mirror of
https://github.com/ivuorinen/dotfiles.git
synced 2026-02-08 03:50:35 +00:00
Ismo Vuorinen
6d72003446
* fix(ci): replace broad permissions with specific scopes in workflows
Replace read-all/write-all with minimum required permission scopes
across all GitHub Actions workflows to follow the principle of least
privilege (SonarCloud rule githubactions:S8234).
* fix(shell): use [[ instead of [ for conditional tests
Replace single brackets with double brackets in bash conditional
expressions across 14 files (28 changes). All scripts use bash
shebangs so [[ is safe everywhere (SonarCloud rule shelldre:S7688).
* fix(shell): add explicit return statements to functions
Add return 0 as the last statement in ~46 shell functions across
17 files that previously relied on implicit return codes
(SonarCloud rule shelldre:S7682).
* fix(shell): assign positional parameters to local variables
Replace direct $1/$2/$3 usage with named local variables in _log(),
msg(), msg_err(), msg_done(), msg_run(), msg_ok(), and array_diff()
(SonarCloud rule shelldre:S7679).
* fix(python): replace dict() constructor with literal
Use {} instead of dict() for empty dictionary initialization
(SonarCloud rule python:S7498).
* fix(shell): fix husky shebang and tolerate npm outdated exit code
* docs(shell): add function docstring comments
* fix(shell): fix heredoc indentation in x-sonarcloud
* feat(python): add ruff linter and formatter configuration
* fix(ci): align megalinter config with biome, ruff, and shfmt settings
* fix(ci): disable black and yaml-prettier in megalinter config
* chore(ci): update ruff-pre-commit to v0.15.0 and fix hook name
* fix(scripts): check for .git dir before skipping clone in install-fonts
* fix(shell): address code review issues in scripts and shared.sh
- Guard wezterm show-keys failure in create-wezterm-keymaps.sh
- Stop masking git failures with return 0 in install-cheat-purebashbible.sh
- Add missing shared.sh source in install-xcode-cli-tools.sh
- Replace exit 1 with return 1 in sourced shared.sh
* fix(scripts): address code review and security findings
- Guard wezterm show-keys failure in create-wezterm-keymaps.sh
- Stop masking git failures with return 0 in install-cheat-purebashbible.sh
- Add missing shared.sh source in install-xcode-cli-tools.sh
- Replace exit 1 with return 1 in sourced shared.sh
- Remove shell=True subprocess calls in x-git-largest-files.py
* style(shell): apply shfmt formatting and add args to pre-commit hook
* fix(python): suppress bandit false positives in x-git-largest-files
* fix(python): add nosemgrep suppression for check_output call
* feat(format): add prettier for YAML formatting
Install prettier, add .prettierrc.json config (200-char width, 2-space
indent, LF endings), .prettierignore, yarn scripts (lint:prettier,
fix:prettier, format:yaml), and pre-commit hook scoped to YAML files.
* style(yaml): apply prettier formatting
* fix(scripts): address remaining code review findings
- Python: use list comprehension to filter empty strings instead of
slicing off the last element
- create-wezterm-keymaps: write to temp file and mv for atomic updates
- install-xcode-cli-tools: fix shellcheck source directive path
* fix(python): sort imports alphabetically in x-git-largest-files
* fix(lint): disable PYTHON_ISORT in MegaLinter, ruff handles it
* chore(git): add __pycache__ to gitignore
* fix(python): rename ambiguous variable l to line (E741)
* style: remove trailing whitespace and blank lines
* style(fzf): apply shfmt formatting
* style(shell): apply shfmt formatting
* docs(plans): add design documents
* style(docs): add language specifier to fenced code block
* feat(lint): add markdown-table-formatter to dev tooling
Add markdown-table-formatter as a dev dependency with yarn scripts
(lint:md-table, fix:md-table) and a local pre-commit hook to
automatically format markdown tables on commit.
345 lines
14 KiB
Bash
Executable File
345 lines
14 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -uo pipefail
|
|
# @description Sets macOS Defaults that I like
|
|
#
|
|
# This script contains large portions from following scripts:
|
|
# - https://github.com/freekmurze/dotfiles/blob/main/macos/set-defaults.sh
|
|
|
|
[[ "$(uname)" != "Darwin" ]] && echo "Not a macOS system" && exit 0
|
|
|
|
# shellcheck source=shared.sh
|
|
source "$DOTFILES/config/shared.sh"
|
|
|
|
msgr run "Starting to set macOS defaults, these require sudo privileges:"
|
|
|
|
# Ask for the administrator password upfront
|
|
sudo -v
|
|
|
|
# Keep-alive: update existing `sudo` time stamp
|
|
# until this script has finished
|
|
while true; do
|
|
sudo -n true
|
|
sleep 60
|
|
kill -0 "$$" || exit
|
|
done 2> /dev/null &
|
|
|
|
# Skip when shell is fish
|
|
if [[ $SHELL != "$(command -v fish)" ]]; then
|
|
msgr nested "Change user shell to zsh if it is available and not the current"
|
|
|
|
# Change user shell to zsh if not that already.
|
|
if hash zsh 2> /dev/null; then
|
|
[[ $SHELL != "$(command -v zsh)" ]] && chsh -s "$(command -v zsh)"
|
|
fi
|
|
fi
|
|
|
|
###############################################################################
|
|
# General UI/UX #
|
|
###############################################################################
|
|
|
|
msgr nested "Setting General UI/UX settings"
|
|
|
|
# Disable the sound effects on boot
|
|
sudo nvram SystemAudioVolume=" "
|
|
|
|
# Set sidebar icon size to small
|
|
defaults write NSGlobalDomain NSTableViewDefaultSizeMode -int 1
|
|
|
|
# Increase window resize speed for Cocoa applications
|
|
defaults write NSGlobalDomain NSWindowResizeTime -float 0.001
|
|
|
|
# Expand save panel by default
|
|
defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode -bool true
|
|
defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode2 -bool true
|
|
|
|
# Expand print panel by default
|
|
defaults write NSGlobalDomain PMPrintingExpandedStateForPrint -bool true
|
|
defaults write NSGlobalDomain PMPrintingExpandedStateForPrint2 -bool true
|
|
|
|
# Save to disk (not to iCloud) by default
|
|
defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false
|
|
|
|
# Automatically quit printer app once the print jobs complete
|
|
defaults write com.apple.print.PrintingPrefs "Quit When Finished" -bool true
|
|
|
|
# Disable the "Are you sure you want to open this application?" dialog
|
|
defaults write com.apple.LaunchServices LSQuarantine -bool false
|
|
|
|
# Disable Resume system-wide
|
|
defaults write NSGlobalDomain NSQuitAlwaysKeepsWindows -bool false
|
|
|
|
# Disable automatic termination of inactive apps
|
|
defaults write NSGlobalDomain NSDisableAutomaticTermination -bool true
|
|
|
|
# Disable the crash reporter
|
|
#defaults write com.apple.CrashReporter DialogType -string "none"
|
|
|
|
# Reveal IP address, hostname, OS version, etc. when clicking the clock
|
|
# in the login window
|
|
sudo defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo HostName
|
|
|
|
# Disable smart quotes as they're annoying when typing code
|
|
defaults write NSGlobalDomain NSAutomaticQuoteSubstitutionEnabled -bool false
|
|
|
|
# Disable smart dashes as they're annoying when typing code
|
|
defaults write NSGlobalDomain NSAutomaticDashSubstitutionEnabled -bool false
|
|
|
|
###############################################################################
|
|
# SSD-specific tweaks #
|
|
###############################################################################
|
|
|
|
msgr nested "Setting SSD-specific tweaks"
|
|
|
|
# Disable hibernation (speeds up entering sleep mode)
|
|
sudo pmset -a hibernatemode 0
|
|
|
|
# Disable the sudden motion sensor as it's not useful for SSDs
|
|
sudo pmset -a sms 0
|
|
|
|
###############################################################################
|
|
# Trackpad, mouse, keyboard, Bluetooth accessories, and input #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Trackpad, mouse, keyboard, Bluetooth accessories, and input"
|
|
|
|
# Increase sound quality for Bluetooth headphones/headsets
|
|
defaults write com.apple.BluetoothAudioAgent "Apple Bitpool Max (editable)" 80
|
|
defaults write com.apple.BluetoothAudioAgent "Apple Bitpool Min (editable)" 80
|
|
defaults write com.apple.BluetoothAudioAgent "Apple Initial Bitpool (editable)" 80
|
|
defaults write com.apple.BluetoothAudioAgent "Apple Initial Bitpool Min (editable)" 80
|
|
defaults write com.apple.BluetoothAudioAgent "Negotiated Bitpool" 80
|
|
defaults write com.apple.BluetoothAudioAgent "Negotiated Bitpool Max" 80
|
|
defaults write com.apple.BluetoothAudioAgent "Negotiated Bitpool Min" 80
|
|
|
|
# Enable full keyboard access for all controls
|
|
# (e.g. enable Tab in modal dialogs)
|
|
defaults write NSGlobalDomain AppleKeyboardUIMode -int 3
|
|
|
|
# Set language and text formats
|
|
# Note: if you're in the US, replace `EUR` with `USD`, `Centimeters` with
|
|
# `Inches`, `en_GB` with `en_US`, and `true` with `false`.
|
|
defaults write NSGlobalDomain AppleLanguages -array "en"
|
|
defaults write NSGlobalDomain AppleLocale -string "en_GB@currency=EUR"
|
|
defaults write NSGlobalDomain AppleMeasurementUnits -string "Centimeters"
|
|
defaults write NSGlobalDomain AppleMetricUnits -bool true
|
|
|
|
# Set the timezone; see `systemsetup -listtimezones` for other values
|
|
systemsetup -settimezone "Europe/Helsinki" > /dev/null
|
|
|
|
# Disable auto-correct
|
|
defaults write NSGlobalDomain NSAutomaticSpellingCorrectionEnabled -bool false
|
|
|
|
# Stop iTunes from responding to the keyboard media keys
|
|
launchctl unload -w /System/Library/LaunchAgents/com.apple.rcd.plist 2> /dev/null
|
|
|
|
###############################################################################
|
|
# Screen #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Screen"
|
|
|
|
# Require password immediately after sleep or screen saver begins
|
|
defaults write com.apple.screensaver askForPassword -int 1
|
|
defaults write com.apple.screensaver askForPasswordDelay -int 0
|
|
|
|
###############################################################################
|
|
# Finder #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Finder"
|
|
|
|
# Set Desktop as the default location for new Finder windows
|
|
# For other paths, use `PfLo` and `file:///full/path/here/`
|
|
defaults write com.apple.finder NewWindowTarget -string "PfDe"
|
|
defaults write com.apple.finder NewWindowTargetPath -string "file://${HOME}/"
|
|
|
|
# Show icons for external hard drives, servers, and removable media on the desktop
|
|
defaults write com.apple.finder ShowExternalHardDrivesOnDesktop -bool true
|
|
defaults write com.apple.finder ShowHardDrivesOnDesktop -bool false
|
|
defaults write com.apple.finder ShowMountedServersOnDesktop -bool true
|
|
defaults write com.apple.finder ShowRemovableMediaOnDesktop -bool true
|
|
|
|
# Finder: show all filename extensions
|
|
defaults write NSGlobalDomain AppleShowAllExtensions -bool true
|
|
|
|
# Finder: allow text selection in Quick Look
|
|
defaults write com.apple.finder QLEnableTextSelection -bool true
|
|
|
|
# Display full POSIX path as Finder window title
|
|
defaults write com.apple.finder _FXShowPosixPathInTitle -bool true
|
|
|
|
# When performing a search, search the current folder by default
|
|
defaults write com.apple.finder FXDefaultSearchScope -string "SCcf"
|
|
|
|
# Disable the warning when changing a file extension
|
|
defaults write com.apple.finder FXEnableExtensionChangeWarning -bool false
|
|
|
|
# Avoid creating .DS_Store files on network volumes
|
|
defaults write com.apple.desktopservices DSDontWriteNetworkStores -bool true
|
|
|
|
# Disable disk image verification
|
|
defaults write com.apple.frameworks.diskimages skip-verify -bool true
|
|
defaults write com.apple.frameworks.diskimages skip-verify-locked -bool true
|
|
defaults write com.apple.frameworks.diskimages skip-verify-remote -bool true
|
|
|
|
# Use list view in all Finder windows by default
|
|
# Four-letter codes for the other view modes: `icnv`, `clmv`, `Flwv`
|
|
defaults write com.apple.finder FXPreferredViewStyle -string "icnv"
|
|
|
|
# Disable the warning before emptying the Trash
|
|
defaults write com.apple.finder WarnOnEmptyTrash -bool false
|
|
|
|
# Show the ~/Library folder
|
|
# chflags nohidden ~/Library
|
|
|
|
# Show the ~/Users folder
|
|
# chflags nohidden /Users
|
|
|
|
# Expand the following File Info panes:
|
|
# "General", "Open with", and "Sharing & Permissions"
|
|
defaults write com.apple.finder FXInfoPanesExpanded -dict \
|
|
General -bool true \
|
|
OpenWith -bool true \
|
|
Privileges -bool true
|
|
|
|
# Move windows by dragging any part of the window
|
|
# From https://nikitabobko.github.io/AeroSpace/goodies
|
|
defaults write -g NSWindowShouldDragOnGesture -bool true
|
|
|
|
###############################################################################
|
|
# Screenshots #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Screenshots"
|
|
|
|
# Set default screenshot location
|
|
mkdir -p "$HOME/Documents/Screenshots"
|
|
defaults write com.apple.screencapture "location" -string "$HOME/Documents/Screenshots"
|
|
|
|
# Exclude date and time in screenshot filenames
|
|
defaults write com.apple.screencapture "include-date" -bool true
|
|
|
|
# Change the default screenshot file name
|
|
defaults write com.apple.screencapture "name" -string "screenshot"
|
|
|
|
###############################################################################
|
|
# Dock, Dashboard, and hot corners #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Dock, Dashboard, and hot corners"
|
|
|
|
# Prevent applications from bouncing in Dock
|
|
defaults write com.apple.dock no-bouncing -bool true
|
|
|
|
# Set the icon size of Dock items to 30 pixels
|
|
defaults write com.apple.dock tilesize -int 30
|
|
|
|
# Hide indicator lights for open applications in the Dock
|
|
defaults write com.apple.dock show-process-indicators -bool true
|
|
|
|
# Wipe all (default) app icons from the Dock
|
|
# This is only really useful when setting up a new Mac, or if you don't use
|
|
# the Dock to launch apps.
|
|
# defaults write com.apple.dock persistent-apps -array ""
|
|
|
|
# Disable Dashboard
|
|
defaults write com.apple.dashboard mcx-disabled -bool true
|
|
|
|
# Don't show Dashboard as a Space
|
|
defaults write com.apple.dock dashboard-in-overlay -bool true
|
|
|
|
# Don't automatically rearrange Spaces based on most recent use
|
|
defaults write com.apple.dock mru-spaces -bool false
|
|
|
|
# Make Dock icons of hidden applications translucent
|
|
defaults write com.apple.dock showhidden -bool true
|
|
|
|
###############################################################################
|
|
# Safari & WebKit #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Safari & WebKit"
|
|
|
|
# Enable Safari's debug menu
|
|
defaults write com.apple.Safari IncludeInternalDebugMenu -bool true
|
|
|
|
# Enable the Develop menu and the Web Inspector in Safari
|
|
defaults write com.apple.Safari IncludeDevelopMenu -bool true
|
|
defaults write com.apple.Safari \
|
|
WebKitDeveloperExtrasEnabledPreferenceKey -bool true
|
|
defaults write com.apple.Safari \
|
|
com.apple.Safari.ContentPageGroupIdentifier.WebKit2DeveloperExtrasEnabled \
|
|
-bool true
|
|
|
|
# Don't display the annoying prompt when quitting iTerm
|
|
defaults write com.googlecode.iterm2 PromptOnQuit -bool false
|
|
# Use iTerm2 preferences from the .dotfiles folder.
|
|
defaults write com.googlecode.iterm2 PrefsCustomFolder \
|
|
-string "$HOME/.dotfiles/config/iterm2"
|
|
|
|
# Prevent Time Machine from prompting to use new hard drives as backup volume
|
|
defaults write com.apple.TimeMachine DoNotOfferNewDisksForBackup -bool true
|
|
|
|
###############################################################################
|
|
# Activity Monitor #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for ActivityMonitor"
|
|
|
|
# Show the main window when launching Activity Monitor
|
|
defaults write com.apple.ActivityMonitor OpenMainWindow -bool true
|
|
|
|
# Visualize CPU usage in the Activity Monitor Dock icon
|
|
defaults write com.apple.ActivityMonitor IconType -int 5
|
|
|
|
# Show all processes in Activity Monitor
|
|
defaults write com.apple.ActivityMonitor ShowCategory -int 0
|
|
|
|
# Sort Activity Monitor results by CPU usage
|
|
defaults write com.apple.ActivityMonitor SortColumn -string "CPUUsage"
|
|
defaults write com.apple.ActivityMonitor SortDirection -int 0
|
|
|
|
###############################################################################
|
|
# Address Book, Dashboard, iCal, TextEdit, and Disk Utility #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Address Book, Dashboard, iCal, TextEdit, and Disk Utility"
|
|
|
|
# Use plain text mode for new TextEdit documents
|
|
defaults write com.apple.TextEdit RichText -int 0
|
|
|
|
# Open and save files as UTF-8 in TextEdit
|
|
defaults write com.apple.TextEdit PlainTextEncoding -int 4
|
|
defaults write com.apple.TextEdit PlainTextEncodingForWrite -int 4
|
|
|
|
###############################################################################
|
|
# Messages #
|
|
###############################################################################
|
|
|
|
msgr nested "Settings for Messages"
|
|
|
|
# Disable smart quotes as it's annoying for messages that contain code
|
|
defaults write com.apple.messageshelper.MessageController \
|
|
SOInputLineSettings \
|
|
-dict-add "automaticQuoteSubstitutionEnabled" \
|
|
-bool false
|
|
|
|
# Disable continuous spell checking
|
|
defaults write com.apple.messageshelper.MessageController \
|
|
SOInputLineSettings \
|
|
-dict-add "continuousSpellCheckingEnabled" \
|
|
-bool false
|
|
|
|
msgr nested "Restarting applications to apply changes"
|
|
|
|
###############################################################################
|
|
# Kill affected applications #
|
|
###############################################################################
|
|
|
|
for app in "Activity Monitor" "Address Book" "Calendar" "Contacts" "cfprefsd" \
|
|
"Dock" "Finder" "Mail" "Messages" "Safari" "SizeUp" "SystemUIServer"; do
|
|
killall "${app}" > /dev/null 2>&1
|
|
done
|
|
|
|
msgr yay "Done. Note that some of these changes require a logout/restart to take effect."
|