macOS Dotfiles

Personal dotfiles and setup automation for macOS development machines.

Quick Start

# 1. Install Homebrew packages
just brew            # work machine
just brew-all        # personal machine (includes extra apps)

# 2. Symlink dotfiles
just sync

# 3. Setup fish (plugins + set as default shell)
just fish

# 4. Optional extras (vim-plug, tmux plugins, docker completions)
just plugins

# 5. Apply macOS preferences
just config

Just Recipes

Target	Description
just	Show available recipes
just all	Full setup: brew-all + sync + fish + plugins + config
just brew	Install Homebrew packages from Brewfile
just brew-personal	Install personal packages from Brewfile.personal
just brew-all	Install both Brewfile and Brewfile.personal
just sync	Symlink all dotfiles to their locations
just fish	Install fisher plugins and set fish as default shell
just plugins	Install optional plugins (vim, tmux, docker, npm)
just config	Run macOS system preferences script
just clean	Remove all symlinked dotfiles

What's Included

Terminal Stack

• Shell: Fish with fisher plugin manager
• Terminal: Ghostty with Gruvbox theme (auto dark/light)
• Multiplexer: tmux with vim-style navigation

Features

• Automatic theme sync (delta, bat, fzf, mitmproxy, Claude Code) with macOS dark/light mode via dark-notify
• GNU coreutils prioritized over BSD versions
• Global git hooks with gitleaks for secret detection

Local Overrides

These files are created by make sync but not tracked in git:

• ~/.gitconfig.local - Local git config (user email)
• ~/.config/fish/local.fish - Local fish config (secrets, machine-specific)
• ~/.config/opencode/opencode.local.json - Local opencode config
• ~/.ssh/config.local - Local SSH config (host overrides, IdentityAgent)
• ~/.psqlrc.local - Local psql config

SSH Agent

The default ssh/config uses 1Password agent. For GPG/YubiKey, override in ~/.ssh/config.local:

# Override to use GPG agent
Host *
  IdentityAgent ${SSH_AUTH_SOCK}

And configure the agent socket in ~/.config/fish/local.fish:

# GPG/YubiKey
set -x GPG_TTY (tty)
set -x SSH_AUTH_SOCK (gpgconf --list-dirs agent-ssh-socket)
gpgconf --launch gpg-agent

Commit Signature Verification

For local verification of SSH-signed commits, create ~/.config/git/allowed_signers:

your@email.com ssh-ed25519 AAAA...your-public-key
another@email.com ssh-ed25519 AAAA...your-public-key

List each email you sign commits with, followed by your public signing key.