dotfiles

nixos + tmux + fish + neovim

Extension of dannydannydanny/methodology.

Roadmap

• firefox-scrolling via terminal
• nvim checkhealth; tmux setup; fonts / nerdfonts; HN: home server

Windows

• System sounds: None. Language/keyboard: en_US.
• Powertoys — remap CAPS to L-CTRL.
• Alacritty — config: %AppData%/alacritty/alacritty.yml.

WSL

Quickstart:

nix-shell -p gh git
gh auth login
gh repo clone dannydannydanny/dotfiles && cd dotfiles
# git checkout <branch>  # if needed
sudo nixos-rebuild switch --flake ~/dotfiles#wsl

Clone via SSH

One key per purpose; see AGENTS.md and the SSH key strategy in CLAUDE.md. Otherwise clone with HTTPS.

ssh-keygen -q -t ed25519 -N '' -f ~/.ssh/id_ed25519_github <<<y
cat ~/.ssh/id_ed25519_github.pub   # add at https://github.com/settings/ssh/new
eval $(ssh-agent -s)   # fish: eval (ssh-agent -c)
ssh-add ~/.ssh/id_ed25519_github
git clone https://git.dannydannydanny.me/danny/dotfiles.git && cd dotfiles
git config user.name "DannyDannyDanny"
git config user.email "dth@taiga.ai"

Apply machine config — see CLAUDE.md for rebuild commands.

Secret scanning

This is a public repo, so gitleaks guards against committing secrets — Telegram bot tokens / chat ids and personal emails in particular (rules in .gitleaks.toml). Two layers:

scripts/install-git-hooks.sh   # activate the pre-commit hook for this clone
gitleaks dir .                 # scan the working tree on demand

CI (.github/workflows/gitleaks.yml) re-runs the scan on every push/PR as a backstop. gitleaks itself ships in home.packages.

Good reads

• TODOs aren't for doing