@sebastienrousseau/dotfiles 0.2.481 → 0.2.499

package/scripts/tuning/linux.sh

@@ -1,175 +0,0 @@
-#!/usr/bin/env bash
-# Linux System Tuning (opt-in)
-# Managed by chezmoi - https://github.com/sebastienrousseau/dotfiles
-#
-# Usage: DOTFILES_TUNING=1 DOTFILES_PROFILE=laptop ./linux.sh
-# Profiles: laptop, desktop, server
-
-set -euo pipefail
-
-if [[ "${DOTFILES_TUNING:-0}" != "1" ]]; then
-  echo "Tuning is disabled. Re-run with DOTFILES_TUNING=1 to apply."
-  exit 0
-fi
-
-PROFILE="${DOTFILES_PROFILE:-laptop}"
-
-if [[ "$PROFILE" != "laptop" && "$PROFILE" != "desktop" && "$PROFILE" != "server" ]]; then
-  echo "DOTFILES_PROFILE must be: laptop, desktop, or server. Got: $PROFILE"
-  exit 1
-fi
-
-echo "Applying Linux tuning for profile: $PROFILE"
-
-apply_sysctl() {
-  local key="$1"
-  local value="$2"
-  if command -v sudo >/dev/null; then
-    echo "  Setting $key = $value"
-    sudo sysctl -w "$key=$value" >/dev/null 2>&1 || echo "  Warning: Failed to set $key"
-  fi
-}
-
-if ! command -v sudo >/dev/null; then
-  echo "sudo not available; skipping sysctl tuning."
-  exit 0
-fi
-
-# =============================================================================
-# File System Tuning
-# =============================================================================
-echo "Configuring file system settings..."
-
-# Increase inotify watchers for IDEs and file sync tools
-apply_sysctl "fs.inotify.max_user_watches" "524288"
-apply_sysctl "fs.inotify.max_user_instances" "512"
-
-# Increase file descriptor limits
-apply_sysctl "fs.file-max" "2097152"
-
-# =============================================================================
-# Memory Tuning - vm.swappiness
-# =============================================================================
-echo "Configuring memory settings..."
-
-case "$PROFILE" in
-  laptop)
-    # Laptop: Balance between RAM and battery (moderate swappiness)
-    apply_sysctl "vm.swappiness" "10"
-    apply_sysctl "vm.vfs_cache_pressure" "50"
-    apply_sysctl "vm.dirty_ratio" "15"
-    apply_sysctl "vm.dirty_background_ratio" "5"
-    ;;
-  desktop)
-    # Desktop: Prefer RAM over swap (low swappiness, more RAM usage)
-    apply_sysctl "vm.swappiness" "5"
-    apply_sysctl "vm.vfs_cache_pressure" "50"
-    apply_sysctl "vm.dirty_ratio" "20"
-    apply_sysctl "vm.dirty_background_ratio" "5"
-    ;;
-  server)
-    # Server: Minimal swapping for consistent performance
-    apply_sysctl "vm.swappiness" "1"
-    apply_sysctl "vm.vfs_cache_pressure" "100"
-    apply_sysctl "vm.dirty_ratio" "10"
-    apply_sysctl "vm.dirty_background_ratio" "3"
-    ;;
-esac
-
-# =============================================================================
-# Network Tuning - TCP Keepalive
-# =============================================================================
-echo "Configuring TCP keepalive settings..."
-
-# TCP keepalive: Detect dead connections faster
-# Default: 7200s (2 hours) - we reduce to 60s for faster detection
-apply_sysctl "net.ipv4.tcp_keepalive_time" "60"
-
-# Interval between keepalive probes (default: 75s)
-apply_sysctl "net.ipv4.tcp_keepalive_intvl" "10"
-
-# Number of keepalive probes before connection is dropped (default: 9)
-apply_sysctl "net.ipv4.tcp_keepalive_probes" "6"
-
-# Enable TCP Fast Open for faster connections
-apply_sysctl "net.ipv4.tcp_fastopen" "3"
-
-# Increase TCP buffer sizes for better throughput
-apply_sysctl "net.core.rmem_max" "16777216"
-apply_sysctl "net.core.wmem_max" "16777216"
-apply_sysctl "net.ipv4.tcp_rmem" "4096 87380 16777216"
-apply_sysctl "net.ipv4.tcp_wmem" "4096 65536 16777216"
-
-# Connection tracking and queueing
-apply_sysctl "net.core.somaxconn" "4096"
-apply_sysctl "net.core.netdev_max_backlog" "4096"
-
-# Reuse TIME_WAIT sockets for new connections
-apply_sysctl "net.ipv4.tcp_tw_reuse" "1"
-
-# Reduce FIN timeout for faster connection cleanup
-apply_sysctl "net.ipv4.tcp_fin_timeout" "15"
-
-# =============================================================================
-# Security Tuning
-# =============================================================================
-echo "Configuring security settings..."
-
-# Disable IP source routing
-apply_sysctl "net.ipv4.conf.all.accept_source_route" "0"
-apply_sysctl "net.ipv4.conf.default.accept_source_route" "0"
-
-# Ignore ICMP redirects
-apply_sysctl "net.ipv4.conf.all.accept_redirects" "0"
-apply_sysctl "net.ipv4.conf.default.accept_redirects" "0"
-
-# Ignore bogus ICMP errors
-apply_sysctl "net.ipv4.icmp_ignore_bogus_error_responses" "1"
-
-# Enable SYN flood protection
-apply_sysctl "net.ipv4.tcp_syncookies" "1"
-
-# =============================================================================
-# Persist Settings
-# =============================================================================
-echo "Persisting settings to /etc/sysctl.d/99-dotfiles.conf..."
-
-if command -v sudo >/dev/null; then
-  sudo tee /etc/sysctl.d/99-dotfiles.conf >/dev/null <<'EOF'
-# Dotfiles system tuning - auto-generated
-# https://github.com/sebastienrousseau/dotfiles
-
-# File system
-fs.inotify.max_user_watches = 524288
-fs.inotify.max_user_instances = 512
-fs.file-max = 2097152
-
-# Memory (adjust vm.swappiness per profile)
-vm.vfs_cache_pressure = 50
-
-# TCP Keepalive
-net.ipv4.tcp_keepalive_time = 60
-net.ipv4.tcp_keepalive_intvl = 10
-net.ipv4.tcp_keepalive_probes = 6
-net.ipv4.tcp_fastopen = 3
-
-# TCP Performance
-net.core.rmem_max = 16777216
-net.core.wmem_max = 16777216
-net.core.somaxconn = 4096
-net.core.netdev_max_backlog = 4096
-net.ipv4.tcp_tw_reuse = 1
-net.ipv4.tcp_fin_timeout = 15
-
-# Security
-net.ipv4.conf.all.accept_source_route = 0
-net.ipv4.conf.default.accept_source_route = 0
-net.ipv4.conf.all.accept_redirects = 0
-net.ipv4.conf.default.accept_redirects = 0
-net.ipv4.icmp_ignore_bogus_error_responses = 1
-net.ipv4.tcp_syncookies = 1
-EOF
-fi
-
-echo "Linux tuning complete for profile: $PROFILE"
-echo "Note: Some settings require a reboot to take full effect."

package/scripts/tuning/macos.sh

@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-# macOS tuning (opt-in)
-
-set -euo pipefail
-
-if [[ "${DOTFILES_TUNING:-0}" != "1" ]]; then
-  echo "Tuning is disabled. Re-run with DOTFILES_TUNING=1 to apply."
-  exit 0
-fi
-
-if [[ "${DOTFILES_PROFILE:-}" != "laptop" && "${DOTFILES_PROFILE:-}" != "desktop" && "${DOTFILES_PROFILE:-}" != "server" ]]; then
-  echo "DOTFILES_PROFILE is not set to a known profile. Aborting."
-  exit 1
-fi
-
-echo "Applying macOS tuning..."
-
-# Faster key repeat (requires logout/login to fully apply)
-defaults write -g InitialKeyRepeat -int 15
-defaults write -g KeyRepeat -int 2
-
-# Finder: show all filename extensions
-defaults write NSGlobalDomain AppleShowAllExtensions -bool true
-
-# Finder: use list view by default in all Finder windows
-# Four-letter codes for view modes: `icnv`, `clmv`, `glyv`, `Nlsv` (list)
-defaults write com.apple.finder FXPreferredViewStyle -string "Nlsv"
-
-# Finder: show path bar
-defaults write com.apple.finder ShowPathbar -bool true
-
-# Finder: show status bar
-defaults write com.apple.finder ShowStatusBar -bool true
-
-# Finder: keep folders on top when sorting by name
-defaults write com.apple.finder _FXSortFoldersFirst -bool true
-
-# Restart Finder to apply changes
-killall Finder >/dev/null 2>&1 || true
-
-# Dock: reduce show/hide delay
-defaults write com.apple.dock autohide-delay -float 0
-defaults write com.apple.dock autohide-time-modifier -float 0.2
-killall Dock >/dev/null 2>&1 || true
-
-echo "macOS tuning complete."

package/templates/projects/molecule/README.md

@@ -1,7 +0,0 @@
-# __PROJECT_NAME__
-
-Molecule scenario scaffold.
-
----
-
-Made with ❤️ by [Sebastien Rousseau](https://github.com/sebastienrousseau)

package/templates/projects/molecule/converge.yml

@@ -1,7 +0,0 @@
----
-- name: Converge
-  hosts: all
-  tasks:
-    - name: Print a message
-      ansible.builtin.debug:
-        msg: "Molecule scenario: __PROJECT_NAME__"

package/templates/projects/molecule/molecule.yml

@@ -1,16 +0,0 @@
----
-driver:
-  name: docker
-
-platforms:
-  - name: instance
-    image: "geerlingguy/docker-ubuntu2204-ansible:latest"
-    privileged: true
-
-provisioner:
-  name: ansible
-  playbooks:
-    converge: converge.yml
-
-verifier:
-  name: ansible

package/templates/projects/packer/README.md

@@ -1,15 +0,0 @@
-# __PROJECT_NAME__
-
-Packer template scaffold.
-
-## Build
-
-```bash
-packer init .
-packer validate .
-packer build .
-```
-
----
-
-Made with ❤️ by [Sebastien Rousseau](https://github.com/sebastienrousseau)

package/templates/projects/packer/main.pkr.hcl

@@ -1,15 +0,0 @@
-packer {
-  required_version = ">= 1.9.0"
-}
-
-source "null" "example" {
-  communicator = "none"
-}
-
-build {
-  sources = ["source.null.example"]
-
-  provisioner "shell" {
-    inline = ["echo 'Packer template: __PROJECT_NAME__'"]
-  }
-}