phaestosdev-onprem-dotfiles

Fleet dotfile management using chezmoi with 1Password CLI for secret injection.

Prerequisites

• 1Password CLI installed and signed in
• chezmoi installed
• SSH key at ~/.ssh/id_ed25519
• GitHub CLI authenticated

Bootstrap a machine

# Sign into 1Password
eval $(op signin)

# Init and apply dotfiles
chezmoi init --apply https://github.com/phaestostech/phaestosdev-onprem-dotfiles.git

Chezmoi prompts for machine identity on first run:

• name: full name (default: Andru Manual-Che)
• email: email address (default: andru@phaestos.tech)
• isWork: work machine flag (enables Slack MCP servers, AWS configs)
• isServer: server flag (disables Obsidian, desktop apps)

Day-to-day usage

chezmoi update          # Pull latest and apply
chezmoi diff            # Preview changes before applying
chezmoi edit ~/.zshrc   # Edit source, then apply
chezmoi apply           # Apply without pulling

Documentation

See docs/ for detailed guides.