Cool, yeah when you do it enough times you just want to script it. I use to have more sensitive stuff in here I think before I obliterated the historical stuff and made it a public repo, but I factored all that before sharing it. Like 2 years ago. It was a good exercise I think, separating secrets from config.

I wonder if you could do the same with Ansible ?

Definitely! What I'm forcing onto Bash is basically what Ansible does normally. For the desktop use case I've certainly noticed that it might be easier to use something that is already idempotent by default (like Ansible). The server thing isn't all that complex though, at least not the parts that you could replace with Ansible.

Good to know, thanks for sharing !