danny/dotfiles
1
0
Fork 0
Code Issues Projects Releases Packages Wiki Activity
Mirror of GitHub (de-platform roadmap)
640 commits 1 branch 0 tags 3.1 MiB
  • Python 57.8%
  • Nix 31.5%
  • Shell 10.7%
Find a file
Exact
DannyDannyDanny 8ce22c0915 fix(wsl): drop plaintext "test" password, use passwordless sudo 🔒 
initialPassword = "test" for the dth wheel user was world-readable in the Nix
store and published to this public repo. The WSL box exposes no SSH / network
auth surface and sits behind the Windows login, and dth is a secondary
(non-default) user, so drop the password and grant wheel passwordless sudo
instead. Eval-verified (wheelNeedsPassword=false, dth password=null); user
rebuilds per the rebuild protocol.

INFRA-180
2026-07-22 10:41:53 +03:00
.githooks feat(ci): add gitleaks secret scanner — pre-commit hook + CI 🔒 2026-07-22 10:35:10 +03:00
.github/workflows feat(ci): add gitleaks secret scanner — pre-commit hook + CI 🔒 2026-07-22 10:35:10 +03:00
assets chore(scripts): delete five dead scripts 🧹 2026-06-10 23:52:21 +02:00
docs feat(plane): linkify work-item comments too + rate-limit hardening 🔗 2026-07-08 15:56:58 +02:00
flake-modules style(nix): drop unused module args found by deadnix 🧹 2026-06-22 18:37:18 +02:00
lib refactor(nix): move flake to repo root 🚚 2026-04-19 15:19:59 +02:00
nixos fix(wsl): drop plaintext "test" password, use passwordless sudo 🔒 2026-07-22 10:41:53 +03:00
raycast-scripts fix(nixos): replace removed light option and harden char-count script 2026-03-24 12:58:40 +01:00
scripts feat(ci): add gitleaks secret scanner — pre-commit hook + CI 🔒 2026-07-22 10:35:10 +03:00
.editorconfig 🎨 expand editorconfig for makefile & brewfile 2022-05-31 15:14:03 +02:00
.gitignore fix(home): install ZeroTier SSH aliases at activation (flakes exclude untracked) 🔧 2026-06-24 13:42:09 +02:00
.gitleaks.toml feat(ci): add gitleaks secret scanner — pre-commit hook + CI 🔒 2026-07-22 10:35:10 +03:00
AGENTS.md split: trim public dotfiles to dev-only — close topology leak ✂️ 2026-06-24 12:54:48 +02:00
CLAUDE.md docs(claude): repoint Hara section to sunken-ship + fix dead README link 📝 2026-07-22 09:53:17 +03:00
flake.lock chore(flake): update inputs (nixpkgs 2026-05-31 → 2026-07-20) ⬆️ 2026-07-22 09:55:49 +03:00
flake.nix split: trim public dotfiles to dev-only — close topology leak ✂️ 2026-06-24 12:54:48 +02:00
LICENSE Initial commit 2022-03-28 15:12:54 +02:00
README.md feat(ci): add gitleaks secret scanner — pre-commit hook + CI 🔒 2026-07-22 10:35:10 +03:00
TODO.md split: trim public dotfiles to dev-only — close topology leak ✂️ 2026-06-24 12:54:48 +02:00

README.md

dotfiles

nixos + tmux + fish + neovim

Extension of dannydannydanny/methodology.

Roadmap

Windows

  • System sounds: None. Language/keyboard: en_US.
  • Powertoys — remap CAPS to L-CTRL.
  • Alacritty — config: %AppData%/alacritty/alacritty.yml.

WSL

Quickstart:

nix-shell -p gh git
gh auth login
gh repo clone dannydannydanny/dotfiles && cd dotfiles
# git checkout <branch>  # if needed
sudo nixos-rebuild switch --flake ~/dotfiles#wsl

Clone via SSH

One key per purpose; see AGENTS.md and the SSH key strategy in CLAUDE.md. Otherwise clone with HTTPS.

ssh-keygen -q -t ed25519 -N '' -f ~/.ssh/id_ed25519_github <<<y
cat ~/.ssh/id_ed25519_github.pub   # add at https://github.com/settings/ssh/new
eval $(ssh-agent -s)   # fish: eval (ssh-agent -c)
ssh-add ~/.ssh/id_ed25519_github
git clone https://git.dannydannydanny.me/danny/dotfiles.git && cd dotfiles
git config user.name "DannyDannyDanny"
git config user.email "dth@taiga.ai"

Apply machine config — see CLAUDE.md for rebuild commands.

Secret scanning

This is a public repo, so gitleaks guards against committing secrets — Telegram bot tokens / chat ids and personal emails in particular (rules in .gitleaks.toml). Two layers:

scripts/install-git-hooks.sh   # activate the pre-commit hook for this clone
gitleaks dir .                 # scan the working tree on demand

CI (.github/workflows/gitleaks.yml) re-runs the scan on every push/PR as a backstop. gitleaks itself ships in home.packages.

Good reads