Configmesh – E2E encrypted sync for macOS app configs and dotfiles
E2EE dotfile sync for Mac, but Synology, 1Password, and free git repos already handle this.
etcdotica is a lightweight tool that syncs selected system configuration files with a Git repository using a file-level overlay model. The repo is the source of truth, tracked files are mirrored directly to their native paths, and local edits can be collected back automatically.
Treats your repo as a literal shadow of the filesystem and manages individual files (copy, prune, collect) rather than trying to be a full config framework. Notable bits: bidirectional 'collect' mode, section-based inserts for parts of big system files, a local state file to safely prune deletions, and flock-based concurrency handling — nice attention to messy real-world workflows. It's not reinventing the wheel in a crowded dotfile space, but it's a pragmatic, carefully thought-out approach that an ops person will reach for.
Developers, sysadmins, dotfiles maintainers and power users who manage machine configuration across systems
I built a small tool called etcdotica in Golang for keeping dotfiles and small system configs in sync with a Git or other VCS repository that mirrors your machine's filesystem layout.
I was not happy with many existing tools in that space.
The idea is simple: your repo looks like your system. A file at home/.bashrc maps to ~/.bashrc, while root/etc/... maps under /etc. Running the tool applies changes from the repo to the machine, and optionally collects newer edits made directly on the machine back into the repo. Deleting a file in the repo prunes it from the destination, so the state converges instead of drifting.
What it does:
* Syncs files from a source tree to a destination directory
* Collect mode to pull newer destination edits back into the repo
* Prunes removed files using a tracked state file
* Managed "sections" that insert named blocks into existing files instead of replacing them
* Watch mode to apply changes continuously, suitable for a user systemd service
* Safe concurrent runs via file locking
* Permission control: subtract bits with umask, add bits with a simple flag to enable world readability
* Automatic executable bits for selected directories like bin/
* Follows source symlinks, follows destination symlinks to folders, but replaces destination symlinked files with real files
The sections feature is particularly useful for shared files such as fstab or hosts. You can keep portable snippets in the repo, and they get merged into the target file, with the ability to later update or remove them as the source file gets updated or removed.
I wanted something light with predictable behavior.
A typical workflow is to clone the repo (for example ~/.dotfiles), run the tool once for user files, once with sudo for system files, and optionally keep a watch service running so edits in the repo materialize on the machine.
I'd love feedback on the idea.
E2EE dotfile sync for Mac, but Synology, 1Password, and free git repos already handle this.
Config sync via Git for Claude Code, but dotfiles already solve this generically.
Git hooks that snapshot your Postgres DB on every branch switch.
Automates worktree setup that everyone reinvents; but worktree adoption is still niche.
npm install for agent skills that copies prompts into Claude, Cursor, and Gemini instantly.
Rust WASM bindings enforce type safety for age-encrypted secrets in the browser.