+#+begin_src bash
+# Bash initialization for interactive non-login shells and
+# for remote shells (info "(bash) Bash Startup Files").
+
+# Export 'SHELL' to child processes. Programs such as 'screen'
+# honor it and otherwise use /bin/sh.
+export SHELL
+
+if [[ $- != *i* ]]
+then
+ # We are being invoked from a non-interactive shell. If this
+ # is an SSH session (as in "ssh host command"), source
+ # /etc/profile so we get PATH and other essential variables.
+ [[ -n "$SSH_CLIENT" ]] && source /etc/profile
+
+ # Don't do anything else.
+ return
+fi
+
+if [ -n "$IS_GUIX_SYSTEM" ]; then
+ # Source the system-wide file.
+ source /etc/bashrc
+fi
+
+# from https://unix.stackexchange.com/a/55935
+b_prompt() {
+ cwd=$(sed -e "s:$HOME:~:" -e "s:\(\.\?[^/]\)[^/]*/:\1/:g" <<<$PWD)
+ printf $cwd
+}
+
+if [ $(id -u) == "0" ]; then
+ PS1='`printf "\[\e[1;31m\]\$\[\e[00m\]"` '
+else
+ PS1='\$ '
+fi
+PS1="\u@\h:\w/`[ -n "$GUIX_ENVIRONMENT" ] && printf \" [env]\"`\n$PS1"
+
+# set terminal title
+PROMPT_COMMAND='echo -ne "\033]0;${USER}@${HOSTNAME}: $(b_prompt)\007"'
+
+# i-beam cursor
+# echo -e "\033[5 q" # blinking
+echo -e "\033[6 q" # non-blinking
+
+# various bash tweaks
+# append to the history file, don't overwrite it
+shopt -s histappend
+shopt -s cmdhist
+# check the window size after each command and, if necessary,
+# update the values of LINES and COLUMNS.
+shopt -s checkwinsize
+# If set, the pattern "**" used in a pathname expansion context will
+# match all files and zero or more directories and subdirectories.
+#shopt -s globstar
+# for setting history length see HISTSIZE and HISTFILESIZE in bash(1)
+HISTSIZE=
+HISTFILESIZE=
+# don't put duplicate lines or lines starting with space in the
+# history.
+HISTCONTROL=ignoreboth
+# ignore a few very common commands and don't add them to history
+HISTIGNORE='ls:l:s:g:[bf]g:history'
+HISTTIMEFORMAT='%F %T '
+stty stop ""
+
+# aliases
+alias ls='ls -p --color=auto'
+alias l='ls -lh' # long format and human-readable sizes
+alias ll='l -A' # long format, all files
+alias dir='dir --color=auto'
+alias vdir='vdir --color=auto'
+alias grep='grep --color=auto'
+alias fgrep='fgrep --color=auto'
+alias egrep='egrep --color=auto'
+alias mpv="mpv --ytdl-format mp4"
+alias mv="mv -iv"
+alias cp="cp -iv"
+alias mbsync='mbsync -c "$XDG_CONFIG_HOME"/isync/mbsyncrc'
+alias getmail='getmail --getmaildir "$XDG_CONFIG_HOME"/getmail --rcfile getmailrc'
+alias m="mbsync csclub; mbsync uwaterloo; mbsync shemshak; mbsync gnub"
+alias best="youtube-dl -f best"
+alias e="$EDITOR"
+alias se="SUDO_EDITOR=\"emacsclient\" sudo -e"
+
+aur() {
+ cd ~/usr/builds
+ [ -d ${1} ] || git clone https://aur.archlinux.org/${1}.git
+ cd ${1}
+}
+
+function t {
+ cd $(mktemp -d /tmp/$1.XXXX)
+}
+
+# separate alias definitions file, if exists
+if [ -f ~/.bash_aliases ]; then
+ . ~/.bash_aliases
+fi
+
+# enable programmable completion features (not needed if already
+# enabled in /etc/bash.bashrc and if /etc/profile sources
+# /etc/bash.bashrc).
+if ! shopt -oq posix; then
+ if [ -f /usr/share/bash-completion/bash_completion ]; then
+ . /usr/share/bash-completion/bash_completion
+ elif [ -f /etc/bash_completion ]; then
+ . /etc/bash_completion
+ fi
+fi
+
+# source Guix shell config dirs, for vte.sh and bash completions
+GUIX_PROFILES=("${HOME}/.guix-profile"
+ "${HOME}/.config/guix/current")
+for profile in "${GUIX_PROFILES[@]}"; do
+ for dir in "${profile}/etc/bash_completion.d" "${profile}/etc/profile.d"; do
+ if [ -d "${dir}" ]; then
+ for f in "${dir}"/*; do
+ . $f
+ done
+ fi
+ done
+done
+#+end_src
+
+*** profile
+:PROPERTIES:
+:header-args+: :tangle ~/.profile
+:END:
+
+#+begin_src sh
+# ~/.profile: executed by the command interpreter for login shells.
+# This file is not read by bash(1), if ~/.bash_profile or ~/.bash_login
+# exists.
+
+# source host-specific profile
+if [ -f "$HOME/.config/profiles/$(hostname)" ]; then
+ . "$HOME/.config/profiles/$(hostname)"
+fi
+
+export EDITOR="emacsclient -nw"
+export VISUAL="emcl"
+
+PATH="$HOME/usr/local/bin:$HOME/.local/bin:$PATH"
+PATH="$HOME/.cabal/bin:$HOME/.cargo/bin:$HOME/.elan/bin:$PATH"
+if [ -z "$IS_GUIX_SYSTEM" ]; then
+ PATH="$HOME/.config/guix/current/bin${PATH:+:}$PATH"
+ INFOPATH="$HOME/.config/guix/current/share/info${INFOPATH:+:}$INFOPATH"
+ export GUIX_LOCPATH="$HOME/.guix-profile/lib/locale"
+fi
+export PATH
+export INFOPATH
+
+export MY_GUIX_MANIFESTS="$HOME/.config/guix/manifest"
+export MY_GUIX_PROFILES="$HOME/.config/guix/profile"
+
+export XDG_CONFIG_HOME="$HOME/.config"
+export XDG_DATA_HOME="$HOME/.local/share"
+
+if [ -f "$HOME/.config/user-dirs.dirs" ]; then
+ set -a
+ . "$HOME/.config/user-dirs.dirs"
+ set +a
+fi
+
+export INPUTRC="$XDG_CONFIG_HOME"/readline/inputrc
+export SCREENRC="$XDG_CONFIG_HOME"/screen/screenrc
+
+export MAILDIR="$HOME/mail"
+export CVS_RSH="ssh"
+
+if [ -x "$(command -v go)" ]; then
+ export GOPATH="$HOME/src/go"
+ export PATH="$GOPATH/bin:$PATH"
+fi
+
+# if running bash
+if [ -n "$BASH_VERSION" ]; then
+ # include .bashrc if it exists
+ if [ -f "$HOME/.bashrc" ]; then
+ . "$HOME/.bashrc"
+ fi
+fi
+
+if [ -z "$IS_GUIX_SYSTEM" ]; then
+ # if guix is installed
+ if [ -x "$(command -v guix)" ]; then
+ SSL_CERT_DIR="$HOME/.guix-profile/etc/ssl/certs"
+ if [ -d "$SSL_CERT_DIR" -o -h "$SSL_CERT_DIR" ]; then
+ export SSL_CERT_DIR
+ export SSL_CERT_FILE="$HOME/.guix-profile/etc/ssl/certs/ca-certificates.crt"
+ else
+ printf "it seems you forgot to \`guix install nss-certs\'\n"
+ fi
+ GUIX_PROFILE="$HOME/.guix-profile"
+ . "$GUIX_PROFILE/etc/profile"
+ unset XDG_DATA_DIRS
+ fi
+fi
+
+for p in $MY_GUIX_PROFILES/*; do
+ profile=$p/$(basename "$p")
+ if [ -f "$profile"/etc/profile ]; then
+ GUIX_PROFILE="$profile"
+ . "$GUIX_PROFILE"/etc/profile
+ fi
+ unset profile
+done
+
+# start an ssh-agent (with guix's openssh)
+if [ -z "$IS_GUIX_SYSTEM" ]; then
+ if ! pgrep -u "$USER" ssh-agent > /dev/null; then
+ ssh-agent > ~/.ssh-agent-thing
+ fi
+ if [[ ! "$SSH_AUTH_SOCK" ]]; then
+ eval "$(<~/.ssh-agent-thing)"
+ fi
+fi
+
+# footenote: when on a foreign distro and using Xfce, don't forget to
+# disable its auto-start of gpg- and ssh-agent, by issuing
+# xfconf-query -c xfce4-session -p /startup/ssh-agent/enabled -n -t bool -s false
+# xfconf-query -c xfce4-session -p /startup/gpg-agent/enabled -n -t bool -s false
+# see https://docs.xfce.org/xfce/xfce4-session/advanced#ssh_and_gpg_agents
+# also, MATE does something similar with gnome-keyring-daemon:
+# http://william.shallum.net/random-notes/disabling-gnome-keyring-daemon-ssh-agent-on-mate-desktop
+#+end_src
+
+*** per-host profiles
+
+Host-specific profiles, sourced from =~/.profile=. Each
+=~/.config/profiles/HOST= file will be sourced on the machine with
+=hostname= of =HOST=.
+
+**** chaman
+:PROPERTIES:
+:header-args+: :tangle ~/.config/profiles/chaman
+:END:
+
+#+begin_src sh
+export IS_GUIX_SYSTEM=true
+
+if [ -x "$(command -v xinput)" ]; then
+ xinput --set-prop "TPPS/2 IBM TrackPoint" 'libinput Accel Speed' -0.4
+fi
+
+setxkbmap \
+ -layout us,ir \
+ -option ctrl:nocaps \
+ -option grp:shifts_toggle
+
+xmodmap -e "keysym Menu = Super_R"
+
+xsetroot -cursor_name left_ptr
+xset r rate 200 45
+xset b off
+#+end_src
+
+**** darrud
+:PROPERTIES:
+:header-args+: :tangle ~/.config/profiles/darrud
+:END:
+
+#+begin_src sh
+export INFOPATH="$HOME/usr/local/share/info${INFOPATH:+:}$INFOPATH"
+#+end_src
+
+**** langa
+:PROPERTIES:
+:header-args+: :tangle ~/.config/profiles/langa
+:END:
+
+#+begin_src sh
+export XDG_DATA_DIRS="/usr/share/mate:/usr/local/share/:/usr/share/"