README.md

Dotfiles managed with Chezmoi + Bitwarden

This repository contains my configuration files (dotfiles) used in my Linux environment.
All configuration is managed by Chezmoi, with sensitive data loaded via Bitwarden CLI.

Prerequisites

• Chezmoi installed
• Bitwarden CLI (bw) configured and logged in
• pre-commit and gitleaks installed

Installation

You can fork this project to create your own set of configurations.
After that, install Chezmoi and initialize it like this:

chezmoi init --apply joaofelipegalvao

During initialization, you'll be prompted for information that will be saved in:

cat ~/.config/chezmoi/chezmoi.toml

All tracked templates and files are located here:

ls ~/.local/share/chezmoi

The idea is that Chezmoi uses templates like dot_config/git/config.tmpl, merging them with data from chezmoi.toml, ultimately generating the actual file in the correct location, such as:

~/.config/git/config

After initializing, activate the pre-commit hook:

chezmoi cd
pre-commit install

Editing your templates

Always remember to edit the templates, never the generated files.

Chezmoi provides useful tools:

chezmoi cd  # enters the main dotfiles directory
chezmoi edit ~/.config/zsh/.zshrc  # opens the corresponding template in your editor

Adding new dotfiles

If you create a new configuration file — for example, you started using Tmux or Yazi — add it like this:

chezmoi add --autotemplate ~/.config/yazi/yazi.toml

The --autotemplate flag makes Chezmoi automatically identify parts that should become template variables.

Working with sensitive data (Bitwarden)

Sensitive information that should not go to GitHub must be stored via Bitwarden.

Example template using Bitwarden CLI:

{{- $item := bitwarden "item" "<bitwarden-item-uuid>" -}}
{{- if not $item -}}
{{-   fail "Bitwarden item not found" -}}
{{- end -}}
export MY_API_KEY="{{ $item.login.password }}"

To view all data being used by Chezmoi:

chezmoi data

Security

This repository uses gitleaks as a pre-commit hook to automatically scan for secrets before every commit. If a secret is detected, the commit is blocked.

The hook runs automatically after pre-commit install. To update gitleaks to the latest version:

pre-commit autoupdate

To scan the full git history for any leaked secrets:

gitleaks detect --log-opts="--all"

Updating your environment

Whenever you change a template or data file:

chezmoi apply

To pull updates from the remote repository:

chezmoi update

Syncing system changes back to chezmoi

If you edit files directly in ~/.config/ (outside chezmoi), sync them back with:

chezmoi re-add

This updates ~/.local/share/chezmoi with the current state of your system files.

Saving changes to the repository

After updating your dotfiles:

chezmoi cd
git add .
git commit -m "Update dotfiles"
git push

Repository structure

dot_config/
├── git/          # Git configuration
├── mise/         # Runtime version manager
├── nvim/         # Neovim (LazyVim)
├── tmux/         # Terminal multiplexer
├── yazi/         # File manager
└── zsh/          # Shell and prompt

Each directory automatically maps to ~/.config/* when Chezmoi applies the changes.

About

Repository containing my configuration files managed with Chezmoi and Bitwarden.