spark/group_vars/all

user:
    name: pigmonkey
    uid: 1000
    gid: 1000
    group: pigmonkey
    shell: /usr/bin/zsh
    email:  peter@havenaut.net
    log:
        dir: log
        rotate: 8

hostname: nous

interception:
    caps2esc:
        enabled: True
        mode: 1
        delay: 20000

# dotfiles:
#     url: git@github.com:pigmonkey/dotfiles.git
#     destination: projects/dotfiles
#     rcup_flags: -fx README.md

aur:
    user: aur_builder
    packages:
        - yay
        - downgrade
        - zplug
        - ctmg

ssh:
    port: 22
    # user_key: /root/id_rsa
    enable_sshd: False

gnupg:
    enable_agent: True
    emulate_ssh: True

mail:
    sync_tool: isync
    sync_pim: True
    sync_taskwarrior: False
    sync_notmuch: False
    sync_time: 10min
    sync_boot_delay: 2min
    sync_on: trusted
    goimapnotify_wait: 10

network:
    conn_check: False
    wifi_wired_exclusive: True
    trusted_uuid:
        - 39744b35-2f2f-4a18-9da4-7542a56c28c2
        - d2642f7e-9e58-4b00-82f8-26b4ef76a54e
        - f74f2bd5-8748-4e1e-98f9-dae2dd44b916
        - a04ea39b-eca8-39d0-9b4a-45badc25b359
    excluded_networks:
        # Docker
        - docker*
        - br-*
        # libvirt
        - virbr*
        - vnet*
        # Migrant
        - mg-wg-*

editors:
    - gvim

# video_drivers:
#     - libva-intel-driver

base_packages:
    - base-devel
    - man-db
    - man-pages
    - pacman-contrib
    - fwupd
    - dmidecode
    - lshw
    - tmux
    - git
    - rsync
    - coreutils
    - moreutils
    - dateutils
    - bc
    - ranger
    - arch-wiki-lite
    - arch-wiki-docs
    - python-keyring
    - python-secretstorage
    - tig
    - ruby
    - pv
    - minicom
    - jq
    - screen
    - termdown
    - fzf
    - vivid
    - restic
    - myrepos
    - miller

filesystem_packages:
    - dosfstools
    - ntfsprogs
    - exfatprogs
    - gparted
    - udftools

browser_choices:
    - firefox -P default
    - firefox -P work
    - firewarden chromium
    - firewarden -c qutebrowser
    - tor-browser-en
    - play
    - qcode
    - "| xclip -selection c"

gitannex:
    stop_on_untrusted: True

bootloader: grub

postgresql:
    enable: True
    root: /home/postgres

fingerprint: False

etesync: False

tor:
    run_on: trusted

localtime:
    run_on: trusted

unbound:
    tls: True
    roothints_update: trusted
    nameservers:
        - 1.1.1.1@853#cloudflare-dns.com  # Cloudflare
        - 9.9.9.9@853#dns.quad9.net  # Quad9
    private_domains:
        - corp
        - home
        - intranet
        - lan
        - mesh
        - private
    allow_lan_dns: True

bluetooth:
    disable: False

firejail:
    blacklist:
        - ~/.calendars
        - ~/.config/vdirsyncer
        - ~/.config/pimsync
        - ~/.contacts
        - ~/.keys
        - ~/.mbsyncrc
        - ~/.offlineimap
        - ~/.offlineimaprc
        - ~/.password-store
        - ~/.vdirsyncer
        - ~/library

resnap:
    exclude_user_cache: True
    drives:
        - name: alta
          uuid: 03cdc071-a883-4515-be43-b486bd98136c
        - name: bishorn
          uuid: 245e474d-5228-4f08-850c-ebc6cfae0e4c
        - name: pilchuck
          uuid: b19dbe02-5447-4031-b08d-73380117bf44
        - name: palisade
          uuid: 56582cb4-22c5-4f1b-8f5c-ef73ce886417

journal:
    max_size: 500M

udisks:
    auto_mount: False
    shared_mount: True

hostsctl:
    url: https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts

goesimage:
    run_time: 15min
    run_boot_delay: 2min
    run_on: trusted
    flags: -w -e

libinput:
    middle_click_scroll: 12
    button_mapping: "1 2 3 4 5 6 7 8 9 10 11 2"

display_manager: lightdm

desktop_environment: i3

base_fonts:
    - adobe-source-code-pro-fonts
    - cantarell-fonts
    - gsfonts
    - noto-fonts
    - terminus-font
    - tex-gyre-fonts
    - ttc-iosevka
    - ttc-iosevka-aile
    - ttc-iosevka-ss08
    - ttf-caladea
    - ttf-carlito
    - ttf-dejavu
    - ttf-droid
    - ttf-fira-mono
    - ttf-ibm-plex
    - ttf-inconsolata
    - ttf-liberation
    - ttf-opensans
    - ttf-ubuntu-font-family

aur_fonts:
    - ttf-bitstream-charter
    - ttf-cooper-hewitt
    - ttf-courier-prime
    - ttf-heuristica
    - ttf-merriweather
    - ttf-merriweather-sans
    - ttf-mplus-git
    - ttf-oswald
    - ttf-quintessential
    - ttf-signika

syncthing:
    run_on: trusted
    open_ports: true

kdeconnect:
    run_on: trusted
    open_ports: true

mirrorlist:
    run_on: trusted
    country: US

units:
    run_on: trusted

pkgfile:
    run_on: trusted

hardened:
    enable_namespaces: true

kernel_parameters: "quiet consoleblank=60 amdgpu.abmlevel=0"

power_management: "tuned"

regdomain: "US"

# illuminanced:
#     max_backlight_file: /sys/class/backlight/amdgpu_bl1/max_brightness
#     backlight_file: /sys/class/backlight/amdgpu_bl1/brightness
#     illuminance_file: /sys/bus/iio/devices/iio:device0/in_illuminance_raw
#     min_backlight: 70

terminal: kitty

restash:
    run_on: trusted
    # sftp:
    #     backup:
    #         schedule: "hourly"
    #         delay: "5min"
    #     maintenance:
    #         schedule: "daily"
    #         delay: "1h"
    #     check:
    #         schedule: "*-*-1/3"
    #         delay: "1h"
    # b2:
    #     backup:
    #         schedule: "daily"
    #         delay: "1h"
    #     maintenance:
    #         schedule: "daily"
    #         delay: "1h"
    #     check:
    #         schedule: "*-*-1/3"
    #         delay: "1h"