David F GliddenandClaude
389febb161
- Added comprehensive configuration files for seamless migration - SSH, GPG, Karabiner, iTerm2, Neofetch, SwiftBar configs - Pass license management system with templates and documentation - Enhanced shell functions with MAS updates and moon phase tracking - Comprehensive encrypted backup system (GPG AES256) - Included encrypted backups of all sensitive data - BBEdit as default editor with proper configuration - Fixed shell compatibility issues - Merged existing .zsh configs with improvements Security: - All sensitive data is GPG encrypted (.gpg files) - Private keys excluded from version control - Only configs and encrypted backups are tracked Following prime directive: durable, thoughtful solutions 🤖 Generated with Claude Code Co-Authored-By: Claude <noreply@anthropic.com>
65 lines
1.5 KiB
Markdown
65 lines
1.5 KiB
Markdown
# Complete Secrets Restore Instructions
|
|
|
|
## Master Encrypted Backup
|
|
|
|
This is your complete backup of all private keys, certificates, and sensitive configurations.
|
|
|
|
### What's Included
|
|
- SSH keys and configuration
|
|
- GPG private keys and keyring
|
|
- Docker authentication
|
|
- Application licenses
|
|
- Any other sensitive configuration files
|
|
|
|
### Restore Process
|
|
|
|
#### Step 1: Decrypt the backup
|
|
```bash
|
|
gpg --decrypt all_secrets_TIMESTAMP.tar.gz.gpg > all_secrets_TIMESTAMP.tar.gz
|
|
```
|
|
|
|
#### Step 2: Extract to temporary location first
|
|
```bash
|
|
mkdir ~/restore_temp
|
|
tar -xzf all_secrets_TIMESTAMP.tar.gz -C ~/restore_temp
|
|
```
|
|
|
|
#### Step 3: Review and restore selectively
|
|
```bash
|
|
# SSH (if needed)
|
|
cp -r ~/restore_temp/secrets/.ssh ~/
|
|
chmod 700 ~/.ssh
|
|
chmod 600 ~/.ssh/config ~/.ssh/*_rsa ~/.ssh/id_*
|
|
chmod 644 ~/.ssh/*.pub
|
|
|
|
# GPG (if needed)
|
|
cp -r ~/restore_temp/secrets/.gnupg ~/
|
|
chmod 700 ~/.gnupg
|
|
chmod 600 ~/.gnupg/*
|
|
chmod 700 ~/.gnupg/private-keys-v1.d
|
|
chmod 600 ~/.gnupg/private-keys-v1.d/*
|
|
gpgconf --kill gpg-agent # Restart GPG agent
|
|
|
|
# Docker (if needed)
|
|
mkdir -p ~/.docker
|
|
cp ~/restore_temp/secrets/.docker/config.json ~/.docker/
|
|
|
|
# Other files as needed
|
|
```
|
|
|
|
#### Step 4: Cleanup
|
|
```bash
|
|
rm -rf ~/restore_temp
|
|
rm all_secrets_TIMESTAMP.tar.gz
|
|
```
|
|
|
|
## Security Notes
|
|
|
|
- This backup contains ALL your private keys and secrets
|
|
- Keep it in multiple secure locations
|
|
- Test restore process periodically
|
|
- Never store unencrypted - always use GPG encryption
|
|
|
|
Created: $(date)
|
|
System: $(sw_vers -productVersion)
|