yutkat/dotfiles

To test the dotfiles without modifying your host system, you can run them inside an Arch Linux container:

1. Start a container:

   docker run -it --rm archlinux:latest /bin/bash

2. Set up the environment (sudo, git, and a test user):
   ```bash
pacman -Sy --noconfirm sudo git
useradd -m -s /bin/bash test
echo 'test ALL=(ALL) NOPASSWD:ALL' >> /etc/sudoers
su - test

3. Clone the repo and run the installer with the --single flag:

   git clone https://github.com/yutkat/dotfiles.git
   cd dotfiles
   ./install.sh --single
   exec bash

4. Apply the configuration for the test user:
   ```bash
home-manager switch --flake .#test

5. Run post-install commands (zsh, mise, and Neovim sync).

After copying new udev configuration files to the system, you must execute the following commands to update the hardware database, reload the rules, and trigger the changes across the system:

1. Update the hardware database: sudo udevadm hwdb --update
2. Reload the udev rules: sudo udevadm control --reload-rules
3. Trigger the new rules: sudo udevadm trigger

After installing the service and configuring the firewall, apply your home-manager configuration and restart the Neovim proxy service to complete the setup.

home-manager switch --flake ~/dotfiles#X1C10
systemctl --user restart tinyproxy-nvim

To install these dotfiles on a NixOS system, follow these steps:

1. Clone the repository:

   git clone https://github.com/yutkat/dotfiles.git
   cd dotfiles

2. Edit flake.nix to configure your myHosts.
3. Run the installation script to install Nix (with flake and home-manager support):

   ./install.sh

4. Apply the configuration using nixos-rebuild:

   sudo nixos-rebuild switch --flake .#<hostname>

5. Complete the post-install setup:
   • Reload zsh: exec zsh
   • Upgrade mise: mise upgrade
   • Sync Neovim plugins: vi --headless -c 'Lazy! sync' -c 'qall'

The nvbr0.service creates an isolated, uplink-less bridge (nvbr0 with IP 10.123.45.1/24) designed to serve as the sole egress path for the Neovim wall using firejail --net=nvbr0. This service is intended for non-NixOS hosts.

To install, copy the service file to the systemd directory, ensure NetworkManager does not manage the bridge, and enable the service.

sudo cp ~/dotfiles/system-etc/systemd/system/nvbr0.service /etc/systemd/system/

# If NetworkManager is in use, prevent it from managing the bridge:
sudo cp ~/dotfiles/system-etc/NetworkManager/conf.d/nvbr0-unmanaged.conf /etc/NetworkManager/conf.d/
sudo systemctl reload NetworkManager

sudo systemctl daemon-reload
sudo systemctl enable --now nvbr0.service

# Verify the bridge is UP with the correct IP:
ip -br addr show nvbr0          # expect 10.123.45.1/24, UP

If your host has an active firewall, you must allow inbound traffic on the nvbr0 interface to reach the proxy port. Use the following commands depending on your firewall manager.

# nftables
sudo nft add rule inet filter input iifname "nvbr0" accept

# firewalld
sudo firewall-cmd --permanent --zone=trusted --change-interface=nvbr0 && sudo firewall-cmd --reload

The configuration enables GPG support and configures the gpg-agent service with SSH support and specific cache settings.

GPG Configuration:

• programs.gpg.enable: Set to true to enable GPG.

GPG Agent Configuration:

• services.gpg-agent.enable: Enables the agent.
• services.gpg-agent.enableSshSupport: Enables SSH support via the agent.
• services.gpg-agent.pinentry.package: Uses pkgs.pinentry-curses for terminal-based pinentry.
• services.gpg-agent.defaultCacheTtl: Sets the default cache TTL (604800 seconds).
• services.gpg-agent.maxCacheTtl: Sets the maximum cache TTL (604800 seconds).

programs = {
  gpg = {
    enable = true;
  };
};
services.gpg-agent = {
  enable = true;
  enableSshSupport = true;
  pinentry.package = pkgs.pinentry-curses;
  defaultCacheTtl = 604800;
  maxCacheTtl = 604800;
};

The following shortcuts are configured for the WezTerm terminal:

The following shortcuts are configured for window managers (Hyprland, i3, or sway):