dotfiles

personal config for Arch & macOS, managed with chezmoi.

• modern unix utils
• neovim
• zellij

Layout

• home/ — chezmoi source state (see .chezmoiroot). Deployed to $HOME by chezmoi apply.
• home/packages/ — Yayfile (Arch) and Brewfile (macOS); never deployed, consumed by home/.chezmoiscripts/ which re-runs package sync whenever they change. The package managers themselves (yay, homebrew) are bootstrapped by those scripts if missing.

Setup on a new machine

sh -c "$(curl -fsLS get.chezmoi.io)" -- -b ~/.local/bin
chezmoi init --apply --source ~/projects/dotfiles git@github.com:zgeoff/dotfiles.git

chezmoi init prompts for machine data (email, GUI) on first run; answers are remembered. Re-run chezmoi init to change them.

Daily use

chezmoi update            # pull + apply changes from other machines
chezmoi edit ~/.zshrc     # edit a managed file (source state, incl. templates)
chezmoi apply             # render source state into $HOME
chezmoi diff              # preview what apply would change
chezmoi re-add            # capture direct edits to live files back into source
chezmoi cd                # subshell in this repo

Changed source files are auto-staged (git.autoAdd); commit and push by hand.

Secrets

Encrypted files (e.g. .ssh/config, commercial fonts under .local/share/fonts) use age. Copy the identity key to ~/.config/chezmoi/key.txt (mode 600) on each machine — it is provisioned out-of-band and never committed. Add new secrets with chezmoi add --encrypt <file>.

WSL notes

The terminal on WSL machines is Windows Terminal, so fonts are rendered by Windows — installing fonts inside WSL does nothing for the prompt.

Font setup (required for the p10k prompt icons):

1. Install OperatorMono Nerd Font on the Windows side. The .otf files are committed age-encrypted and decrypted to ~/.local/share/fonts by chezmoi apply, so open \\wsl.localhost\<distro>\home\geoff\.local\share\fonts in Explorer, select them, right-click → Install for all users. A plain double-click install is per-user only, which Windows Terminal (a packaged app) cannot see — it silently falls back to Cascadia Mono. Powerline separators still render in that state (Cascadia includes them), so the breakage only shows up as missing/tofu icons.

2. Set the profile font face in Windows Terminal to OperatorMono Nerd Font (exact family name, no space in "OperatorMono").

3. Verify glyphs render:

   print -- $'\ue0b0 \uf00c \ue702 \uf115 \U000F0193'

   All five should be visible symbols (powerline arrow, check mark, git logo, folder, material icon); boxes after the first mean the font fell back (step 1 not done for all users, or Windows Terminal wasn't fully restarted).

Post-setup notes

SSH & PGP keys are provisioned manually:

# 1. put public and private SSH keys in ~/.ssh/id.pub and ~/.ssh/id, respectively
# 2. fix the file permissions to make the ssh agent happy
chmod 600 ~/.ssh/id ~/.ssh/id.pub

# 3. load the ssh agent and add the key
eval "$(ssh-agent -s)"
ssh-add ~/.ssh/id

# 4. import GPG keys from disk then remove them
gpg --import ~/gpg.pub
gpg --import ~/gpg.key
rm -f ~/gpg.pub ~/gpg.key

# 5. restart the gpg agent
killall gpg-agent
gpg-agent --daemon