dotfiles

A modern, safe, repeatable local-development environment bootstrapper for macOS, Linux, WSL, and ephemeral development containers.

This repository is designed to be boring, explicit, and easy to maintain. It avoids hidden side effects, legacy plugin managers, destructive installers, and machine-specific assumptions.

What this sets up

• Zsh configuration with small, focused files
• Git defaults, aliases, global ignore rules, and conditional identity support
• Homebrew package management through Brewfile
• Runtime/tool version management through mise
• Optional Starship prompt configuration
• Optional direnv configuration
• A local dot command for install, update, health checks, and maintenance
• Neovim starter configuration using modern Lua-based setup
• Shell linting and formatting checks through GitHub Actions

Design principles

1. Safe by default — existing files are backed up before being replaced.
2. Idempotent — scripts can be run repeatedly without breaking the environment.
3. Cross-platform — supports macOS, Linux, WSL, and development containers where practical.
4. No secrets in Git — tokens, credentials, and machine-specific values stay out of the repo.
5. Small composable scripts — easy to inspect, debug, and replace.
6. Modern tooling — Homebrew, mise, direnv, Starship, ShellCheck, shfmt, and Neovim.

Repository structure

.
├── bin/
│ └── dot # Main command wrapper
├── config/
│ ├── direnvrc # Optional direnv defaults
│ └── starship.toml # Prompt configuration
├── git/
│ ├── gitconfig # Global Git config
│ └── gitignore_global # Global ignore rules
├── lib/
│ ├── backup.sh # Backup helpers
│ ├── common.sh # Shared helpers
│ ├── doctor.sh # Environment health checks
│ ├── install.sh # Dotfile installation logic
│ ├── macos.sh # macOS defaults
│ ├── packages.sh # Package installation helpers
│ └── update.sh # Update helpers
├── nvim/
│ └── init.lua # Minimal Neovim config
├── zsh/
│ ├── aliases.zsh
│ ├── completions.zsh
│ ├── functions.zsh
│ ├── path.zsh
│ └── zshrc
├── .editorconfig
├── .shellcheckrc
├── .shfmt
├── Brewfile
├── install.sh
├── mise.toml
└── README.md

Requirements

The bootstrap script expects:

• bash
• git
• curl

On macOS, Homebrew will be installed if it is missing.

On Linux, package installation is intentionally conservative. The script will detect Homebrew/Linuxbrew when available, but it will not mutate system package managers like apt, dnf, or pacman unless you extend it yourself.

Installation

Clone the repo:

git clone git@github.com:YOUR_GITHUB_USERNAME/dotfiles.git ~/.dotfiles
cd~/.dotfiles

Run the installer:

./install.sh

Preview changes without applying them:

./install.sh --dry-run

Install dotfiles without installing packages:

./install.sh --skip-packages

Force relinking of managed files:

./install.sh --force

After installation, restart your shell:

exec zsh

What gets linked

The installer links the following files into your home directory:

~/.zshrc -> zsh/zshrc
~/.config/zsh/* -> zsh/*
~/.gitconfig -> git/gitconfig
~/.gitignore_global -> git/gitignore_global
~/.config/starship.toml -> config/starship.toml
~/.config/direnv/direnvrc -> config/direnvrc
~/.config/mise/config.toml -> mise.toml
~/.config/nvim/init.lua -> nvim/init.lua
~/.local/bin/dot -> bin/dot

If a target file already exists and is not already managed by this repo, it is moved to:

~/.dotfiles-backups/YYYYMMDD-HHMMSS/

Daily usage

Run a health check:

dot doctor

Update packages, tools, and the dotfiles repo:

dot update

Re-run the installer:

dot install

Apply macOS defaults:

dot macos

Show help:

dot help

Package management

Packages are declared in Brewfile.

Install or update packages:

brew bundle --file ~/.dotfiles/Brewfile

Dump your currently installed Homebrew packages for review:

brew bundle dump --file Brewfile.local --describe --force

Do not blindly replace the main Brewfile with a dump. Review additions first.

Runtime management with mise

Global tools are declared in mise.toml.

Install configured tools:

mise install

Check active versions:

mise current

Add a new tool:

mise use --global node@lts
mise use --global python@latest

Project-specific versions should live in the project repository, not here:

cd~/Code/example-project
mise use node@22

Git identity management

The default Git config intentionally avoids hardcoded personal identity values.

Create local identity files outside this repo:

mkdir -p ~/.config/git

Personal identity:

cat >~/.config/git/personal.gitconfig <<'EOF_PERSONAL'[user] name = Your Name email = you@example.comEOF_PERSONAL

Work identity:

cat >~/.config/git/work.gitconfig <<'EOF_WORK'[user] name = Your Name email = you@company.comEOF_WORK

The included Git config supports conditional includes for common paths:

[includeIf "gitdir:~/Code/personal/"]path = ~/.config/git/personal.gitconfig
[includeIf "gitdir:~/Code/work/"]path = ~/.config/git/work.gitconfig

Edit git/gitconfig to match your preferred folder structure.

Secrets and credentials

Do not store secrets in this repository.

Recommended options:

• GitHub CLI: gh auth login
• SSH keys stored under ~/.ssh
• 1Password CLI, Bitwarden CLI, or your preferred secret manager
• Environment variables loaded through direnv for project-specific secrets

Custom machine-specific files

Use ignored local files for machine-specific customizations:

~/.config/zsh/local.zsh
~/.config/git/local.gitconfig
~/.config/mise/local.toml

These are intentionally not tracked.

Maintenance workflow

1. Create a branch.
2. Make changes.
3. Run checks locally:

dot doctor
shellcheck install.sh bin/dot lib/*.sh
shfmt -d install.sh bin/dot lib/*.sh
zsh -n zsh/*.zsh

4. Commit and push.
5. Open a pull request.

GitHub setup

Create a new GitHub repository named dotfiles, then push:

cd~/.dotfiles
git init
git add .
git commit -m "Initial modern dotfiles setup"
git branch -M main
git remote add origin git@github.com:YOUR_GITHUB_USERNAME/dotfiles.git
git push -u origin main

GitHub Codespaces

GitHub Codespaces can automatically apply a dotfiles repository when configured in your Codespaces settings. This repo includes a standard install.sh, which Codespaces can detect and run.

Extending this repo

Good additions:

• lib/docker.sh for Docker Desktop or Colima setup
• lib/security.sh for SSH key checks, GPG, or signing setup
• lib/fonts.sh for developer fonts
• lib/vscode.sh for VS Code extensions
• lib/devcontainers.sh for container tooling

Avoid:

• Hardcoded access tokens
• Work-only credentials
• Machine-specific paths in shared config
• Destructive rm -rf behavior
• Installing abandoned plugin managers or vendored submodules

Troubleshooting

Run:

dot doctor

Common fixes:

brew update
brew bundle --file ~/.dotfiles/Brewfile
mise doctor
mise install
exec zsh

If a link looks wrong, rerun:

./install.sh --force

Backups are stored in ~/.dotfiles-backups/.