There's no place like ~

Managed with chezmoi

Secrets

Some templates reference secrets that are not committed to the repo.

On first chezmoi init, a scaffold file is automatically created at:

~/.local/share/chezmoi/.chezmoidata/secrets.toml

[secrets]
  tavily_api_key = ""

Fill in your secret values after init. This file is listed in .gitignore and will be picked up automatically by chezmoi as additional template data (accessible via .secrets.* in templates).

Dependency checks

Fresh-machine dependency checks are declared in:

~/.local/share/chezmoi/.chezmoidata/dependencies.toml

Chezmoi runs run_before_00-dependency-status.sh.tmpl on macOS/Linux before apply, and run_before_00-dependency-status.ps1.tmpl on Windows. The checks are throttled to once every 30 days on normal chezmoi apply, using ~/.cache/chezmoi/dependency-status.last-run. They are report-only by default, so missing tools do not block dotfile application.

Run checks any time on macOS/Linux with:

chezmoi-deps

or via zsh alias:

cmdeps

Install missing dependencies interactively with:

chezmoi-deps install

The installer prompts one dependency at a time and defaults to no.

Set CHEZMOI_DEPS_STRICT=1 to make missing required dependencies return a non-zero exit code. Set CHEZMOI_DEPS_FORCE=1 to bypass the 30-day throttle, or CHEZMOI_DEPS_INTERVAL_DAYS=<days> to change it.

Defaults are set by the checker scripts: CHEZMOI_DEPS_INTERVAL_DAYS=30, CHEZMOI_DEPS_FORCE=0, CHEZMOI_DEPS_VERBOSE_SKIP=0, CHEZMOI_DEPS_ASCII=0, CHEZMOI_DEPS_STRICT=0, and CHEZMOI_DEPS_STATE_FILE=${XDG_CACHE_HOME:-~/.cache}/chezmoi/dependency-status.last-run.

Private GitHub auth check

.chezmoi.toml.tmpl sets github_lpke_authenticated by running .chezmoitemplates/github-lpke-authenticated.sh. The script caches the result for 30 days by default at ${XDG_CACHE_HOME:-~/.cache}/chezmoi/github-lpke-authenticated.

Override with CHEZMOI_GITHUB_LPKE_AUTH_FORCE=1, CHEZMOI_GITHUB_LPKE_AUTH_INTERVAL_DAYS=<days>, or CHEZMOI_GITHUB_LPKE_AUTH_CACHE=<path>.