## Summary - Fix Super+Return keybinding to launch wezterm in sway - Set fish as default login shell - Remove `initialPassword` (real password already set) - Add 1Password CLI + GUI, chezmoi, and dev tool packages (neovim, eza, fd, fzf, zoxide, starship, atuin, bat, ripgrep) - Add ringtail reference card, update host inventory and reference index - Changelog fragment ## Post-merge deployment - `mise run provision-ringtail` to rebuild NixOS - On ringtail: launch 1Password GUI, enable CLI integration (Settings > Developer > CLI integration) - Chezmoi needs `.chezmoiignore` updates in the dotfiles repo (separate task) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/208
31 lines
954 B
Bash
Executable file
31 lines
954 B
Bash
Executable file
#!/usr/bin/env bash
|
|
#MISE description="Run ansible playbook to provision ringtail (NixOS)"
|
|
|
|
set -euo pipefail
|
|
|
|
export MISE_TASK_OUTPUT=interleave
|
|
|
|
# Update flake.lock via Dagger before deploying
|
|
echo "Updating nixos/ringtail/flake.lock..."
|
|
dagger call flake-lock --src=. --flake-path=nixos/ringtail \
|
|
export --path=nixos/ringtail/flake.lock
|
|
|
|
if ! git diff --quiet nixos/ringtail/flake.lock; then
|
|
git add nixos/ringtail/flake.lock
|
|
echo "flake.lock changed and staged. Commit, push, and re-run."
|
|
exit 1
|
|
fi
|
|
|
|
COMMIT=$(git rev-parse HEAD)
|
|
REMOTE_REF=$(git ls-remote origin "$(git rev-parse --abbrev-ref HEAD)" 2>/dev/null | awk '{print $1}')
|
|
|
|
if [[ "$REMOTE_REF" != "$COMMIT" ]]; then
|
|
echo "ERROR: Current commit $COMMIT is not pushed to forge."
|
|
echo "Push your changes first: git push"
|
|
exit 1
|
|
fi
|
|
|
|
echo "Deploying commit $COMMIT to ringtail..."
|
|
|
|
cd ansible
|
|
ansible-playbook playbooks/ringtail.yml -e "ringtail_commit=$COMMIT" "$@"
|