Add --noconfirm to paru commands for non-interactive installs

Remove dependency on java

bash.org

@@ -86,7 +86,7 @@ bind '"\e[B": history-search-forward'
 
 ** Kitty for SSH
 #+begin_src bash
-[ "$TERM" = "xterm-kitty" ] && alias ssh="kitty +kitten ssh"
+[ "$TERM" = "xterm-kitty" ] && [ -n "$KITTY_WINDOW_ID" ] && alias ssh="kitty +kitten ssh"
 #+end_src
 
 ** Aliases
@@ -238,13 +238,15 @@ export TEXMFHOME=$HOME/.local/share/texmf
 
 *** Linkding
 #+begin_src bash
+if [ "$(hostnamectl hostname)" = "ldehaeze" ]; then
     export LINKDING_URL=`pass nas/linkding_url`
     export LINKDING_TOKEN=`pass nas/linkding_token`
+fi
 #+end_src
 
 *** Restic
 #+begin_src bash
-if [ "$(hostname)" = "ldehaeze" ]; then
+if [ "$(hostnamectl hostname)" = "ldehaeze" ]; then
     export RESTIC_REPOSITORY=sftp:thomas@homelab:/srv/storage/Backups/esrf-laptop
     export RESTIC_PASSWORD_COMMAND="pass show restic"
 fi
@@ -258,7 +260,7 @@ export PATH
 
 ** Automatically run =startx=
 #+begin_src bash
-if [ -z "${DISPLAY}" ] && [ "${XDG_VTNR}" -eq 1 ]; then
+if [ -z "${DISPLAY}" ] && [ -n "${XDG_VTNR}" ] && [ "${XDG_VTNR}" -eq 1 ]; then
     exec startx
 fi
 #+end_src

binaries.org

@@ -378,7 +378,7 @@ List of useful programs:
 - =inkscape=
 - =gs=
 - =pdfcrop=
-- =pdftk=
+- =qpdf=
 
 *** PDF to PNG
 #+begin_src bash
@@ -439,7 +439,7 @@ pdftrim_function() { \
 *** PDF Extract Pages
 #+begin_src bash
 pdfextract_function() { \
-    if command -v pdftk &> /dev/null; then
+    if command -v qpdf &> /dev/null; then
         pages=$(echo -e "get first\ndelete first\nextract i-j" | rofi -i -dmenu -p "Extract pages")
 
         if [ -z "$pages" ]; then
@@ -448,21 +448,21 @@ pdfextract_function() { \
 
         case "$pages" in
             "get first")
-                if command -v pdftk &> /dev/null; then
-                    pdftk "$filename_with_extension" cat 1-1 output "$filename_without_extension.first.pdf"
+                if command -v qpdf &> /dev/null; then
+                    qpdf --pages "$filename_with_extension" 1 -- "$filename_with_extension" "$filename_without_extension.first.pdf"
                 fi
                 ;;
             "delete first")
-                if command -v pdftk &> /dev/null; then
-                    pdftk "$filename_with_extension" cat 2-end output "$filename_with_extension"
+                if command -v qpdf &> /dev/null; then
+                    qpdf --pages "$filename_with_extension" 2-z -- "$filename_with_extension" "$filename_with_extension"
                 fi
                 ;;
             "extract i-j")
                 # TODO
                 page_i=$(rofi -dmenu -p "From")
                 page_j=$(rofi -dmenu -p "To")
-                if command -v pdftk &> /dev/null; then
-                    pdftk "$filename_with_extension" cat "$page_i-$page_j" output "$filename_with_extension.slice.pdf"
+                if command -v qpdf &> /dev/null; then
+                    qpdf --pages "$filename_with_extension" "$page_i-$page_j" -- "$filename_with_extension" "$filename_with_extension.slice.pdf"
                 fi
                 ;;
         esac
@@ -474,9 +474,9 @@ pdfextract_function() { \
 #+begin_src bash
 pdf_delete_first_page_function() { \
     if command -v stapler &> /dev/null; then
-        stapler del "$filename_with_extension" 1 /tmp/pdftk_out.pdf && mv /tmp/pdftk_out.pdf "$filename_with_extension"
-    elif command -v pdftk &> /dev/null; then
-        pdftk "$filename_with_extension" cat 2-end output /tmp/pdftk_out.pdf && mv /tmp/pdftk_out.pdf "$filename_with_extension"
+        stapler del "$filename_with_extension" 1 /tmp/qpdf_out.pdf && mv /tmp/qpdf_out.pdf "$filename_with_extension"
+    elif command -v qpdf &> /dev/null; then
+        qpdf --pages "$filename_with_extension" 2-z -- "$filename_with_extension" /tmp/qpdf_out.pdf && mv /tmp/qpdf_out.pdf "$filename_with_extension"
     fi
 }
 #+end_src
@@ -484,10 +484,10 @@ pdf_delete_first_page_function() { \
 *** Remove Annotations
 #+begin_src bash
 pdf_remove_annotations_function() { \
-    if command -v pdftk &> /dev/null; then
-        pdftk "$filename_with_extension" output /tmp/uncompressed.pdf uncompress
+    if command -v qpdf &> /dev/null; then
+        qpdf --qdf "$filename_with_extension" /tmp/uncompressed.pdf
         LANG=C sed -n '/^\/Annots/!p' /tmp/uncompressed.pdf > /tmp/stripped.pdf
-        pdftk /tmp/stripped.pdf output "$filename_with_extension" compress
+        qpdf /tmp/stripped.pdf "$filename_with_extension"
     fi
 }
 #+end_src

calendar-contact.org

@@ -1,6 +1,47 @@
 #+TITLE:Calendar and Contact Configuration
 #+SETUPFILE: ./setup/org-setup-file.org
 
+* Calendar Install Script
+:PROPERTIES:
+:header-args:bash: :tangle scripts/install-calendar.sh :shebang "#!/bin/bash" :mkdirp yes
+:END:
+
+Calendar/contact documentation: [[file:calendar-contact.org][calendar-contact.org]]
+
+#+begin_src bash
+set -euo pipefail
+
+DOTFILES="${HOME}/.config/literate-dotfiles"
+
+tangle() {
+    emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
+}
+#+end_src
+
+** Packages
+
+#+begin_src bash
+echo "==> Calendar and contacts packages"
+paru -S --needed --noconfirm \
+    vdirsyncer \
+    khal \
+    khard
+#+end_src
+
+** Tangle Systemd Configs
+
+#+begin_src bash
+echo "==> Tangling systemd configs for calendar"
+tangle "systemd.org"
+#+end_src
+
+** Systemd Timer
+
+#+begin_src bash
+echo "==> Enabling vdirsyncer timer"
+systemctl --user enable --now vdirsyncer.timer
+#+end_src
+
 * =vdirsyncer= - Synchronize calendars and contacts
 :PROPERTIES:
 :header-args:  :tangle ~/.config/vdirsyncer/config

config.org

@@ -13,31 +13,35 @@ Host backup
     hostname pierrick.tdehaeze.xyz
     Port 10022
     user thomas
-    IdentityFile ~/.ssh/id_rsa
+    IdentityFile ~/.ssh/id_ed25519
 
 Host pierrick
     hostname pierrick.tdehaeze.xyz
     Port 56432
     user pierrick
-    IdentityFile ~/.ssh/id_rsa
+    IdentityFile ~/.ssh/id_ed25519
 
 Host homelab
     hostname <<get-password(passname="ip/homelab")>>
     Port 22
     user thomas
-    IdentityFile ~/.ssh/id_rsa
+    IdentityFile ~/.ssh/id_ed25519
+
+Host zotac
+    hostname 192.168.5.75
+    Port 22
+    user thomas
+    IdentityFile ~/.ssh/id_ed25519
 
 Host router
     hostname 192.168.1.1
     Port 22
     user root
-    IdentityFile ~/.ssh/id_rsa
-    PubkeyAcceptedAlgorithms +ssh-rsa
-    HostkeyAlgorithms +ssh-rsa
+    IdentityFile ~/.ssh/id_ed25519
 
 Host *.esrf.fr
     User dehaeze
-    IdentityFile ~/.ssh/id_rsa
+    IdentityFile ~/.ssh/id_ed25519
 
 Host firewall.esrf.fr
     Port 5022
@@ -49,7 +53,7 @@ Match host *.esrf.fr !host firewall.esrf.fr !exec "~/.ssh/esrf-test"
 Host rnice
     Port 22
     user dehaeze
-    IdentityFile ~/.ssh/id_rsa
+    IdentityFile ~/.ssh/id_ed25519
 #+end_src
 
 #+begin_src bash :tangle ~/.ssh/esrf-test :comments none :mkdirp yes :shebang "#!/usr/bin/env bash" :tangle-mode (identity #o555)

doom.org

@@ -30,15 +30,7 @@ DOOM="${HOME}/.config/emacs/bin/doom"
 
 #+begin_src bash
 echo "==> Emacs packages"
-paru -S --needed emacs aspell aspell-en aspell-fr
-#+end_src
-
-** Doom Emacs
-
-#+begin_src bash
-echo "==> Installing Doom Emacs"
-git clone --depth 1 https://github.com/doomemacs/doomemacs ~/.config/emacs
-"${DOOM}" install --no-config
+paru -S --needed --noconfirm emacs aspell aspell-en aspell-fr
 #+end_src
 
 ** Tangle Configuration
@@ -47,15 +39,16 @@ Tangle =doom.org= to generate =config.el=, =init.el= and =packages.el=:
 
 #+begin_src bash
 echo "==> Tangling doom.org"
-emacsclient -e "(org-babel-tangle-file \"${DOTFILES}/doom.org\")" \
-    || emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/doom.org\")"
+mkdir ${HOME}/.config/doom
+emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/doom.org\")"
 #+end_src
 
-** Sync
+** Doom Install
 
 #+begin_src bash
-echo "==> Running doom sync"
-"${DOOM}" sync
+echo "==> Installing Doom Emacs"
+git clone --depth 1 https://github.com/doomemacs/doomemacs ~/.config/emacs
+"${DOOM}" install
 #+end_src
 
 * Introduction and Resources
@@ -360,7 +353,7 @@ Function that opens current pdf page as an SVG file with Inkscape.
       (setq filename (read-string "Enter file name:" (car (split-string (file-name-base buffer-file-name) "_"))))
     (setq filename (read-string "Enter file name:")))
   (setq filepath (concat "/tmp/" filename ".svg"))
-  (shell-command (concat "pdftk " buffer-file-name " cat " (number-to-string (pdf-view-current-page)) " output /tmp/pdf_page.pdf"))
+  (shell-command (concat "qpdf --pages " buffer-file-name " " (number-to-string (pdf-view-current-page)) " -- " buffer-file-name " /tmp/pdf_page.pdf"))
   (shell-command (concat "pdf2svg /tmp/pdf_page.pdf " filepath))
   (start-process "" nil "inkscape" filepath))
 
@@ -3210,7 +3203,7 @@ Provides nice functions such as:
        ;;nim               ; python + lisp at the speed of c
        ;;nix               ; I hereby declare "nix geht mehr!"
        ;;ocaml             ; an objective camel
-       (org +pretty +roam2 +hugo +noter)               ; organize your plain life in plain text
+       (org +pretty +roam +hugo +noter)               ; organize your plain life in plain text
        ;;php               ; perl's insecure younger brother
        ;;plantuml          ; diagrams for confusing people more
        ;;graphviz          ; diagrams for confusing yourself even more

install.org

@@ -14,7 +14,7 @@ It tangles several install scripts:
 - =~/install-latex.sh= — LaTeX toolchain (texlive, biber)
 - =~/install-laptop.sh= — laptop-specific tools (tlp, powertop, thermald)
 
-All scripts use =paru -S --needed= to be idempotent (safe to re-run).
+All scripts use =paru -S --needed --noconfirm --noconfirm= to be idempotent (safe to re-run) and non-interactive.
 
 * Prerequisites
 ** =git=
@@ -50,8 +50,7 @@ set -euo pipefail
 DOTFILES="${HOME}/.config/literate-dotfiles"
 
 tangle() {
-    emacsclient -e "(org-babel-tangle-file \"${DOTFILES}/$1\")" \
-        || emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
+    emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
 }
 #+end_src
 
@@ -59,7 +58,7 @@ tangle() {
 
 #+begin_src bash
 echo "==> Desktop packages"
-paru -S --needed \
+paru -S --needed --noconfirm \
     i3-wm \
     sxhkd \
     polybar \
@@ -69,10 +68,8 @@ paru -S --needed \
     kitty \
     bash bash-completion \
     zoxide \
-    nerd-fonts-hack noto-fonts-emoji \
     xorg-xrandr arandr \
     xautocfg \
-    arc-gtk-theme xcursor-breeze \
     feh xwallpaper
 #+end_src
 
@@ -108,13 +105,19 @@ i3-msg restart 2>/dev/null || echo "  (i3 not running, config will apply on next
 
 #+begin_src bash
 set -euo pipefail
+
+DOTFILES="${HOME}/.config/literate-dotfiles"
+
+tangle() {
+    emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
+}
 #+end_src
 
 ** Shell and Terminal
 
 #+begin_src bash
 echo "==> Shell and Terminal"
-paru -S --needed \
+paru -S --needed --noconfirm \
     bash bash-completion zsh \
     kitty \
     tmux
@@ -126,8 +129,10 @@ paru -S --needed \
 
 #+begin_src bash
 echo "==> Fonts"
-paru -S --needed \
-    nerd-fonts-hack \
+paru -S --needed --noconfirm \
+    ttf-hack-nerd \
+    ttf-sourcecodepro-nerd \
+    adobe-source-code-pro-fonts \
     noto-fonts-emoji
 #+end_src
 
@@ -137,7 +142,7 @@ Default fonts: Monospace/Serif/Sans = =Hack Nerd Font=.
 
 #+begin_src bash
 echo "==> Text Editors"
-paru -S --needed \
+paru -S --needed --noconfirm \
     neovim python-pynvim nodejs-neovim \
     emacs \
     aspell aspell-en aspell-fr
@@ -157,7 +162,7 @@ Emacs config: [[./doom.org][doom.org]]
 
 #+begin_src bash
 echo "==> GnuPG and Pass"
-paru -S --needed \
+paru -S --needed --noconfirm \
     gnupg gnome-keyring \
     pass rofi-pass pass-git-helper
 #+end_src
@@ -192,7 +197,7 @@ ssh-add ~/.ssh/id_ed25519
 
 #+begin_src bash
 echo "==> Window Manager and Desktop"
-paru -S --needed \
+paru -S --needed --noconfirm \
     i3-wm \
     sxhkd \
     polybar \
@@ -213,7 +218,7 @@ paru -S --needed \
 
 #+begin_src bash
 echo "==> File Manager"
-paru -S --needed yazi
+paru -S --needed --noconfirm yazi
 #+end_src
 
 Yazi config: [[file:yazi.org][yazi.org]]
@@ -222,20 +227,20 @@ Yazi config: [[file:yazi.org][yazi.org]]
 
 #+begin_src bash
 echo "==> Terminal Utilities"
-paru -S --needed \
+paru -S --needed --noconfirm \
     fd ripgrep fzf \
     xclip xsel \
     atool unzip \
     trash-cli \
     man-db \
-    neofetch
+    fastfetch
 #+end_src
 
 ** Browser
 
 #+begin_src bash
 echo "==> Browser"
-paru -S --needed \
+paru -S --needed --noconfirm \
     qutebrowser python-adblock pdfjs \
     firefox-developer-edition passff-host
 #+end_src
@@ -252,10 +257,11 @@ Spell checking for qutebrowser:
 
 #+begin_src bash
 echo "==> Media"
-paru -S --needed \
+paru -S --needed --noconfirm \
     mpv \
     jellyfin-tui \
     nsxiv \
+    tesseract tesseract-data-eng tesseract-data-fra tesseract-data-osd \
     zathura zathura-pdf-mupdf zathura-djvu zathura-ps zathura-cb \
     pdfpc \
     gst-plugins-ugly gst-plugins-good gst-plugins-base-libs gst-plugins-base gst-plugins-bad gst-libav
@@ -263,12 +269,18 @@ paru -S --needed \
 
 ** Sound (PipeWire)
 
+Core PipeWire packages (required):
 #+begin_src bash
 echo "==> PipeWire"
-paru -S --needed \
+paru -S --needed --noconfirm \
     pipewire pipewire-alsa pipewire-audio pipewire-jack pipewire-pulse \
-    wireplumber \
-    pwvucontrol
+    wireplumber
+#+end_src
+
+Optional GUI control (install manually when available):
+#+begin_src bash :tangle no
+echo "==> PipeWire GUI (optional)"
+paru -S --needed --noconfirm pwvucontrol || echo "pwvucontrol failed, skipping"
 #+end_src
 
 Enable PipeWire services:
@@ -282,8 +294,8 @@ systemctl --user enable --now wireplumber.service
 
 #+begin_src bash
 echo "==> PDF and Image Utilities"
-paru -S --needed \
-    pdf2svg pdftk pdfarranger \
+paru -S --needed --noconfirm \
+    pdf2svg qpdf pdfarranger \
     imagemagick \
     maim flameshot \
     unclutter \
@@ -294,7 +306,7 @@ paru -S --needed \
 
 #+begin_src bash
 echo "==> Office"
-paru -S --needed \
+paru -S --needed --noconfirm \
     onlyoffice-bin \
     libreoffice-fresh libreoffice-fresh-fr \
     inkscape
@@ -304,7 +316,7 @@ paru -S --needed \
 
 #+begin_src bash
 echo "==> System Utilities"
-paru -S --needed \
+paru -S --needed --noconfirm \
     udiskie \
     blueman \
     sshfs \
@@ -327,34 +339,97 @@ Enable Syncthing:
 systemctl --user enable --now syncthing
 #+end_src
 
-** GTK Theme
-
-#+begin_src bash
-echo "==> GTK Theme"
-paru -S --needed \
-    lxappearance \
-    arc-gtk-theme \
-    xcursor-breeze \
-    gtk2fontsel
-#+end_src
-
 ** Misc Utilities
 
 #+begin_src bash
 echo "==> Misc Utilities"
-paru -S --needed \
-    screenkey \
+paru -S --needed --noconfirm \
     xwallpaper \
     highlight-pointer-git \
     mpd
 #+end_src
 
+** SSH Keys for Tunnels
+
+Use a single SSH key for all hosts (matches =~/.ssh/config=).
+
+#+begin_src bash
+KEY_FILE="$HOME/.ssh/id_ed25519"
+HOMELAB_OK=1
+ESRF_OK=1
+
+# Generate main SSH key if it doesn't exist
+if [ ! -f "${KEY_FILE}" ]; then
+    echo ""
+    echo "==> Generating main SSH key"
+    read -p "Generate new SSH key at ${KEY_FILE}? [y/N] " -n 1 -r
+    echo
+    if [[ $REPLY =~ ^[Yy]$ ]]; then
+        ssh-keygen -t ed25519 -C "thomas@$(hostname)" -f "${KEY_FILE}" -N ""
+    else
+        echo "Skipping SSH key generation"
+    fi
+fi
+
+# Deploy key to a remote host if needed
+deploy_ssh_key() {
+    local host_name="$1"
+    local remote_host="$2"
+    local remote_port="${3:-22}"
+
+    echo ""
+    echo "==> Checking SSH key for ${host_name}"
+
+    # Check if we can connect without password
+    if ssh -o BatchMode=yes -o ConnectTimeout=5 -p "${remote_port}" "${remote_host}" exit 2>/dev/null; then
+        echo "SSH key for ${host_name} is already deployed ✓"
+        return 0
+    fi
+
+    # Prompt to deploy key
+    read -p "Deploy SSH key to ${remote_host}? [y/N] " -n 1 -r
+    echo
+    if [[ $REPLY =~ ^[Yy]$ ]]; then
+        ssh-copy-id -i "${KEY_FILE}.pub" -p "${remote_port}" "${remote_host}"
+        return 0
+    else
+        echo "Skipping ${host_name} key deployment"
+        return 1
+    fi
+}
+
+# Setup homelab
+deploy_ssh_key "homelab" "homelab" 22
+HOMELAB_OK=$?
+
+# Setup ESRF
+deploy_ssh_key "esrf" "dehaeze@firewall.esrf.fr" 8022
+ESRF_OK=$?
+#+end_src
+
 ** Systemd Services
 
-Enable custom systemd services (tangle [[file:systemd.org][systemd.org]] first):
-#+begin_src bash :tangle no
+#+begin_src bash
+echo "==> Tangling systemd configs"
+tangle "systemd.org"
+#+end_src
+
+Enable custom =systemd= services:
+#+begin_src bash
+echo "==> Enabling systemd services"
+
+if [ $HOMELAB_OK -eq 0 ]; then
     systemctl --user enable --now homelab-tunnel
+else
+    echo "  Skipping homelab-tunnel (SSH key not configured)"
+fi
+
+if [ $ESRF_OK -eq 0 ]; then
     systemctl --user enable --now esrf-tunnel
+else
+    echo "  Skipping esrf-tunnel (SSH key not configured)"
+fi
+
 systemctl --user enable --now syncthing
 #+end_src
 
@@ -387,7 +462,7 @@ set -euo pipefail
 
 #+begin_src bash
 echo "==> Mail packages"
-paru -S --needed \
+paru -S --needed --noconfirm \
     isync \
     msmtp \
     neomutt \
@@ -411,35 +486,6 @@ systemctl --user enable --now checkmail.timer
 systemctl --user enable --now syncmail.timer
 #+end_src
 
-* Calendar Install Script
-:PROPERTIES:
-:header-args:bash: :tangle scripts/install-calendar.sh :shebang "#!/bin/bash" :mkdirp yes
-:END:
-
-Calendar/contact documentation: [[file:calendar-contact.org][calendar-contact.org]]
-
-#+begin_src bash
-set -euo pipefail
-#+end_src
-
-** Packages
-
-#+begin_src bash
-echo "==> Calendar and contacts packages"
-paru -S --needed \
-    vdirsyncer \
-    khal \
-    khard \
-    mu
-#+end_src
-
-** Systemd Timer
-
-#+begin_src bash :tangle no
-echo "==> Enabling vdirsyncer timer"
-systemctl --user enable --now vdirsyncer.timer
-#+end_src
-
 * LaTeX Install Script
 :PROPERTIES:
 :header-args:bash: :tangle scripts/install-latex.sh :shebang "#!/bin/bash" :mkdirp yes
@@ -453,7 +499,7 @@ set -euo pipefail
 
 #+begin_src bash
 echo "==> LaTeX packages"
-paru -S --needed \
+paru -S --needed --noconfirm \
     texlive-most tllocalmgr-git \
     biber
 #+end_src
@@ -474,7 +520,7 @@ set -euo pipefail
 
 #+begin_src bash
 echo "==> Laptop power management"
-paru -S --needed \
+paru -S --needed --noconfirm \
     powertop \
     tlp \
     thermald

scripts/install-calendar.sh

@@ -1,9 +1,20 @@
 #!/bin/bash
 set -euo pipefail
 
+DOTFILES="${HOME}/.config/literate-dotfiles"
+
+tangle() {
+    emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
+}
+
 echo "==> Calendar and contacts packages"
-paru -S --needed \
+paru -S --needed --noconfirm \
     vdirsyncer \
     khal \
-    khard \
-    mu
+    khard
+
+echo "==> Tangling systemd configs for calendar"
+tangle "systemd.org"
+
+echo "==> Enabling vdirsyncer timer"
+systemctl --user enable --now vdirsyncer.timer

scripts/install-desktop.sh

@@ -4,12 +4,11 @@ set -euo pipefail
 DOTFILES="${HOME}/.config/literate-dotfiles"
 
 tangle() {
-    emacsclient -e "(org-babel-tangle-file \"${DOTFILES}/$1\")" \
-        || emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
+    emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
 }
 
 echo "==> Desktop packages"
-paru -S --needed \
+paru -S --needed --noconfirm \
     i3-wm \
     sxhkd \
     polybar \
@@ -19,10 +18,8 @@ paru -S --needed \
     kitty \
     bash bash-completion \
     zoxide \
-    nerd-fonts-hack noto-fonts-emoji \
     xorg-xrandr arandr \
     xautocfg \
-    arc-gtk-theme xcursor-breeze \
     feh xwallpaper
 
 echo "==> Tangling desktop configs"

scripts/install-laptop.sh

@@ -2,7 +2,7 @@
 set -euo pipefail
 
 echo "==> Laptop power management"
-paru -S --needed \
+paru -S --needed --noconfirm \
     powertop \
     tlp \
     thermald

scripts/install-latex.sh

@@ -2,6 +2,6 @@
 set -euo pipefail
 
 echo "==> LaTeX packages"
-paru -S --needed \
+paru -S --needed --noconfirm \
     texlive-most tllocalmgr-git \
     biber

scripts/install-mail.sh

@@ -2,7 +2,7 @@
 set -euo pipefail
 
 echo "==> Mail packages"
-paru -S --needed \
+paru -S --needed --noconfirm \
     isync \
     msmtp \
     neomutt \

scripts/install-main.sh

@@ -1,30 +1,38 @@
 #!/bin/bash
 set -euo pipefail
 
+DOTFILES="${HOME}/.config/literate-dotfiles"
+
+tangle() {
+    emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/$1\")"
+}
+
 echo "==> Shell and Terminal"
-paru -S --needed \
+paru -S --needed --noconfirm \
     bash bash-completion zsh \
     kitty \
     tmux
 
 echo "==> Fonts"
-paru -S --needed \
-    nerd-fonts-hack \
+paru -S --needed --noconfirm \
+    ttf-hack-nerd \
+    ttf-sourcecodepro-nerd \
+    adobe-source-code-pro-fonts \
     noto-fonts-emoji
 
 echo "==> Text Editors"
-paru -S --needed \
-    neovim python-pynvim \
+paru -S --needed --noconfirm \
+    neovim python-pynvim nodejs-neovim \
     emacs \
     aspell aspell-en aspell-fr
 
 echo "==> GnuPG and Pass"
-paru -S --needed \
+paru -S --needed --noconfirm \
     gnupg gnome-keyring \
     pass rofi-pass pass-git-helper
 
 echo "==> Window Manager and Desktop"
-paru -S --needed \
+paru -S --needed --noconfirm \
     i3-wm \
     sxhkd \
     polybar \
@@ -35,53 +43,53 @@ paru -S --needed \
     xorg-xrandr arandr
 
 echo "==> File Manager"
-paru -S --needed yazi
+paru -S --needed --noconfirm yazi
 
 echo "==> Terminal Utilities"
-paru -S --needed \
+paru -S --needed --noconfirm \
     fd ripgrep fzf \
     xclip xsel \
     atool unzip \
     trash-cli \
     man-db \
-    neofetch
+    fastfetch
 
 echo "==> Browser"
-paru -S --needed \
+paru -S --needed --noconfirm \
     qutebrowser python-adblock pdfjs \
     firefox-developer-edition passff-host
 
 echo "==> Media"
-paru -S --needed \
+paru -S --needed --noconfirm \
     mpv \
     jellyfin-tui \
     nsxiv \
+    tesseract tesseract-data-eng tesseract-data-fra tesseract-data-osd \
     zathura zathura-pdf-mupdf zathura-djvu zathura-ps zathura-cb \
     pdfpc \
     gst-plugins-ugly gst-plugins-good gst-plugins-base-libs gst-plugins-base gst-plugins-bad gst-libav
 
 echo "==> PipeWire"
-paru -S --needed \
+paru -S --needed --noconfirm \
     pipewire pipewire-alsa pipewire-audio pipewire-jack pipewire-pulse \
-    wireplumber \
-    pwvucontrol
+    wireplumber
 
 echo "==> PDF and Image Utilities"
-paru -S --needed \
-    pdf2svg pdftk pdfarranger \
+paru -S --needed --noconfirm \
+    pdf2svg qpdf pdfarranger \
     imagemagick \
     maim flameshot \
     unclutter \
     poppler
 
 echo "==> Office"
-paru -S --needed \
+paru -S --needed --noconfirm \
     onlyoffice-bin \
     libreoffice-fresh libreoffice-fresh-fr \
     inkscape
 
 echo "==> System Utilities"
-paru -S --needed \
+paru -S --needed --noconfirm \
     udiskie \
     blueman \
     sshfs \
@@ -98,16 +106,79 @@ paru -S --needed \
     yt-dlp \
     python ipython python-pip
 
-echo "==> GTK Theme"
-paru -S --needed \
-    lxappearance \
-    arc-gtk-theme \
-    xcursor-breeze \
-    gtk2fontsel
-
 echo "==> Misc Utilities"
-paru -S --needed \
-    screenkey \
+paru -S --needed --noconfirm \
     xwallpaper \
     highlight-pointer-git \
     mpd
+
+KEY_FILE="$HOME/.ssh/id_ed25519"
+HOMELAB_OK=1
+ESRF_OK=1
+
+# Generate main SSH key if it doesn't exist
+if [ ! -f "${KEY_FILE}" ]; then
+    echo ""
+    echo "==> Generating main SSH key"
+    read -p "Generate new SSH key at ${KEY_FILE}? [y/N] " -n 1 -r
+    echo
+    if [[ $REPLY =~ ^[Yy]$ ]]; then
+        ssh-keygen -t ed25519 -C "thomas@$(hostname)" -f "${KEY_FILE}" -N ""
+    else
+        echo "Skipping SSH key generation"
+    fi
+fi
+
+# Deploy key to a remote host if needed
+deploy_ssh_key() {
+    local host_name="$1"
+    local remote_host="$2"
+    local remote_port="${3:-22}"
+
+    echo ""
+    echo "==> Checking SSH key for ${host_name}"
+
+    # Check if we can connect without password
+    if ssh -o BatchMode=yes -o ConnectTimeout=5 -p "${remote_port}" "${remote_host}" exit 2>/dev/null; then
+        echo "SSH key for ${host_name} is already deployed ✓"
+        return 0
+    fi
+
+    # Prompt to deploy key
+    read -p "Deploy SSH key to ${remote_host}? [y/N] " -n 1 -r
+    echo
+    if [[ $REPLY =~ ^[Yy]$ ]]; then
+        ssh-copy-id -i "${KEY_FILE}.pub" -p "${remote_port}" "${remote_host}"
+        return 0
+    else
+        echo "Skipping ${host_name} key deployment"
+        return 1
+    fi
+}
+
+# Setup homelab
+deploy_ssh_key "homelab" "homelab" 22
+HOMELAB_OK=$?
+
+# Setup ESRF
+deploy_ssh_key "esrf" "dehaeze@firewall.esrf.fr" 8022
+ESRF_OK=$?
+
+echo "==> Tangling systemd configs"
+tangle "systemd.org"
+
+echo "==> Enabling systemd services"
+
+if [ $HOMELAB_OK -eq 0 ]; then
+    systemctl --user enable --now homelab-tunnel
+else
+    echo "  Skipping homelab-tunnel (SSH key not configured)"
+fi
+
+if [ $ESRF_OK -eq 0 ]; then
+    systemctl --user enable --now esrf-tunnel
+else
+    echo "  Skipping esrf-tunnel (SSH key not configured)"
+fi
+
+systemctl --user enable --now syncthing

vim.org

@@ -19,7 +19,7 @@ DOTFILES="${HOME}/.config/literate-dotfiles"
 
 #+begin_src bash
 echo "==> Neovim packages"
-paru -S --needed neovim python-pynvim nodejs-neovim
+paru -S --needed --noconfirm neovim python-pynvim nodejs-neovim
 #+end_src
 
 ** vim-plug
@@ -36,8 +36,7 @@ Tangle =vim.org= to generate =~/.config/nvim/init.vim=:
 
 #+begin_src bash
 echo "==> Tangling vim.org"
-emacsclient -e "(org-babel-tangle-file \"${DOTFILES}/vim.org\")" \
-    || emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/vim.org\")"
+emacs --batch -l org --eval "(org-babel-tangle-file \"${DOTFILES}/vim.org\")"
 #+end_src
 
 ** Install Plugins

zathura.org

@@ -99,7 +99,7 @@ tmpfile=/tmp/pdf_page.pdf
 # Ideally would get the page from Zathura...
 # pagenum=$(rofi -dmenu -p "Page Number")
 
-pdftk "$1" cat $2 output "$tmpfile.pdf" && \
+qpdf --pages "$1" "$2" -- "$1" "$tmpfile.pdf" && \
     pdf2svg "$tmpfile.pdf" "$tmpfile.svg" && \
     inkscape "$tmpfile.svg"
 #+end_src