dotfiles

Personal configuration files for three platforms, organized into per-platform top-level directories.

Layout

dotfiles/
├── omarchy/      Arch Linux desktop (omarchy / Hyprland)
├── macos/        macOS
├── nixos/        NixOS
└── common/       Shared between platforms

omarchy/

Configurations for an omarchy-based Arch Linux desktop running Hyprland.

• install.sh — stows all packages below and enables user systemd services
• hypr/ — Hyprland config: keybindings, input, monitors, animations, scripts
• waybar/ — status bar layout and styling
• starship/ — shell prompt
• nushell/ — Nushell config and environment (config.nu, env.nu)
• systemd/ — user services (downloads cleanup, grasp browser extension relay)
• uwsm/ — session environment variables (TERMINAL, EDITOR) for Hyprland
• xcompose/ — custom compose key sequences
• eca/ — eca configuration
• hyprwhspr/ — hyprwhspr window switcher configuration

macos/

Configurations for macOS.

• install.sh — stows all packages below, installs Homebrew bundle, sets up oh-my-zsh, fzf, and macOS defaults
• Brewfile — Homebrew formulae, casks, and Mac App Store apps
• zsh/ — .zshrc, powerlevel10k prompt, .lessfilter.sh
• tmux/ — tmux config and a CPU/memory status script
• skhd/ — hotkey daemon bindings
• yabai/ — tiling window manager rules
• pip/ — pip configuration

nixos/

NixOS system configuration managed with flakes and home-manager.

• flake.nix — inputs and outputs
• hosts/ — per-host configurations (fusion-vm, example)
• modules/ — shared system-level modules (packages, services)
• home/eduardo/ — user environment (packages, waybar, gpg-agent, nushell, fzf, zoxide)
• hypr/ — Hyprland config for NixOS hosts
• deploy.sh — deployment helper script

common/

Shared configs used on both omarchy and macOS (and referenced from NixOS).

• doom/ — Doom Emacs configuration (init.el, config.el, packages.el, keybindings, org templates)
• authinfo/ — encrypted .authinfo (git-crypted); stowed on macOS, referenced as an out-of-store symlink on NixOS

Installation

Arch Linux / omarchy

make install-omarchy
# or directly:
./omarchy/install.sh

Requires stow and systemctl. Pass --dry-run to preview changes without touching the filesystem.

macOS

make install-macos
# or directly:
./macos/install.sh

Requires gpg with the signing key imported and brew available.

NixOS

cd nixos && make switch

Secrets

common/authinfo/.authinfo is encrypted with git-crypt. Running the installers on a machine without the key will silently skip authinfo stowing (macOS) or produce a broken symlink (NixOS) until the repo is unlocked.

Security scanning

make gitleaks          # scan against stored baseline
make gitleaks-baseline-regen  # regenerate baseline after a deliberate change