zsh/: source ~/.zshrc.local for per-machine secrets
~/.zshrc is managed and overwritten on every bootstrap, so there was nowhere to put a machine-local key. The managed rc now sources ~/.zshrc.local last (so it can override anything) and bootstrap never touches that file. zshrc.local.example documents the variables modules look for: GITEA_KEY, LITELLM_KEY, OP_SERVICE_ACCOUNT_TOKEN. Secrets stay out of the repo — zsh/zshrc is shared config applied to every box. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
@@ -33,3 +33,8 @@ HISTSIZE=10000
|
||||
SAVEHIST=10000
|
||||
setopt SHARE_HISTORY
|
||||
setopt HIST_IGNORE_DUPS
|
||||
|
||||
# Per-machine customizations (secrets, keys, local overrides) live in
|
||||
# ~/.zshrc.local, which bootstrap never touches. See zsh/zshrc.local.example
|
||||
# for the variables modules look for. Loaded last so it can override anything.
|
||||
[ -f "$HOME/.zshrc.local" ] && source "$HOME/.zshrc.local"
|
||||
|
||||
Reference in New Issue
Block a user