Update configuration

README.md

@@ -60,7 +60,7 @@ Run the `setup` playbook:
 ```bash
 cd ~/.local/share/linux-setup-playbook
 
-./run.sh main.yml
+./run.sh playbooks/default.yml
 ```
 
 The [run.sh](run.sh) script is a tiny wrapper for the `ansible-playbook` command. By default it uses
@@ -75,10 +75,10 @@ mode and so on.
 Example:
 
 ```bash
-./run.sh main.yml --list-tasks
-./run.sh main.yml -t backup -t spotify
-./run.sh main.yml -t packages -t restic
-./run.sh main.yml -t spotify --diff -C
+./run.sh playbooks/default.yml --list-tasks
+./run.sh playbooks/default.yml -t packages
+./run.sh playbooks/default.yml -t packages --diff --check
+./run.sh playbooks/default.yml -t git -t chrome
 ```
 
 ## Thanks

config.flaudisio.yml

@@ -99,7 +99,6 @@ packages_apt_install:
   - printer-driver-cups-pdf
   - rename
   - sqlite3
-  - transmission-qt
   - unar
   - unrar
   - unzip

playbooks/common.yml

@@ -55,8 +55,6 @@
     # IDEs & development tools
     - role: vscode
       tags: vscode
-    - role: q
-      tags: q
 
     # Misc. applications
     - role: discord

main.yml → playbooks/default.yml

@@ -11,13 +11,11 @@
       tags: packages
     - role: git
       tags: git
+    - role: mise
+      tags: mise
     - role: chrome
       tags: chrome
     - role: geerlingguy.docker
       tags: docker
-    - role: mise
-      tags: mise
-    - role: bat
-      tags: bat
     - role: vscode
       tags: vscode

roles/local/chrome/defaults/main.yml

@@ -1,2 +1,4 @@
 ---
 chrome_package_url: https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
+
+chrome_set_as_default_browser: false

roles/local/chrome/tasks/main.yml

@@ -9,3 +9,15 @@
     deb: "{{ chrome_package_url }}"
     state: present
   when: "'google-chrome-stable' not in ansible_facts.packages"
+
+- name: Set Chrome as default browser in Alternatives
+  community.general.alternatives:
+    name: "{{ item }}"
+    link: /usr/bin/{{ item }}
+    path: /usr/bin/google-chrome-stable
+    priority: 100
+    state: selected
+  loop:
+    - gnome-www-browser
+    - x-www-browser
+  when: chrome_set_as_default_browser | bool

roles/local/git/defaults/main.yml

@@ -6,13 +6,12 @@ git_extra_packages:
   - qgit
   - tig
 
-git_open_version: 3.1.0
+git_open_version: 41ebfceb
 
-git_open_dl_url: https://raw.githubusercontent.com/paulirish/git-open/v{{ git_open_version }}/git-open
+git_open_dl_url: https://raw.githubusercontent.com/paulirish/git-open/{{ git_open_version }}/git-open
 
 git_open_bin_path: /usr/local/bin/git-open
 
-# Example:
 # git_config: |
 #   [user]
 #     name = Example User

roles/local/mise/defaults/main.yml

@@ -1,7 +1,7 @@
 ---
 # Ref: https://mise.jdx.dev/installing-mise.html#github-releases
 
-mise_version: 2025.12.0
+mise_version: 2026.5.7
 
 mise_bin_dl_arch: "{{ 'arm64' if ansible_facts.architecture == 'aarch64' else 'x64' }}"
 

roles/local/packages/defaults/main.yml

@@ -6,6 +6,13 @@ packages_apt_remove: []
 packages_apt_purge: true
 packages_apt_autoremove: false
 
+# packages_apt_pin_versions:
+#   - package: alloy
+#     version: 1.16.1
+#   - package: nginx
+#     version: 1.24.0-*
+packages_apt_pin_versions: []
+
 # Snap
 
 packages_snap_remove_snapd: false

roles/local/packages/tasks/apt.yml

@@ -24,3 +24,19 @@
     purge: "{{ packages_apt_purge }}"
   when: packages_apt_autoremove | bool
   tags: packages:apt:autoremove
+
+- name: Configure version pinnings
+  ansible.builtin.template:
+    src: apt/version-pinning.j2
+    dest: /etc/apt/preferences.d/ansible-version-pinning
+    owner: root
+    group: root
+    mode: "0644"
+    lstrip_blocks: true
+  when: packages_apt_pin_versions | length > 0
+
+- name: Ensure version pinning configuration is absent
+  ansible.builtin.file:
+    path: /etc/apt/preferences.d/ansible-version-pinning
+    state: absent
+  when: packages_apt_pin_versions | length == 0

roles/local/packages/templates/apt/version-pinning.j2

@@ -0,0 +1,7 @@
+{% for item in packages_apt_pin_versions %}
+Package: {{ item.package }}
+Pin: version {{ item.version }}
+Pin-Priority: 700
+{# Empty line for better readability #}
+
+{% endfor %}

roles/local/rclone/defaults/main.yml

@@ -1,5 +1,5 @@
 ---
-rclone_version: 1.73.1
+rclone_version: 1.74.1
 
 rclone_package_arch: "{{ 'arm64' if ansible_facts.architecture == 'aarch64' else 'amd64' }}"
 

roles/local/restic/tasks/main.yml

@@ -44,7 +44,7 @@
     group: "{{ restic_bin_group }}"
     mode: "{{ restic_bin_mode }}"
 
-- name: Configure non-root user capabilities on binary file
+- name: Set binary file capabilities
   community.general.capabilities:
     path: "{{ restic_bin_path }}"
     capability: cap_dac_read_search=+ep

roles/local/resticprofile/defaults/main.yml

@@ -1,5 +1,5 @@
 ---
-resticprofile_version: 0.32.0
+resticprofile_version: 0.33.1
 
 resticprofile_dl_arch: "{{ 'arm64' if ansible_facts.architecture == 'aarch64' else 'amd64' }}"
 

roles/local/resticprofile/tasks/main.yml

@@ -12,7 +12,7 @@
     src: "{{ resticprofile_dl_url }}"
     dest: "{{ resticprofile_bin_path | dirname }}"
     include:
-      - resticprofile  # Extract only the binary
+      - resticprofile
     owner: root
     group: root
     mode: "0755"

templates/resticprofile/excludes.txt.j2

@@ -116,6 +116,7 @@ restic-ignored/
 /home/*/.local/share/GitKrakenCLI
 /home/*/.local/share/helm
 /home/*/.local/share/mise
+/home/*/.local/share/org.gnome.SoundRecorder
 /home/*/.local/share/Trash
 /home/*/.local/share/uv
 /home/*/.local/share/virtualenv

templates/resticprofile/includes.txt.j2

@@ -4,3 +4,7 @@
 /home
 /root
 /usr/local/bin
+
+{% for dir in __rp_extra_backup_dirs | default([]) %}
+{{ dir }}
+{% endfor %}

templates/resticprofile/profiles.yaml.j2

@@ -13,7 +13,6 @@ global:
   schedule-defaults:
     ignore-on-battery-less-than: 30
     lock-wait: 15m
-    log: {{ resticprofile_log_dir }}/{{ '{{ .Profile.Name }}' }}.log
 
 .base:
   lock: /tmp/resticprofile.{{ '{{ .Profile.Name }}' }}.lock
@@ -75,6 +74,9 @@ global:
 
 default:
   inherit: {{ __rp_default_profile }}
+  {% if __rp_prometheus_save_to_file | default("") != "" %}
+  prometheus-save-to-file: {{ __rp_prometheus_save_to_file }}
+  {% endif %}
 
 main:
   inherit: .base