connor
29bcf615e6
Reactive capture missed wallust entirely, so this is a systematic pass over ~/.config on all four machines: every entry that is not already a symlink, judged on whether it is hand-authored config or app-generated state. Shared and identical everywhere -> common/: lazygit, ncmpcpp, neofetch, matplotlib. Everything else differs per machine and goes in hosts/<host>/config/: gtk-2.0/3.0/4.0, mimeapps.list, user-dirs.dirs, mpv, swaync, swayimg, bob, pavucontrol.ini, zoom; plus beets, bottom, glow and mpd on system76; fastfetch, gh, uv, traggo, tiling-assistant and xdg-desktop-portal on the work laptop; inbox-tidy and llmfit on mainframe. Deliberately excluded, all verified to hold live credentials: the work laptop's Claude OAuth tokens (~/.config/anthropic/credentials), the NAS restic repo password and hetzner.env, subsonic passwords in subtui, stmp and termsonic, mopidy, supersonic, the Proton bridge env and the LiteLLM virtual keys. The ignore list now names those shapes directly — a bare `password` file would not have been caught before. Also excluded as generated state or too large to be meaningful: GIMP, kicad, BambuStudio, OrcaSlicer, calibre, LightBurn, obs-studio, feishin, libreoffice, VirtualBox, FortiClient; and mainframe's dead X11-era leftovers (i3, openbox, lxpanel, lxsession, pcmanfm).
40 lines
781 B
Plaintext
40 lines
781 B
Plaintext
# Allowlist. Everything is ignored unless explicitly named below.
|
|
# This is deliberate: the previous repo used a two-line denylist and
|
|
# accumulated browser caches, mail caches and vendored binaries.
|
|
**/*
|
|
|
|
!.gitignore
|
|
!install
|
|
!README.md
|
|
|
|
!meta/
|
|
!meta/**
|
|
!common/
|
|
!common/**
|
|
!hosts/
|
|
!hosts/**
|
|
!packages/
|
|
!packages/**
|
|
|
|
# dotbot submodule
|
|
!.gitmodules
|
|
!dotbot
|
|
|
|
# Re-exclude noise inside the allowed trees.
|
|
**/__pycache__/
|
|
**/*.pyc
|
|
*.pre-*
|
|
*.backup
|
|
**/hcache/
|
|
**/node_modules/
|
|
|
|
# Never, under any circumstances. These are shapes that have actually held
|
|
# live credentials on these machines: Claude OAuth tokens, restic repo keys,
|
|
# subsonic passwords, the Proton bridge and LiteLLM virtual keys.
|
|
**/credentials
|
|
**/credentials/**
|
|
**/.credentials.json
|
|
**/password
|
|
**/*.env
|
|
.secrets.zsh
|