doc: SSH key management and secrets 📝
- Updated AGENTS.md to specify one key per purpose for SSH access, including naming conventions and configuration tips. - Revised README.md to streamline the roadmap and link to SSH and secrets documentation. - Created docs/ssh-and-secrets.md to outline the strategy for managing SSH keys and secrets in a public repo. - Refined TODO.md to reflect the new approach for secrets and server configuration tasks.
This commit is contained in:
DannyDannyDanny
parent
1fdce52239
commit
cd7658f452
5 changed files with 108 additions and 114 deletions
86
README.md
86
README.md
|
|
@ -1,86 +1,48 @@
|
|||
# dotfiles
|
||||
|
||||
[`nixos`](https://nixos.org/) + [`tmux`](https://github.com/tmux/tmux/?tab=readme-ov-file#welcome-to-tmux) + [`fish`](https://fishshell.com/) + [`neovim`](https://neovim.io/)
|
||||
[nixos](https://nixos.org/) + [tmux](https://github.com/tmux/tmux) + [fish](https://fishshell.com/) + [neovim](https://neovim.io/)
|
||||
|
||||
This repo is an extension of [dannydannydanny/methodology](https://github.com/DannyDannyDanny/methodology/)
|
||||
Extension of [dannydannydanny/methodology](https://github.com/DannyDannyDanny/methodology).
|
||||
|
||||
## Roadmap:
|
||||
|
||||
* configure [firefox-scrolling](firefox-scrolling.md) via terminal
|
||||
* server cluster roadmap: [server](server.md); NixOS server flake and bootstrap: [nixos/readme.md](nixos/readme.md) (nixos-server).
|
||||
* :art: check for `nvim checkhealth` status
|
||||
* make tmux nice: https://www.youtube.com/watch?v=DzNmUNvnB04
|
||||
* [fonts](https://www.programmingfonts.org/) - how does this relate to nerdfonts?
|
||||
* [HN: What's on your home server](https://news.ycombinator.com/item?id=34271167)
|
||||
* Jetson Nano Developer Kit SD Card Image [link](https://developer.nvidia.com/embedded/learn/get-started-jetson-nano-devkit)
|
||||
* Raspberry Pi OS Lite (32-bit) [link](https://www.raspberrypi.com/software/operating-systems/#raspberry-pi-os-32-bit)
|
||||
## Roadmap
|
||||
|
||||
- [firefox-scrolling](firefox-scrolling.md) via terminal
|
||||
- Server: [server](server.md); NixOS flake and bootstrap [nixos/readme.md](nixos/readme.md). SSH and secrets: [docs/ssh-and-secrets.md](docs/ssh-and-secrets.md).
|
||||
- nvim checkhealth; tmux setup; [fonts](https://www.programmingfonts.org/) / nerdfonts; [HN: home server](https://news.ycombinator.com/item?id=34271167)
|
||||
|
||||
## Windows
|
||||
|
||||
* disable system sounds: `start menu search: "change system sounds" -> set profile to None`
|
||||
* change language / keyboard layout to `en_US`
|
||||
* [install powertoys](https://docs.microsoft.com/en-us/windows/powertoys/install#install-with-windows-executable-file-via-github)
|
||||
* remap CAPS LOCK to L-CTRL
|
||||
* install [alacritty](https://alacritty.org/) (use the installer, not portable)
|
||||
* add alacritty config: `/mnt/c/Users/<winuser>/AppData/Roaming/alacritty/alacritty.yml`
|
||||
- System sounds: None. Language/keyboard: en_US.
|
||||
- [Powertoys](https://docs.microsoft.com/en-us/windows/powertoys/install) — remap CAPS to L-CTRL.
|
||||
- [Alacritty](https://alacritty.org/) — config: `%AppData%/alacritty/alacritty.yml`.
|
||||
|
||||
### WSL
|
||||
|
||||
Install via [nix-community/NixOS-WSL Quickstart](https://github.com/nix-community/NixOS-WSL?tab=readme-ov-file#quick-start) :white_check_mark:
|
||||
Setup dotfiles / config via github:
|
||||
[Quickstart](https://github.com/nix-community/NixOS-WSL?tab=readme-ov-file#quick-start):
|
||||
|
||||
```bash
|
||||
# git and github CLI tool in a temp shell
|
||||
nix-shell -p gh git
|
||||
# authenticate
|
||||
gh auth login
|
||||
# clone dotfiles
|
||||
gh repo clone dannydannydanny/dotfiles
|
||||
# checkout the appropriate branch
|
||||
git checkout feat/wsl-neovim-update
|
||||
# rebuild WSL nixos using
|
||||
gh repo clone dannydannydanny/dotfiles && cd dotfiles
|
||||
# git checkout <branch> # if needed
|
||||
sudo nixos-rebuild switch --flake ~/dotfiles/nixos#wsl
|
||||
# rebuild macbook nixos using
|
||||
# sudo nixos-rebuild switch --flake ~/dotfiles/nixos#macbook
|
||||
```
|
||||
|
||||
### Clone repo SSH method
|
||||
Skip this if you don't plan on getting SSH access to github repos and clone with HTTP instead
|
||||
#### generate ssh
|
||||
```
|
||||
ssh-keygen -q -t ed25519 -N '' -f ~/.ssh/id_ed25519_github <<<y >/dev/null 2>&1
|
||||
### Clone via SSH
|
||||
|
||||
# echo 'older machines might not support ed25519, then use RSA with 4096 bit key'
|
||||
# echo 'ssh-keygen -q -t rsa -b 4096 -N '' -f ~/.ssh/id_rsa_github <<<y >/dev/null 2>&1'
|
||||
One key per purpose; see [AGENTS.md](AGENTS.md) and [docs/ssh-and-secrets.md](docs/ssh-and-secrets.md). Otherwise clone with HTTPS.
|
||||
|
||||
# add the output to https://github.com/settings/ssh/new
|
||||
cat ~/.ssh/id_*_github.pub
|
||||
# add to https://github.com/settings/ssh/new
|
||||
```
|
||||
|
||||
#### activate ssh
|
||||
```
|
||||
echo 'adding key to ssh-agent'
|
||||
eval `ssh-agent -s` # if using fish shell run: eval "$(ssh-agent -c)"
|
||||
ssh-add ~/.ssh/id_*_github
|
||||
|
||||
# download dotfiles repo
|
||||
git clone git@github.com:DannyDannyDanny/dotfiles.git
|
||||
|
||||
# config git
|
||||
cd dotfiles
|
||||
```bash
|
||||
ssh-keygen -q -t ed25519 -N '' -f ~/.ssh/id_ed25519_github <<<y
|
||||
cat ~/.ssh/id_ed25519_github.pub # add at https://github.com/settings/ssh/new
|
||||
eval $(ssh-agent -s) # fish: eval (ssh-agent -c)
|
||||
ssh-add ~/.ssh/id_ed25519_github
|
||||
git clone git@github.com:DannyDannyDanny/dotfiles.git && cd dotfiles
|
||||
git config user.name "DannyDannyDanny"
|
||||
git config user.email "dth@taiga.ai"
|
||||
git config pull.rebase false
|
||||
git config push.autoSetupRemote true
|
||||
# more git config: https://blog.gitbutler.com/how-git-core-devs-configure-git/
|
||||
|
||||
# install dotfiles
|
||||
bash install.sh
|
||||
|
||||
# hop back out
|
||||
cd ..
|
||||
```
|
||||
|
||||
## Good Reads / Philosophy
|
||||
* sometimes [`TODO`s arent for doing](https://sophiebits.com/2025/07/21/todos-arent-for-doing)
|
||||
## Good reads
|
||||
|
||||
- [TODOs aren't for doing](https://sophiebits.com/2025/07/21/todos-arent-for-doing)
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue