Public Dotfiles

Fresh Install

1. Download the git-crypt key from 1Password as ~/key

2. Download the fresh-install script (to /tmp, not your home directory):

   curl -o /tmp/fresh-install.sh https://raw.githubusercontent.com/tammersaleh/dotfiles-public/master/fresh-install.sh

3. Generate a new Github fine-grained access token here. Set:

   1. Comment: Temporary dotfiles token
   2. Expiration: 7d
   3. Scopes: ✅ repo
   4. Make sure you copy it!

4. Run the script:

   chmod +x fresh-install.sh
   /tmp/fresh-install.sh tammersaleh ghp_token ~/key

5. Remove the git crypt key: rm ~/key

6. Pull secrets into the login keychain:

   op signin
   envsec sync

   Shells read them from the keychain on startup (~/.zsh/d/secrets.zsh). Rerun envsec sync after rotating any credential.

Reboot and pray.