Files
dotfiles/ssh
David F GliddenandClaude Opus 4.6 066a47a26b Audit and optimize for CapableMind development
Brewfile: stripped to essential tools (~600MB freed), removed boost,
cmake, aerc, newsboat, fontforge, starship, and 24 auto-dependencies.
Added caffeine, ollama, fastfetch, ocrmypdf, tea, sshpass, vitetris.
Dropped 1password, iterm2, github-desktop, hazel, swiftbar, oversight.

Shell: fixed all stale references (fzf, zoxide, starship, old paths,
Homebrew node aliases). Updated project paths to ~/_Dev/. Added
CapableMind aliases (cm, bmf, bmf-health, bmf-status, bmf-logs).

Configs: removed iterm2, neofetch, swiftbar configs. Added capablemind
(launchd plists, MCP example, bmf-start script). Updated SSH config
with git.skemantix.com. Added CLAUDE.md to dotfiles.

Scripts: consolidated 3 backup scripts into 1 (backup-all-secrets.sh),
added pass store backup. Added setup-capablemind.sh for full environment
reconstruction. Updated symlinks.sh for new config structure.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-20 23:45:33 +01:00
..

SSH Configuration

⚠️ Security Notice

Never commit private keys to git! This directory contains only:

  • Example SSH config (sanitized)
  • Public keys (safe to share)
  • Setup scripts

Setting up SSH on a new machine

  1. Generate new SSH keys (if needed):
# GitHub
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/github

# General purpose
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/id_ed25519
  1. Restore SSH config:
cp ~/dotfiles/ssh/config.example ~/.ssh/config
# Edit ~/.ssh/config to add your actual hostnames, users, and key paths
  1. Set correct permissions:
chmod 700 ~/.ssh
chmod 600 ~/.ssh/config
chmod 600 ~/.ssh/*_key
chmod 644 ~/.ssh/*.pub
  1. Restore existing keys (if you have encrypted backups):
# Decrypt backup
gpg -d ~/dotfiles/backups/ssh_[timestamp].tar.gz.gpg | tar -xzf -

SSH Config Best Practices

  • Use SSH key agent: ssh-add -K ~/.ssh/your_key
  • Use different keys for different services
  • Enable 2FA where possible
  • Regularly rotate keys

Backup Strategy

Run the backup script to create encrypted backups:

~/dotfiles/backup-scripts/backup-sensitive.sh