpak }}"     
   when: required_packages_flatpak is defined   
   ignore_errors: yes

ansible/security.yml

@@ -0,0 +1,5 @@
+- hosts: localhost
+  connection: local
+  become: true
+  roles:
+    - security