Configuration

Configuration

This machine's variables live in host_vars/localhost.yml. Each role's defaults are in its defaults/main.yml and can be overridden there.

# Cloud providers (opt-in, default false)
install_aws: true
install_azure: false
install_gcp: false

# Optional tools (opt-in, default false)
install_kubelogin: false   # OIDC login plugin for kubectl
install_node: false        # yarn, corepack
install_ios: false         # xcodegen, ldid, zsign, dpkg (sign iOS apps outside the App Store)
install_tfsec: false       # Terraform security scanner (trivy config covers it)
install_helmfile: false    # declarative helm releases

# Dotfiles
dotfiles_repo: "https://github.com/user-cube/dotfiles.git"

# Folders created in $HOME
directories_to_create:
  - personal
  - work

# Your own taps and tools
custom_user_taps:
  - your-tap/tap
custom_user_tools:
  - your-tap/tap/tool-name
custom_user_casks:
  - your-tap/tap/app-name

Cloud providers

The aws, azure and gcp roles skip everything unless their install_* is true. Turn one on in host_vars, or for one run:

ansible-playbook daily-driver.yml -e install_aws=true
ansible-playbook daily-driver.yml --tags aws -e install_aws=true   # that provider only

Other variables worth knowing

Variable	Role
dotfiles_dest	system	where the dotfiles are cloned (default ~/dotfiles)
krew_plugins	dev-tools	the kubectl plugins krew installs (the dotfiles put them on the PATH)
zsh_plugins, tmux_plugins	terminal	the plugins cloned at a pinned commit (Renovate moves the pins)
felixkratz_tools	apps	borders and SketchyBar
raycast_bitwarden_item	apps	the Bitwarden item that holds the Raycast export (Raycast)
local_files_machine	system	whose backup --tags local-restore restores

The full list per role: Roles.