@kidchenko's Dotfiles

Cross-platform dotfiles (macOS, Linux & Windows) managed with Chezmoi, following XDG Base Directory conventions.

Why?

Setting up a new machine takes hours. Configurations drift between machines. Packages get outdated. SSH keys sit on disk. This project solves all of that:

Problem	Solution
New machine setup takes hours	Single command, minutes
Configuration drift between machines	One repo, templated variations
Packages get outdated	Automated weekly updates
SSH keys on disk are a security risk	Keys stored in 1Password
Dotfiles scattered everywhere	XDG-compliant structure
No visibility into system health	`dotfiles doctor` command
Backups are forgotten	Automated weekly with retention

See Problem Statement for the full rationale.

Quick Start

macOS / Linux

# One-line bootstrap on a new machine
bash -c "$(curl -fsSL https://raw.githubusercontent.com/kidchenko/dotfiles/main/tools/bootstrap.sh)"

# Preview what will be installed (dry-run)
bash -c "$(curl -fsSL https://raw.githubusercontent.com/kidchenko/dotfiles/main/tools/bootstrap.sh)" -- --dry-run

Windows

Run in PowerShell. Nothing needs to be installed first — Chocolatey and git are installed for you, and the script prompts for elevation via UAC:

# One-line bootstrap on a new machine
irm https://raw.githubusercontent.com/kidchenko/dotfiles/main/tools/bootstrap.ps1 | iex

# Preview what will be installed (dry-run, no elevation needed)
& ([scriptblock]::Create((irm https://raw.githubusercontent.com/kidchenko/dotfiles/main/tools/bootstrap.ps1))) -DryRun

Works on the stock Windows PowerShell 5.1 that ships with Windows — you do not need to install PowerShell 7 first.

After bootstrap

Bootstrap installs essential dev tools only. Then run the full setup:

# Complete setup (packages, extensions, ssh, defaults)
dotfiles setup

On Windows, refresh your session first so newly installed tools are on PATH (refreshenv, or just open a new PowerShell window).

What's Included

Category	Tools
Shell	Zsh + Oh My Zsh, aliases, functions, completions
Git	Templated config, delta diff viewer, lazygit
Editor	Neovim, VS Code extensions sync
Terminal	Tmux, modern CLI tools (lsd, bat, fd, ripgrep, fzf)
Secrets	1Password CLI integration for SSH keys
Automation	Weekly Homebrew updates, scheduled backups
macOS	System preferences, Dock, Finder optimizations

Dotfiles CLI

After installation, use the dotfiles command to manage everything:

dotfiles help              # Show all commands

Daily

Command	Description
`dotfiles update`	Pull and apply latest changes
`dotfiles doctor`	Run health checks on your setup
`dotfiles status`	Show pending changes (chezmoi diff + git status)

Packages

Command	Description
`dotfiles packages`	Install system packages (Brewfile)
`dotfiles packages cleanup`	Remove unlisted packages
`dotfiles packages outdated`	Show packages with updates
`dotfiles packages global`	Install global tools (npm/pip/dotnet)
`dotfiles packages extensions`	Install VS Code/browser extensions

System

Command	Description
`dotfiles ssh`	Setup SSH keys with 1Password
`dotfiles defaults`	Apply macOS system preferences
`dotfiles cron`	Manage scheduled tasks
`dotfiles logs`	View cron job logs
`dotfiles backup`	Backup project folders

Lifecycle

Command	Description
`dotfiles setup`	Complete post-bootstrap setup
`dotfiles bootstrap`	Bootstrap on new machine
`dotfiles destroy`	Remove dotfiles and state

Secrets Management (1Password)

SSH keys are generated and stored directly in 1Password - the private key never touches disk during generation.

Setup SSH Keys

dotfiles ssh                 # Interactive menu for SSH key management

Options:

restore - Restore existing key from 1Password to ~/.ssh/
generate - Generate new Ed25519 key directly in 1Password
show - Display your public key (for adding to GitHub/GitLab)
compare - Compare local key with 1Password version

How It Works

Traditional (Unsafe):
  ssh-keygen → Key on disk → Copy to USB/cloud → Multiple copies, multiple risks

1Password Workflow (Safe):
  op item create → Key in vault → Restored via Chezmoi → Key in memory only

Keys are stored at op://development/SSH Key/ and restored automatically when you run chezmoi apply.

Scheduled Tasks

Six cron jobs are set up automatically:

Security & Updates

Schedule	Task	Description
Daily 8am	`outdated.sh`	Check for outdated packages
Monday 9am	`update.sh`	Update Homebrew packages
Sunday 10am	`cleanup.sh`	Cleanup brew cache & temp files

Backups & Maintenance

Schedule	Task	Description
Sunday 2am	`backup.sh`	Backup projects (git sync + archive)
Saturday 4am	`git-maintenance.sh`	Run git gc on repositories

Health Monitoring

Schedule	Task	Description
Daily 7am	`health.sh`	System health check

Manage with dotfiles cron and view logs with dotfiles logs.

Directory Structure

dotfiles/
├── home/                    # Chezmoi-managed dotfiles
│   ├── dot_config/          # ~/.config files (zsh, nvim, git, etc.)
│   ├── dot_zshrc.tmpl       # Main shell config
│   └── private_dot_ssh/     # SSH config templates
├── tools/                   # Management scripts
│   ├── dotfiles             # CLI tool
│   ├── bootstrap.sh         # One-line installer (macOS/Linux)
│   ├── bootstrap.ps1        # One-line installer (Windows)
│   ├── doctor.sh            # Health checks
│   ├── destroy.sh           # Uninstaller
│   ├── backup-projects.sh   # Backup utility
│   ├── setup-ssh-keys.sh    # SSH key generation
│   ├── os_installers/       # Per-OS package installers
│   └── os_setup/            # OS-specific configs
├── cron/                    # Scheduled tasks
├── Brewfile                 # Homebrew packages (macOS)
├── Brewfile.essential       # Homebrew bootstrap subset
└── packages.essential.config # Chocolatey bootstrap subset (Windows)

Customization

Packages

Edit Brewfile to add/remove Homebrew packages, then run:

dotfiles packages

Extensions

Edit config files, then run dotfiles packages extensions:

Config File	Description
`~/.config/dotfiles/vscode-extensions.txt`	VS Code extension IDs (one per line)
`~/.config/dotfiles/brave-extensions.txt`	Browser extension IDs

Global Tools (npm/pip/dotnet)

Edit ~/.config/dotfiles/config.yaml:

global_tools:
  npm: [typescript, prettier]
  pip: [httpie]
  dotnet: [dotnet-ef]

Then run: dotfiles packages global

macOS Defaults

The dotfiles defaults command applies developer-friendly settings (keyboard, Dock, Finder, screenshots). Review tools/os_setup/macos-config.sh before running.

Bootstrap Flow

bootstrap.sh (macOS/Linux) and bootstrap.ps1 (Windows) run the same steps against each platform's package manager:

#	Step	macOS / Linux (`bootstrap.sh`)	Windows (`bootstrap.ps1`)
1	Package manager	Homebrew	Chocolatey
2	Git	Homebrew, apt/dnf/pacman, or Xcode CLT	Chocolatey
3	Refresh env	`hash -r` / `eval "$(brew shellenv)"`	`Update-SessionEnvironment`
4	Dotfiles manager	Chezmoi	Chezmoi
5	Apply configs	`chezmoi init --apply`	`chezmoi init --apply`
6	Essential packages	`Brewfile.essential`	`packages.essential.config`
7	Shell framework	Oh My Zsh + zsh plugins	PowerShell modules (posh-git, Terminal-Icons, PSReadLine, PSFzf)
8	Directories	`~/kidchenko`, `~/lambda3`, …	same
9	CLI	Symlink `dotfiles`	`dotfiles.ps1` shim + `~/.local/bin` on PATH

Both platforms bootstrap from a machine that has nothing but a shell and a downloader — git is installed for you, not required up front. The only remaining asymmetry is that Windows elevates via UAC, because Chocolatey requires administrator rights while Homebrew explicitly refuses them.

After bootstrap, run dotfiles setup for complete installation (full packages, SSH keys, extensions, system defaults, cron jobs).

Uninstalling

# Remove managed dotfiles only
dotfiles destroy

# Remove dotfiles + chezmoi state + brew packages
dotfiles destroy --all

# Factory reset (removes dev tools, caches, histories)
dotfiles destroy --deep

Documentation

Guide	Description
Installation	Prerequisites, bootstrap options, troubleshooting
Customization	Fork setup, templating, adding packages
Structure	Repository layout, XDG paths, key files
Commands	Full CLI reference (one page per command)

Built with care by @kidchenko

Name		Name	Last commit message	Last commit date
.github		.github
.jules		.jules
cron		cron
docs		docs
home		home
img		img
tools		tools
.chezmoiroot		.chezmoiroot
.gitignore		.gitignore
Brewfile		Brewfile
Brewfile.essential		Brewfile.essential
CHANGELOG.md		CHANGELOG.md
CLAUDE.md		CLAUDE.md
CONTRIBUTING.md		CONTRIBUTING.md
LICENSE		LICENSE
README.md		README.md
SECURITY.md		SECURITY.md
build.sh		build.sh
packages.essential.config		packages.essential.config

Navigation Menu

Repository files navigation

@kidchenko's Dotfiles

Why?

Quick Start

macOS / Linux

Windows

After bootstrap

What's Included

Dotfiles CLI

Daily

Packages

System

Lifecycle

Secrets Management (1Password)

Setup SSH Keys

How It Works

Scheduled Tasks

Directory Structure

Customization

Packages

Extensions

Global Tools (npm/pip/dotnet)

macOS Defaults

Bootstrap Flow

Uninstalling

Documentation

About

Releases

Packages

Used by

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

@kidchenko's Dotfiles

Why?

Quick Start

macOS / Linux

Windows

After bootstrap

What's Included

Dotfiles CLI

Daily

Packages

System

Lifecycle

Secrets Management (1Password)

Setup SSH Keys

How It Works

Scheduled Tasks

Directory Structure

Customization

Packages

Extensions

Global Tools (npm/pip/dotnet)

macOS Defaults

Bootstrap Flow

Uninstalling

Documentation

About

Topics

Resources

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Used by

Contributors

Languages