audit + modernize dotfiles

.editorconfig

@@ -0,0 +1,28 @@
+# For more information about the configurations used
+# in this file, please see the EditorConfig documentation.
+#
+# https://editorconfig.org
+
+root = true
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+[*]
+
+charset = utf-8
+indent_size = 4
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.{json,md,yml,yaml}]
+
+indent_size = 2
+
+[Makefile]
+
+indent_style = tab
+
+[*.{conf,vim,vimrc}]
+
+indent_size = 4

.github/CODEOWNERS

@@ -1 +1 @@
-*   @lukasjuhas
+*   @lukasjuhas

.github/workflows/check_links.yml

@@ -1,22 +1,24 @@
-# For more information about the configurations used
-# in this file, please see the GitHub Actions documentation.
+# Weekly link-check of every Markdown file in the repo.
 #
 # https://docs.github.com/en/actions
 
-# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+name: Check links
+
+on:
+  schedule:
+    - cron: "0 0 * * SAT"
+  workflow_dispatch:
+
+permissions:
+  contents: read
 
 jobs:
   ubuntu:
+    name: Link check
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
 
-      - name: Check links from Markdown file
+      - name: Check links from Markdown files
         run: ./scripts/check_links/markdown.sh
-
-name: Check links
-
-on:
-  schedule:
-    - cron: "0 0 * * SAT"

.github/workflows/macos.yml

@@ -1,12 +1,20 @@
-# For more information about the configurations used
-# in this file, please see the GitHub Actions documentation.
+# Lint the dotfiles on every push and PR.
 #
 # https://docs.github.com/en/actions
 
-# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+name: macOS
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+permissions:
+  contents: read
 
 jobs:
-  macOS:
+  lint:
+    name: Lint
     runs-on: macos-latest
     steps:
       - name: Checkout repository
@@ -20,10 +28,3 @@ jobs:
 
       - name: Lint Markdown files
         run: ./scripts/lint/markdown.sh
-
-      - name: Check links from Markdown file
-        run: ./scripts/check_links/markdown.sh
-
-name: macOS
-
-on: push

Brewfile

@@ -0,0 +1,191 @@
+# Declarative Homebrew install list. Applied via `brew bundle` from
+# `src/os/installs/macos/brewfile.sh`.
+#
+# To check current state vs. this file:    brew bundle check --file=Brewfile
+# To install everything missing:           brew bundle --file=Brewfile
+# To regenerate from installed packages:   brew bundle dump --file=Brewfile --force
+#
+# https://github.com/Homebrew/homebrew-bundle
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Shell & terminal
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "bash"
+brew "bash-completion@2"
+brew "tmux"
+brew "zellij"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Modern CLI quality-of-life
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "bat"
+brew "direnv"
+brew "eza"
+brew "fd"
+brew "fzf"
+brew "git-delta"
+brew "mole"      # https://github.com/tw93/Mole — Mac cleanup
+brew "ripgrep"
+brew "tree"
+brew "zoxide"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Dev workflow
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "gh"
+brew "git"
+brew "just"
+brew "lazygit"
+brew "shellcheck"
+brew "vim"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Security & signing
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "gnupg"
+brew "pinentry-mac"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Languages, runtimes & package managers
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "cocoapods"
+brew "composer"
+brew "php"
+brew "php-cs-fixer"
+brew "pipx"
+brew "pnpm"
+brew "python@3.13"
+brew "ruff"
+brew "watchman"
+brew "yarn"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Cloud & infrastructure
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "awscli"
+brew "terraform"
+brew "tflint"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Databases
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "mysql", restart_service: :changed
+brew "redis", restart_service: :changed
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Media tooling
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "ffmpeg"
+brew "imagemagick"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Compression & web font tools
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "brotli"
+brew "zopfli"
+tap "bramstein/webfonttools"
+brew "bramstein/webfonttools/sfnt2woff"
+brew "bramstein/webfonttools/sfnt2woff-zopfli"
+brew "bramstein/webfonttools/woff2"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Mac App Store CLI
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+brew "mas"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Editors & dev tooling (casks)
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "cursor"
+cask "visual-studio-code"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Browsers
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "google-chrome"
+cask "firefox"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Containers & databases (UI)
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "docker-desktop"
+cask "tableplus"
+cask "mongodb-compass"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# API / network tools
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "postman"
+cask "insomnia"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# AI assistants
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "claude"
+cask "chatgpt"
+cask "block-goose"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Productivity & menubar
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "raycast"
+cask "rectangle"
+cask "jordanbaird-ice"
+cask "meetingbar"
+cask "granola"
+cask "linear-linear"
+cask "kap"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Utilities
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "the-unarchiver"
+cask "1password"
+cask "flux"
+cask "protonvpn"
+cask "proton-mail-bridge"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Communication
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "slack"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Media
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "spotify"
+cask "sonos"
+cask "vlc"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Fonts
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+cask "font-fira-code"
+
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+# Mac App Store apps
+# - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
+
+mas "Things 3",    id: 904280696
+mas "Amphetamine", id: 937984704
+mas "LittleIpsum", id: 405772121

LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lukas Juhas
+
+Permission is hereby granted, free of charge, to any person obtaining a
+copy of this software and associated documentation files (the "Software"),
+to deal in the Software without restriction, including without limitation
+the rights to use, copy, modify, merge, publish, distribute, sublicense,
+and/or sell copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
+THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.