Brewfile: stripped to essential tools (~600MB freed), removed boost, cmake, aerc, newsboat, fontforge, starship, and 24 auto-dependencies. Added caffeine, ollama, fastfetch, ocrmypdf, tea, sshpass, vitetris. Dropped 1password, iterm2, github-desktop, hazel, swiftbar, oversight. Shell: fixed all stale references (fzf, zoxide, starship, old paths, Homebrew node aliases). Updated project paths to ~/_Dev/. Added CapableMind aliases (cm, bmf, bmf-health, bmf-status, bmf-logs). Configs: removed iterm2, neofetch, swiftbar configs. Added capablemind (launchd plists, MCP example, bmf-start script). Updated SSH config with git.skemantix.com. Added CLAUDE.md to dotfiles. Scripts: consolidated 3 backup scripts into 1 (backup-all-secrets.sh), added pass store backup. Added setup-capablemind.sh for full environment reconstruction. Updated symlinks.sh for new config structure. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
SSH Configuration
⚠️ Security Notice
Never commit private keys to git! This directory contains only:
- Example SSH config (sanitized)
- Public keys (safe to share)
- Setup scripts
Setting up SSH on a new machine
- Generate new SSH keys (if needed):
# GitHub
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/github
# General purpose
ssh-keygen -t ed25519 -C "your_email@example.com" -f ~/.ssh/id_ed25519
- Restore SSH config:
cp ~/dotfiles/ssh/config.example ~/.ssh/config
# Edit ~/.ssh/config to add your actual hostnames, users, and key paths
- Set correct permissions:
chmod 700 ~/.ssh
chmod 600 ~/.ssh/config
chmod 600 ~/.ssh/*_key
chmod 644 ~/.ssh/*.pub
- Restore existing keys (if you have encrypted backups):
# Decrypt backup
gpg -d ~/dotfiles/backups/ssh_[timestamp].tar.gz.gpg | tar -xzf -
SSH Config Best Practices
- Use SSH key agent:
ssh-add -K ~/.ssh/your_key - Use different keys for different services
- Enable 2FA where possible
- Regularly rotate keys
Backup Strategy
Run the backup script to create encrypted backups:
~/dotfiles/backup-scripts/backup-sensitive.sh