bchanot
8f6969001f
- rc templates carry @USER@/@EMAIL@ placeholders; install.sh renders them - resolve_identity: an export already in ~/.bashrc or ~/.zshrc is reused silently, else IDENTITY_USER/IDENTITY_EMAIL, else a prompt, else login name + empty email - render_gitconfig generalised to render_identity_template (gitconfig unchanged) - vimrc reads g:_author/g:_email from $USER/$EMAIL instead of hardcoded values - README + CLAUDE.md
77 lines
4.2 KiB
Markdown
77 lines
4.2 KiB
Markdown
# CLAUDE.md — config (personal dotfiles)
|
|
|
|
Project context for Claude. Global preferences in `~/.claude/CLAUDE.md` apply on top.
|
|
|
|
## What this is
|
|
|
|
Personal dotfiles repo. **Archetype: dotfiles-meta** (meta/config, not an application).
|
|
Produces vim + bash configuration deployed by `install.sh`. Private/personal audience.
|
|
|
|
- Public: no
|
|
- Database: none
|
|
- Stack: POSIX/bash shell scripts + vimscript
|
|
- Distribution: `git clone` + `./install.sh` (OS auto-detected)
|
|
|
|
## Layout
|
|
|
|
```
|
|
remote-install.sh curl|bash bootstrap: ensure git, clone/pull, run install.sh
|
|
install.sh one-shot installer (OS auto-detected)
|
|
vim/vimrc vim config (pathogen, molokai, syntastic, NERDTree)
|
|
vim/autoload/ pathogen loader (committed)
|
|
vim/colors/ molokai colorscheme (committed)
|
|
bash/bashrc-{linux,osx} OS-detected bashrc; USER/EMAIL identity = @USER@/@EMAIL@ placeholders,
|
|
asked at install (reused from an existing rc), never tracked
|
|
gitconfig user-scope ~/.gitconfig template, @USER@/@EMAIL@ filled at install
|
|
tmux.conf tmux config (vi keys, tpm plugins) → ~/.config/tmux/tmux.conf, both OSes (tmux ≥ 3.1)
|
|
zsh/{zshrc-osx,bchanot.zsh-theme} macOS zsh option: oh-my-zsh zshrc + theme porting the bash prompt
|
|
bin/{dt,dtach-router,claude-provider} CLI scripts deployed to ~/.local/bin
|
|
etc/profile.d/disk-usage-warning.sh login-time low-disk warning → /etc/profile.d (Linux only)
|
|
etc/tmpfiles.d/tmp.conf disk-backed /tmp cleanup rules (offer: /tmp on disk)
|
|
etc/systemd/ssh.service.d/override.conf sshd OOM-exempt drop-in (offer: SSH memory guard)
|
|
etc/default/earlyoom earlyoom args, spare sshd / kill node first (same offer)
|
|
etc/fail2ban/jail.d/local.conf sshd jail: journal backend, all-ports ban, LAN ignored (always)
|
|
etc/apt/apt.conf.d/20auto-upgrades unattended security upgrades on (always)
|
|
etc/ssh/sshd_config.d/20-hardening.conf sshd limits that cannot lock out, sshd -t gated (always)
|
|
cloudpex/{cloudpex,install.sh,README.md} on-demand SMB mount helper → /usr/local/bin, offered [y/N]; site values
|
|
prompted at install → /etc/cloudpex.conf, never in the script (FR docs)
|
|
.claude/{tasks,memory,audits}/ Claude working state
|
|
```
|
|
|
|
`/tmp` is a RAM-backed tmpfs on Ubuntu (50% of RAM): agent runs fill it, which is why
|
|
install.sh offers to mask `tmp.mount`. Swap is not the fix (the cap and ENOSPC stay).
|
|
|
|
macOS: install.sh swaps apt-get for Homebrew (colima for Docker, brew services for
|
|
code-server/mariadb, `~/.bash_profile` → `~/.bashrc`), asks bash or zsh (`MACOS_SHELL`
|
|
presets it; zsh = oh-my-zsh + `zsh/` files, bash = brew bash 5) and prints the Linux-only
|
|
items it skipped. Keep `bashrc-osx` = `bashrc-linux` + macOS deltas only, and the zsh
|
|
files in step with them (same env, aliases, prompt).
|
|
|
|
`pymupdf`/`markdown_py` are NOT tracked — they are pipx entry-point shims,
|
|
recreated by `pipx install PyMuPDF Markdown` in install.sh.
|
|
`claude-provider` reads `$OPENROUTER_API_KEY` from the env — never hardcode it (the
|
|
original had a live key; it was scrubbed — see decisions/blockers).
|
|
|
|
## Commands
|
|
|
|
| Task | Command |
|
|
| ----- | ---------------------------------------- |
|
|
| Lint | `shellcheck *.sh cloudpex/install.sh cloudpex/cloudpex bash/bashrc-*` |
|
|
| Syntax check | `bash -n install.sh remote-install.sh cloudpex/install.sh` |
|
|
| Install | `./install.sh` (OS auto-detected) |
|
|
| Remote install | `curl -fsSL <raw>/remote-install.sh \| bash` |
|
|
|
|
No build, no test suite. Lint = shellcheck.
|
|
|
|
## Conventions
|
|
|
|
- Shell scripts: `#!/usr/bin/env bash`, `set -euo pipefail`, quote all expansions, keep shellcheck clean.
|
|
- Installer must stay **idempotent** (re-runnable without breaking state) and use `$SCRIPT_DIR`-relative paths.
|
|
- bashrc files: tabs for indentation (existing style). Style nits (legacy backticks) tolerated — don't churn.
|
|
- No secrets in any tracked file. Use placeholders if config ever needs tokens.
|
|
|
|
## Known issues (see .claude/audits/ONBOARD_REPORT.md)
|
|
|
|
- `vim/vimrc` `GenerateClassC` uses bare `name` instead of `a:name` → `:ClassC` errors (E121). Vim domain, not yet fixed.
|
|
- bashrc files use legacy backticks (`SC2006`) — cosmetic.
|