Initial commit: Complete macOS dotfiles system
🖖 Features: - Master 'engage' script for one-command setup - 120+ CLI tools via Homebrew - 40+ Applications (casks + MAS apps) - Complete macOS system configuration - Security hardening and privacy settings - Obsidian knowledge vault setup - Comprehensive backup strategies - Automated symlink management Live long and prosper\! 🚀 🤖 Generated with Claude Code (https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,52 @@
|
||||
# SSH Configuration
|
||||
|
||||
## ⚠️ Security Notice
|
||||
Never commit private keys to git! This directory contains only:
|
||||
- Example SSH config (sanitized)
|
||||
- Public keys (safe to share)
|
||||
- Setup scripts
|
||||
|
||||
## Setting up SSH on a new machine
|
||||
|
||||
1. **Generate new SSH keys** (if needed):
|
||||
```bash
|
||||
# GitHub
|
||||
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/github
|
||||
|
||||
# General purpose
|
||||
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/id_ed25519
|
||||
```
|
||||
|
||||
2. **Restore SSH config**:
|
||||
```bash
|
||||
cp ~/dotfiles/ssh/config.example ~/.ssh/config
|
||||
# Edit ~/.ssh/config to add your actual hostnames, users, and key paths
|
||||
```
|
||||
|
||||
3. **Set correct permissions**:
|
||||
```bash
|
||||
chmod 700 ~/.ssh
|
||||
chmod 600 ~/.ssh/config
|
||||
chmod 600 ~/.ssh/*_key
|
||||
chmod 644 ~/.ssh/*.pub
|
||||
```
|
||||
|
||||
4. **Restore existing keys** (if you have encrypted backups):
|
||||
```bash
|
||||
# Decrypt backup
|
||||
gpg -d ~/dotfiles/backups/ssh_[timestamp].tar.gz.gpg | tar -xzf -
|
||||
```
|
||||
|
||||
## SSH Config Best Practices
|
||||
|
||||
- Use SSH key agent: `ssh-add -K ~/.ssh/your_key`
|
||||
- Use different keys for different services
|
||||
- Enable 2FA where possible
|
||||
- Regularly rotate keys
|
||||
|
||||
## Backup Strategy
|
||||
|
||||
Run the backup script to create encrypted backups:
|
||||
```bash
|
||||
~/dotfiles/backup-scripts/backup-sensitive.sh
|
||||
```
|
||||
@@ -0,0 +1,32 @@
|
||||
# SSH Config Template
|
||||
# Copy to ~/.ssh/config and update with your actual values
|
||||
|
||||
# Global defaults
|
||||
Host *
|
||||
AddKeysToAgent yes
|
||||
UseKeychain yes
|
||||
# Update with your default key
|
||||
IdentityFile ~/.ssh/id_ed25519
|
||||
|
||||
# GitHub
|
||||
Host github.com
|
||||
HostName github.com
|
||||
User git
|
||||
IdentityFile ~/.ssh/github_key
|
||||
IdentitiesOnly yes
|
||||
|
||||
# Example: Personal Server
|
||||
# Host myserver
|
||||
# HostName server.example.com
|
||||
# User yourusername
|
||||
# Port 22
|
||||
# IdentityFile ~/.ssh/server_key
|
||||
# IdentitiesOnly yes
|
||||
|
||||
# Example: Work Server with Jump Host
|
||||
# Host work-server
|
||||
# HostName internal.work.com
|
||||
# User workuser
|
||||
# ProxyJump jumphost.work.com
|
||||
# IdentityFile ~/.ssh/work_key
|
||||
# IdentitiesOnly yes
|
||||
Reference in New Issue
Block a user