🚀 Complete machine migration setup with encrypted backups

- Added comprehensive configuration files for seamless migration
- SSH, GPG, Karabiner, iTerm2, Neofetch, SwiftBar configs
- Pass license management system with templates and documentation
- Enhanced shell functions with MAS updates and moon phase tracking
- Comprehensive encrypted backup system (GPG AES256)
- Included encrypted backups of all sensitive data
- BBEdit as default editor with proper configuration
- Fixed shell compatibility issues
- Merged existing .zsh configs with improvements

Security:
- All sensitive data is GPG encrypted (.gpg files)
- Private keys excluded from version control
- Only configs and encrypted backups are tracked

Following prime directive: durable, thoughtful solutions

🤖 Generated with Claude Code

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
David F Glidden
2025-07-28 23:10:36 +02:00
co-authored by Claude
parent a0e34f78ae
commit 389febb161
67 changed files with 2484 additions and 545 deletions
+64
View File
@@ -0,0 +1,64 @@
# Complete Secrets Restore Instructions
## Master Encrypted Backup
This is your complete backup of all private keys, certificates, and sensitive configurations.
### What's Included
- SSH keys and configuration
- GPG private keys and keyring
- Docker authentication
- Application licenses
- Any other sensitive configuration files
### Restore Process
#### Step 1: Decrypt the backup
```bash
gpg --decrypt all_secrets_TIMESTAMP.tar.gz.gpg > all_secrets_TIMESTAMP.tar.gz
```
#### Step 2: Extract to temporary location first
```bash
mkdir ~/restore_temp
tar -xzf all_secrets_TIMESTAMP.tar.gz -C ~/restore_temp
```
#### Step 3: Review and restore selectively
```bash
# SSH (if needed)
cp -r ~/restore_temp/secrets/.ssh ~/
chmod 700 ~/.ssh
chmod 600 ~/.ssh/config ~/.ssh/*_rsa ~/.ssh/id_*
chmod 644 ~/.ssh/*.pub
# GPG (if needed)
cp -r ~/restore_temp/secrets/.gnupg ~/
chmod 700 ~/.gnupg
chmod 600 ~/.gnupg/*
chmod 700 ~/.gnupg/private-keys-v1.d
chmod 600 ~/.gnupg/private-keys-v1.d/*
gpgconf --kill gpg-agent # Restart GPG agent
# Docker (if needed)
mkdir -p ~/.docker
cp ~/restore_temp/secrets/.docker/config.json ~/.docker/
# Other files as needed
```
#### Step 4: Cleanup
```bash
rm -rf ~/restore_temp
rm all_secrets_TIMESTAMP.tar.gz
```
## Security Notes
- This backup contains ALL your private keys and secrets
- Keep it in multiple secure locations
- Test restore process periodically
- Never store unencrypted - always use GPG encryption
Created: $(date)
System: $(sw_vers -productVersion)