diff --git a/README.md b/README.md
index 23186a0..02fb8c7 100644
--- a/README.md
+++ b/README.md
@@ -4,20 +4,18 @@
-Secure Fedora Server setup with LUKS encryption, TPM, and BTRFS RAID1 for (Hetzner) Dedicated Servers.
-
-> [!NOTE]
-> This project is still WIP, having some issues with networking of the installeer / installed instance.
+Secure AlmaLinux Server setup with LUKS encryption, TPM, and mdadm RAID1 for Hetzner Dedicated Servers.
## Features
-- Fedora Server base
-- Full disk encryption with LUKS
+- AlmaLinux Server base
+- Full disk encryption with LUKS (native Hetzner support)
- Remote unlock via Tang server
- TPM-based boot verification
-- BTRFS RAID1 for data redundancy
-- Dedicated database subvolume with `nodatacow` and `noatime`
+- mdadm RAID1 + XFS (RHEL standard)
- SSH key-only access with early boot SSH via dropbear
+- Automated provisioning using Hetzner installimage
+- Modern development environment with dotfiles
If you need a dead man's switch to go along with it check out [raven](https://git.dominik-roth.eu/dodox/raven).
@@ -34,68 +32,86 @@ The system uses multiple methods to unlock the LUKS volumes:
- Uses dropbear for early SSH access
- Can be used for recovery or maintenance
-### TPM Updates
-After firmware updates (UEFI/BIOS), the TPM bindings need to be updated:
-(otherwise the system will not be able to boot without recovery phrase)
-1. Use the provided script: `sudo /root/update-tpm-bindings.py`
-2. The script will:
- - Show current PCR values
- - Update TPM bindings to match new measurements
- - Verify all bindings are correct
-3. Manual passphrase is available in `/root/luks-passphrase.txt` if needed
+### Unlock Strategy
+The system supports multiple unlock methods:
+1. **Manual unlock via SSH** (default):
+ - SSH to server on port 22 (dropbear in early boot)
+ - Enter LUKS passphrase when prompted (twice, once per disk)
+ - System continues normal boot
+2. **Automatic unlock** (optional):
+ - Configure TPM2 and/or Tang servers in post-install.sh
+ - System unlocks automatically if conditions are met
+ - Falls back to manual unlock if automatic fails
-## Setup
+## Quick Install
-1. **Configure Installer**
+Boot your Hetzner server into rescue mode and run:
+
+```bash
+wget -qO- https://git.dominik-roth.eu/dodox/nullpoint/raw/branch/master/install.sh | bash
+```
+
+The installer will:
+- Detect your SSH key from the current session
+- Ask for hostname and username
+- Generate a secure LUKS passphrase (SAVE IT!)
+- Download and configure everything
+- Run Hetzner's installimage automatically
+
+## Manual Setup
+
+If you prefer to configure manually:
+
+1. **Boot into Hetzner Rescue Mode**
+ - Log into Hetzner Robot
+ - Select your server → Rescue tab
+ - Choose "Linux 64 bit" and activate
+ - SSH into rescue system
+
+2. **Download Configuration**
```bash
- # Edit the variables at the top of install.sh:
- vim install.sh
+ git clone https://git.dominik-roth.eu/dodox/nullpoint.git
+ cd nullpoint
```
- Set your:
- - Tang server URLs and thumbprints
- - TPM PCR settings
- - Fedora version
- - SSH public key for the default user
-2. **Install on Hetzner Server**
- - Log into Hetzner Robot
- - Select your server
- - Go to "Rescue" tab
- - Choose "Linux" and "64 bit"
- - Activate Rescue System
- - Upload the installer:
- ```bash
- scp install.sh root@your-server:/root/
- ```
- - SSH into Rescue System:
- ```bash
- ssh root@your-server
- ```
- - Make it executable and run:
- ```bash
- chmod +x install.sh
- ./install.sh
- ```
- - If the script tells you that no TPM is available, you'll need to make a support ticket to get KVM access and enable TPM in the BIOS.
- - The script will:
- - Generate and display a LUKS passphrase (save this!)
- - Download and prepare the Fedora installer
- - Configure networking for Hetzner's unusual setup
- - Start the Fedora installer
- - You can monitor the installation via SSH on port 2222:
- ```bash
- ssh -p 2222 root@your-server
- ```
- - During the Fedora installation:
- - Disk encryption and RAID will be configured
- - TPM and Tang bindings will be set up
- - Network configuration will be applied
+3. **Configure**
+ - Edit `install.conf` and change `CRYPTPASSWORD`
+ - Edit `post-install.sh` and set your SSH key (REQUIRED!)
+ - Optionally configure Tang servers and TPM settings
-3. **Verify Installation**
+4. **Install**
+ ```bash
+ installimage -a -c install.conf -s post-install.sh
+ ```
+
+## What Gets Installed
+
+Hetzner installimage will:
+- Set up mdadm RAID1 across both drives
+- Create LUKS encryption with your passphrase
+- Install AlmaLinux with XFS filesystem
+- Single root partition (no LVM complexity)
+
+post-install.sh will configure:
+- User account with SSH key and zsh shell
+- oh-my-zsh with powerlevel10k theme
+- Dotfiles (zsh, tmux, p10k configs)
+- Clevis for TPM/Tang unlock (if configured)
+- Dropbear for remote unlock
+- Modern CLI tools (lsd, bat, neovim)
+- Security hardening (SELinux, SSH)
+
+## Post-Installation
+
+1. **First Boot**
+ - Enter LUKS passphrase twice (once per disk)
+ - System will boot into AlmaLinux
+
+2. **Verify Installation**
```bash
ssh null@your-server
systemctl status clevis-luks-askpass
lsblk
- btrfs filesystem show # Check RAID1 status
- clevis-luks-list -d /dev/sda3 # Note: sda3 is the LUKS partition
+ cat /proc/mdstat # Check RAID1 status
+ df -h # Check filesystem
```
\ No newline at end of file
diff --git a/dotfiles/.p10k.zsh b/dotfiles/.p10k.zsh
new file mode 100644
index 0000000..8feb31e
--- /dev/null
+++ b/dotfiles/.p10k.zsh
@@ -0,0 +1,271 @@
+'builtin' 'local' '-a' 'p10k_config_opts'
+[[ ! -o 'aliases' ]] || p10k_config_opts+=('aliases')
+[[ ! -o 'sh_glob' ]] || p10k_config_opts+=('sh_glob')
+[[ ! -o 'no_brace_expand' ]] || p10k_config_opts+=('no_brace_expand')
+'builtin' 'setopt' 'no_aliases' 'no_sh_glob' 'brace_expand'
+() {
+ emulate -L zsh
+ setopt no_unset extended_glob
+ unset -m 'POWERLEVEL9K_*'
+ autoload -Uz is-at-least && is-at-least 5.1 || return
+ zmodload zsh/langinfo
+ if [[ ${langinfo[CODESET]:-} != (utf|UTF)(-|)8 ]]; then
+ local LC_ALL=${${(@M)$(locale -a):#*.(utf|UTF)(-|)8}[1]:-en_US.UTF-8}
+ fi
+ typeset -g POWERLEVEL9K_LEFT_PROMPT_ELEMENTS=(
+ context
+ dir
+ vcs
+ )
+ typeset -g POWERLEVEL9K_RIGHT_PROMPT_ELEMENTS=(
+ background_jobs
+ direnv
+ virtualenv
+ pyenv
+ disk_usage
+ )
+ typeset -g POWERLEVEL9K_VISUAL_IDENTIFIER_EXPANSION='${P9K_VISUAL_IDENTIFIER// }'
+ typeset -g POWERLEVEL9K_MODE=nerdfont-complete
+ typeset -g POWERLEVEL9K_ICON_BEFORE_CONTENT=
+ typeset -g POWERLEVEL9K_PROMPT_ADD_NEWLINE=false
+ typeset -g POWERLEVEL9K_MULTILINE_FIRST_PROMPT_PREFIX='%242F╭─'
+ typeset -g POWERLEVEL9K_MULTILINE_NEWLINE_PROMPT_PREFIX='%242F├─'
+ typeset -g POWERLEVEL9K_MULTILINE_LAST_PROMPT_PREFIX='%242F╰─'
+ typeset -g POWERLEVEL9K_MULTILINE_FIRST_PROMPT_SUFFIX='%242F─╮'
+ typeset -g POWERLEVEL9K_MULTILINE_NEWLINE_PROMPT_SUFFIX='%242F─┤'
+ typeset -g POWERLEVEL9K_MULTILINE_LAST_PROMPT_SUFFIX='%242F─╯'
+ typeset -g POWERLEVEL9K_MULTILINE_FIRST_PROMPT_GAP_CHAR=' '
+ typeset -g POWERLEVEL9K_MULTILINE_FIRST_PROMPT_GAP_BACKGROUND=
+ if [[ $POWERLEVEL9K_MULTILINE_FIRST_PROMPT_GAP_CHAR != ' ' ]]; then
+ typeset -g POWERLEVEL9K_MULTILINE_FIRST_PROMPT_GAP_FOREGROUND=242
+ typeset -g POWERLEVEL9K_EMPTY_LINE_LEFT_PROMPT_FIRST_SEGMENT_END_SYMBOL='%{%}'
+ typeset -g POWERLEVEL9K_EMPTY_LINE_RIGHT_PROMPT_FIRST_SEGMENT_START_SYMBOL='%{%}'
+ fi
+ typeset -g POWERLEVEL9K_LEFT_SUBSEGMENT_SEPARATOR='\uE0B1'
+ typeset -g POWERLEVEL9K_RIGHT_SUBSEGMENT_SEPARATOR='\uE0B3'
+ typeset -g POWERLEVEL9K_LEFT_SEGMENT_SEPARATOR='\uE0B0'
+ typeset -g POWERLEVEL9K_RIGHT_SEGMENT_SEPARATOR='\uE0B2'
+ typeset -g POWERLEVEL9K_LEFT_PROMPT_LAST_SEGMENT_END_SYMBOL='\uE0B0'
+ typeset -g POWERLEVEL9K_RIGHT_PROMPT_FIRST_SEGMENT_START_SYMBOL='\uE0B2'
+ typeset -g POWERLEVEL9K_LEFT_PROMPT_FIRST_SEGMENT_START_SYMBOL=''
+ typeset -g POWERLEVEL9K_RIGHT_PROMPT_LAST_SEGMENT_END_SYMBOL=''
+ typeset -g POWERLEVEL9K_EMPTY_LINE_LEFT_PROMPT_LAST_SEGMENT_END_SYMBOL=
+ typeset -g POWERLEVEL9K_OS_ICON_FOREGROUND=232
+ typeset -g POWERLEVEL9K_OS_ICON_BACKGROUND=7
+ typeset -g POWERLEVEL9K_OS_ICON_CONTENT_EXPANSION='%B${P9K_CONTENT// }'
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_BACKGROUND=
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_OK_{VIINS,VICMD,VIVIS,VIOWR}_FOREGROUND=76
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_ERROR_{VIINS,VICMD,VIVIS,VIOWR}_FOREGROUND=196
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_{OK,ERROR}_VIINS_CONTENT_EXPANSION=' '
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_{OK,ERROR}_VICMD_CONTENT_EXPANSION=' '
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_{OK,ERROR}_VIVIS_CONTENT_EXPANSION=' '
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_{OK,ERROR}_VIOWR_CONTENT_EXPANSION=' '
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_OVERWRITE_STATE=true
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_LEFT_PROMPT_LAST_SEGMENT_END_SYMBOL=
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_LEFT_PROMPT_FIRST_SEGMENT_START_SYMBOL=
+ typeset -g POWERLEVEL9K_PROMPT_CHAR_LEFT_{LEFT,RIGHT}_WHITESPACE=
+ typeset -g POWERLEVEL9K_DIR_BACKGROUND=234
+ typeset -g POWERLEVEL9K_DIR_FOREGROUND=39
+ typeset -g POWERLEVEL9K_SHORTEN_STRATEGY=truncate_to_unique
+ typeset -g POWERLEVEL9K_SHORTEN_DELIMITER=
+ typeset -g POWERLEVEL9K_DIR_SHORTENED_FOREGROUND=103
+ typeset -g POWERLEVEL9K_DIR_ANCHOR_FOREGROUND=39
+ typeset -g POWERLEVEL9K_DIR_ANCHOR_BOLD=false
+ local anchor_files=(
+ .bzr
+ .citc
+ .git
+ .hg
+ .node-version
+ .python-version
+ .ruby-version
+ .shorten_folder_marker
+ .svn
+ .terraform
+ CVS
+ Cargo.toml
+ composer.json
+ go.mod
+ package.json
+ )
+ typeset -g POWERLEVEL9K_SHORTEN_FOLDER_MARKER="(${(j:|:)anchor_files})"
+ typeset -g POWERLEVEL9K_SHORTEN_DIR_LENGTH=1
+ typeset -g POWERLEVEL9K_DIR_MAX_LENGTH=80
+ typeset -g POWERLEVEL9K_DIR_MIN_COMMAND_COLUMNS=40
+ typeset -g POWERLEVEL9K_DIR_MIN_COMMAND_COLUMNS_PCT=50
+ typeset -g POWERLEVEL9K_DIR_HYPERLINK=false
+ typeset -g POWERLEVEL9K_DIR_SHOW_WRITABLE=true
+ typeset -g POWERLEVEL9K_DIR_CLASSES=()
+ typeset -g POWERLEVEL9K_VCS_CLEAN_FOREGROUND=10
+ typeset -g POWERLEVEL9K_VCS_CLEAN_BACKGROUND=235
+ typeset -g POWERLEVEL9K_VCS_MODIFIED_FOREGROUND=10
+ typeset -g POWERLEVEL9K_VCS_MODIFIED_BACKGROUND=235
+ typeset -g POWERLEVEL9K_VCS_UNTRACKED_FOREGROUND=10
+ typeset -g POWERLEVEL9K_VCS_UNTRACKED_BACKGROUND=235
+ typeset -g POWERLEVEL9K_VCS_CONFLICTED_FOREGROUND=9
+ typeset -g POWERLEVEL9K_VCS_CONFLICTED_BACKGROUND=235
+ typeset -g POWERLEVEL9K_VCS_LOADING_FOREGROUND=15
+ typeset -g POWERLEVEL9K_VCS_LOADING_BACKGROUND=255
+ typeset -g POWERLEVEL9K_VCS_BRANCH_ICON='\uF126 '
+ POWERLEVEL9K_VCS_BRANCH_ICON=${(g::)POWERLEVEL9K_VCS_BRANCH_ICON}
+ typeset -g POWERLEVEL9K_VCS_UNTRACKED_ICON='?'
+ POWERLEVEL9K_VCS_UNTRACKED_ICON=${(g::)POWERLEVEL9K_VCS_UNTRACKED_ICON}
+ function my_git_formatter() {
+ emulate -L zsh
+ if [[ -n $P9K_CONTENT ]]; then
+ typeset -g my_git_format=$P9K_CONTENT
+ return
+ fi
+ local meta=''
+ local clean=''
+ local modified=''
+ local untracked=''
+ local conflicted=''
+ local res
+ local where
+ if [[ -n $VCS_STATUS_LOCAL_BRANCH ]]; then
+ res+="${clean}${POWERLEVEL9K_VCS_BRANCH_ICON}"
+ where=${(V)VCS_STATUS_LOCAL_BRANCH}
+ elif [[ -n $VCS_STATUS_TAG ]]; then
+ res+="${meta}#"
+ where=${(V)VCS_STATUS_TAG}
+ fi
+ (( $#where > 32 )) && where[13,-13]="…"
+ res+="${clean}${where//\%/%%}"
+ [[ -z $where ]] && res+="${meta}@${clean}${VCS_STATUS_COMMIT[1,8]}"
+ if [[ -n ${VCS_STATUS_REMOTE_BRANCH:#$VCS_STATUS_LOCAL_BRANCH} ]]; then
+ res+="${meta}:${clean}${(V)VCS_STATUS_REMOTE_BRANCH//\%/%%}"
+ fi
+ (( VCS_STATUS_COMMITS_BEHIND )) && res+=" ${clean}⇣${VCS_STATUS_COMMITS_BEHIND}"
+ (( VCS_STATUS_COMMITS_AHEAD && !VCS_STATUS_COMMITS_BEHIND )) && res+=" "
+ (( VCS_STATUS_COMMITS_AHEAD )) && res+="${clean}⇡${VCS_STATUS_COMMITS_AHEAD}"
+ (( VCS_STATUS_STASHES )) && res+=" ${clean}*${VCS_STATUS_STASHES}"
+ [[ -n $VCS_STATUS_ACTION ]] && res+=" ${conflicted}${VCS_STATUS_ACTION}"
+ (( VCS_STATUS_NUM_CONFLICTED )) && res+=" ${conflicted}~${VCS_STATUS_NUM_CONFLICTED}"
+ (( VCS_STATUS_NUM_STAGED )) && res+=" ${modified}+${VCS_STATUS_NUM_STAGED}"
+ (( VCS_STATUS_NUM_UNSTAGED )) && res+=" ${modified}!${VCS_STATUS_NUM_UNSTAGED}"
+ (( VCS_STATUS_NUM_UNTRACKED )) && res+=" ${untracked}${POWERLEVEL9K_VCS_UNTRACKED_ICON}${VCS_STATUS_NUM_UNTRACKED}"
+ typeset -g my_git_format=$res
+ }
+ functions -M my_git_formatter 2>/dev/null
+ typeset -g POWERLEVEL9K_VCS_DISABLE_GITSTATUS_FORMATTING=true
+ typeset -g POWERLEVEL9K_VCS_CONTENT_EXPANSION='${$((my_git_formatter()))+${my_git_format}}'
+ typeset -g POWERLEVEL9K_VCS_{STAGED,UNSTAGED,UNTRACKED,CONFLICTED,COMMITS_AHEAD,COMMITS_BEHIND}_MAX_NUM=-1
+ typeset -g POWERLEVEL9K_VCS_BACKENDS=(git)
+ typeset -g POWERLEVEL9K_STATUS_EXTENDED_STATES=true
+ typeset -g POWERLEVEL9K_STATUS_OK=true
+ typeset -g POWERLEVEL9K_STATUS_OK_VISUAL_IDENTIFIER_EXPANSION='✔'
+ typeset -g POWERLEVEL9K_STATUS_OK_PIPE=true
+ typeset -g POWERLEVEL9K_STATUS_OK_PIPE_VISUAL_IDENTIFIER_EXPANSION='✔'
+ typeset -g POWERLEVEL9K_STATUS_ERROR=true
+ typeset -g POWERLEVEL9K_STATUS_ERROR_VISUAL_IDENTIFIER_EXPANSION='✘'
+ typeset -g POWERLEVEL9K_STATUS_ERROR_SIGNAL=true
+ typeset -g POWERLEVEL9K_STATUS_VERBOSE_SIGNAME=false
+ typeset -g POWERLEVEL9K_STATUS_ERROR_SIGNAL_VISUAL_IDENTIFIER_EXPANSION='✘'
+ typeset -g POWERLEVEL9K_STATUS_ERROR_PIPE=true
+ typeset -g POWERLEVEL9K_STATUS_ERROR_PIPE_VISUAL_IDENTIFIER_EXPANSION='✘'
+ typeset -g POWERLEVEL9K_COMMAND_EXECUTION_TIME_FOREGROUND=0
+ typeset -g POWERLEVEL9K_COMMAND_EXECUTION_TIME_BACKGROUND=3
+ typeset -g POWERLEVEL9K_COMMAND_EXECUTION_TIME_THRESHOLD=3
+ typeset -g POWERLEVEL9K_COMMAND_EXECUTION_TIME_PRECISION=0
+ typeset -g POWERLEVEL9K_COMMAND_EXECUTION_TIME_FORMAT='d h m s'
+ typeset -g POWERLEVEL9K_BACKGROUND_JOBS_VERBOSE=false
+ typeset -g POWERLEVEL9K_NORDVPN_{DISCONNECTED,CONNECTING,DISCONNECTING}_CONTENT_EXPANSION=
+ typeset -g POWERLEVEL9K_NORDVPN_{DISCONNECTED,CONNECTING,DISCONNECTING}_VISUAL_IDENTIFIER_EXPANSION=
+ typeset -g POWERLEVEL9K_DISK_USAGE_WARNING_LEVEL=95
+ typeset -g POWERLEVEL9K_DISK_USAGE_CRITICAL_LEVEL=98
+ typeset -g POWERLEVEL9K_DISK_USAGE_ONLY_WARNING=true
+ typeset -g POWERLEVEL9K_VI_MODE_FOREGROUND=0
+ typeset -g POWERLEVEL9K_VI_COMMAND_MODE_STRING=NORMAL
+ typeset -g POWERLEVEL9K_VI_MODE_NORMAL_BACKGROUND=2
+ typeset -g POWERLEVEL9K_VI_VISUAL_MODE_STRING=VISUAL
+ typeset -g POWERLEVEL9K_VI_MODE_VISUAL_BACKGROUND=4
+ typeset -g POWERLEVEL9K_VI_OVERWRITE_MODE_STRING=OVERTYPE
+ typeset -g POWERLEVEL9K_VI_MODE_OVERWRITE_BACKGROUND=3
+ typeset -g POWERLEVEL9K_VI_INSERT_MODE_STRING=
+ typeset -g POWERLEVEL9K_VI_MODE_INSERT_FOREGROUND=8
+ typeset -g POWERLEVEL9K_LOAD_WHICH=5
+ typeset -g POWERLEVEL9K_TODO_HIDE_ZERO_TOTAL=true
+ typeset -g POWERLEVEL9K_TODO_HIDE_ZERO_FILTERED=false
+ typeset -g POWERLEVEL9K_TIMEWARRIOR_CONTENT_EXPANSION='${P9K_CONTENT:0:24}${${P9K_CONTENT:24}:+…}'
+ typeset -g POWERLEVEL9K_CONTEXT_ROOT_FOREGROUND=1
+ typeset -g POWERLEVEL9K_CONTEXT_ROOT_BACKGROUND=0
+ typeset -g POWERLEVEL9K_CONTEXT_{REMOTE,REMOTE_SUDO}_FOREGROUND=3
+ typeset -g POWERLEVEL9K_CONTEXT_{REMOTE,REMOTE_SUDO}_BACKGROUND=0
+ typeset -g POWERLEVEL9K_CONTEXT_FOREGROUND=3
+ typeset -g POWERLEVEL9K_CONTEXT_BACKGROUND=0
+ typeset -g POWERLEVEL9K_CONTEXT_ROOT_TEMPLATE='%n@%m'
+ typeset -g POWERLEVEL9K_CONTEXT_{REMOTE,REMOTE_SUDO}_TEMPLATE='%n@%m'
+ typeset -g POWERLEVEL9K_CONTEXT_TEMPLATE='%n'
+ typeset -g POWERLEVEL9K_VIRTUALENV_SHOW_PYTHON_VERSION=false
+ typeset -g POWERLEVEL9K_VIRTUALENV_{LEFT,RIGHT}_DELIMITER=
+ typeset -g POWERLEVEL9K_ANACONDA_SHOW_PYTHON_VERSION=false
+ typeset -g POWERLEVEL9K_ANACONDA_{LEFT,RIGHT}_DELIMITER=
+ typeset -g POWERLEVEL9K_PYENV_SOURCES=(shell local global)
+ typeset -g POWERLEVEL9K_PYENV_PROMPT_ALWAYS_SHOW=false
+ typeset -g POWERLEVEL9K_GOENV_SOURCES=(shell local global)
+ typeset -g POWERLEVEL9K_GOENV_PROMPT_ALWAYS_SHOW=false
+ typeset -g POWERLEVEL9K_NODENV_PROMPT_ALWAYS_SHOW=false
+ typeset -g POWERLEVEL9K_NODEENV_SHOW_NODE_VERSION=false
+ typeset -g POWERLEVEL9K_NODEENV_{LEFT,RIGHT}_DELIMITER=
+ typeset -g POWERLEVEL9K_NODE_VERSION_PROJECT_ONLY=true
+ typeset -g POWERLEVEL9K_GO_VERSION_PROJECT_ONLY=true
+ typeset -g POWERLEVEL9K_RUST_VERSION_PROJECT_ONLY=true
+ typeset -g POWERLEVEL9K_DOTNET_VERSION_PROJECT_ONLY=true
+ typeset -g POWERLEVEL9K_RBENV_SOURCES=(shell local global)
+ typeset -g POWERLEVEL9K_RBENV_PROMPT_ALWAYS_SHOW=false
+ typeset -g POWERLEVEL9K_RVM_SHOW_GEMSET=false
+ typeset -g POWERLEVEL9K_RVM_SHOW_PREFIX=false
+ typeset -g POWERLEVEL9K_LUAENV_SOURCES=(shell local global)
+ typeset -g POWERLEVEL9K_LUAENV_PROMPT_ALWAYS_SHOW=false
+ typeset -g POWERLEVEL9K_JENV_SOURCES=(shell local global)
+ typeset -g POWERLEVEL9K_JENV_PROMPT_ALWAYS_SHOW=false
+ typeset -g POWERLEVEL9K_PLENV_SOURCES=(shell local global)
+ typeset -g POWERLEVEL9K_PLENV_PROMPT_ALWAYS_SHOW=false
+ typeset -g POWERLEVEL9K_TERRAFORM_CLASSES=(
+ '*' DEFAULT)
+ typeset -g POWERLEVEL9K_TERRAFORM_DEFAULT_FOREGROUND=4
+ typeset -g POWERLEVEL9K_TERRAFORM_DEFAULT_BACKGROUND=0
+ typeset -g POWERLEVEL9K_KUBECONTEXT_SHOW_ON_COMMAND='kubectl|helm|kubens|kubectx|oc'
+ typeset -g POWERLEVEL9K_KUBECONTEXT_CLASSES=(
+ '*' DEFAULT)
+ typeset -g POWERLEVEL9K_KUBECONTEXT_DEFAULT_FOREGROUND=7
+ typeset -g POWERLEVEL9K_KUBECONTEXT_DEFAULT_BACKGROUND=5
+ typeset -g POWERLEVEL9K_KUBECONTEXT_DEFAULT_CONTENT_EXPANSION=
+ POWERLEVEL9K_KUBECONTEXT_DEFAULT_CONTENT_EXPANSION+='${P9K_KUBECONTEXT_CLOUD_CLUSTER:-${P9K_KUBECONTEXT_NAME}}'
+ POWERLEVEL9K_KUBECONTEXT_DEFAULT_CONTENT_EXPANSION+='${${:-/$P9K_KUBECONTEXT_NAMESPACE}:#/default}'
+ typeset -g POWERLEVEL9K_AWS_SHOW_ON_COMMAND='aws|awless|terraform|pulumi'
+ typeset -g POWERLEVEL9K_AWS_CLASSES=(
+ '*' DEFAULT)
+ typeset -g POWERLEVEL9K_AZURE_SHOW_ON_COMMAND='az|terraform|pulumi'
+ typeset -g POWERLEVEL9K_GCLOUD_SHOW_ON_COMMAND='gcloud|gcs'
+ typeset -g POWERLEVEL9K_GCLOUD_CONTENT_EXPANSION='${P9K_GCLOUD_PROJECT//\%/%%}'
+ typeset -g POWERLEVEL9K_GOOGLE_APP_CRED_SHOW_ON_COMMAND='terraform|pulumi'
+ typeset -g POWERLEVEL9K_GOOGLE_APP_CRED_CLASSES=(
+ '*' DEFAULT)
+ typeset -g POWERLEVEL9K_GOOGLE_APP_CRED_DEFAULT_CONTENT_EXPANSION='${P9K_GOOGLE_APP_CRED_PROJECT_ID//\%/%%}'
+ typeset -g POWERLEVEL9K_VPN_IP_FOREGROUND=0
+ typeset -g POWERLEVEL9K_VPN_IP_BACKGROUND=6
+ typeset -g POWERLEVEL9K_VPN_IP_CONTENT_EXPANSION=
+ typeset -g POWERLEVEL9K_VPN_IP_INTERFACE='(wg|(.*tun))[0-9]*'
+ typeset -g POWERLEVEL9K_BATTERY_LOW_THRESHOLD=20
+ typeset -g POWERLEVEL9K_BATTERY_LOW_FOREGROUND=1
+ typeset -g POWERLEVEL9K_BATTERY_{CHARGING,CHARGED}_FOREGROUND=2
+ typeset -g POWERLEVEL9K_BATTERY_DISCONNECTED_FOREGROUND=3
+ typeset -g POWERLEVEL9K_BATTERY_STAGES=$'\uf58d\uf579\uf57a\uf57b\uf57c\uf57d\uf57e\uf57f\uf580\uf581\uf578'
+ typeset -g POWERLEVEL9K_BATTERY_VERBOSE=false
+ typeset -g POWERLEVEL9K_TIME_FORMAT='%D{%H:%M:%S}'
+ typeset -g POWERLEVEL9K_TIME_UPDATE_ON_COMMAND=false
+ function prompt_example() {
+ p10k segment -i "POWERLEVEL9K_LINUX_ICON" -r -f blue -t " "
+ }
+ function instant_prompt_example() {
+ prompt_example
+ }
+ typeset -g POWERLEVEL9K_TRANSIENT_PROMPT=off
+ typeset -g POWERLEVEL9K_INSTANT_PROMPT=verbose
+ typeset -g POWERLEVEL9K_DISABLE_HOT_RELOAD=true
+ (( ! $+functions[p10k] )) || p10k reload
+}
+(( ${#p10k_config_opts} )) && setopt ${p10k_config_opts[@]}
+'builtin' 'unset' 'p10k_config_opts'
\ No newline at end of file
diff --git a/dotfiles/.tmux.conf b/dotfiles/.tmux.conf
new file mode 100644
index 0000000..6e3dcbb
--- /dev/null
+++ b/dotfiles/.tmux.conf
@@ -0,0 +1,1370 @@
+# : << EOF
+# https://github.com/gpakosz/.tmux
+# (‑●‑●)> dual licensed under the WTFPL v2 license and the MIT license,
+# without any warranty.
+# Copyright 2012— Gregory Pakosz (@gpakosz).
+# /!\ do not edit this file
+# instead, override settings in ~/.tmux.conf.local, see README.md
+
+
+# -- general -------------------------------------------------------------------
+
+set -g default-terminal "screen-256color" # colors!
+setw -g xterm-keys on
+set -s escape-time 10 # faster command sequences
+set -sg repeat-time 600 # increase repeat timeout
+set -s focus-events on
+
+set -g prefix2 C-a # GNU-Screen compatible prefix
+bind C-a send-prefix -2
+
+set -q -g status-utf8 on # expect UTF-8 (tmux < 2.2)
+setw -q -g utf8 on
+
+set -g history-limit 5000 # boost history
+
+# edit configuration
+bind e new-window -n "~/.tmux.conf.local" "EDITOR=\${EDITOR//mvim/vim} && EDITOR=\${EDITOR//gvim/vim} && \${EDITOR:-vim} ~/.tmux.conf.local && tmux source ~/.tmux.conf && tmux display \"~/.tmux.conf sourced\""
+
+# reload configuration
+bind r source-file ~/.tmux.conf \; display '~/.tmux.conf sourced'
+
+
+# -- display -------------------------------------------------------------------
+
+set -g base-index 1 # start windows numbering at 1
+setw -g pane-base-index 1 # make pane numbering consistent with windows
+
+setw -g automatic-rename on # rename window to reflect current program
+set -g renumber-windows on # renumber windows when a window is closed
+
+#set -g set-titles on # set terminal title
+
+set -g display-panes-time 800 # slightly longer pane indicators display time
+set -g display-time 1000 # slightly longer status messages display time
+
+set -g status-interval 10 # redraw status line every 10 seconds
+
+# clear both screen and history
+bind -n C-l send-keys C-l \; run 'sleep 0.1' \; clear-history
+
+# activity
+set -g monitor-activity on
+set -g visual-activity off
+
+
+# -- navigation ----------------------------------------------------------------
+
+# create session
+#bind C-c new-session
+bind c new-window -c '#{pane_current_path}'
+
+# find session
+#bind C-f command-prompt -p find-session 'switch-client -t %%'
+
+# split current window horizontally
+#bind - split-window -v
+bind -r '#' split-window -p 50 -v -c "#{pane_current_path}"
+# split current window vertically
+#bind _ split-window -h
+bind -r "+" split-window -p 50 -h -c "#{pane_current_path}"
+
+# pane navigation
+#bind -r h select-pane -L # move left
+#bind -r j select-pane -D # move down
+#bind -r k select-pane -U # move up
+#bind -r l select-pane -R # move right
+#bind > swap-pane -D # swap current pane with the next one
+#bind < swap-pane -U # swap current pane with the previous one
+bind -n C-Left select-pane -L
+bind -n C-Right select-pane -R
+bind -n C-Up select-pane -U
+bind -n C-Down select-pane -D
+
+# maximize current pane
+#bind + run 'cut -c3- ~/.tmux.conf | sh -s _maximize_pane "#{session_name}" #D'
+bind Z resize-pane -Z
+
+# pane resizing
+#bind -r H resize-pane -L 2
+#bind -r J resize-pane -D 2
+#bind -r K resize-pane -U 2
+#bind -r L resize-pane -R 2
+
+# window navigation
+#unbind n
+#unbind p
+#bind -r C-h previous-window # select previous window
+#bind -r C-l next-window # select next window
+#bind Tab last-window # move to last active window
+bind -r Tab next-window
+
+# toggle mouse
+#bind m run "cut -c3- ~/.tmux.conf | sh -s _toggle_mouse"
+
+
+# -- urlview -------------------------------------------------------------------
+
+#bind U run "cut -c3- ~/.tmux.conf | sh -s _urlview #{pane_id}"
+
+
+# -- facebook pathpicker -------------------------------------------------------
+
+#bind F run "cut -c3- ~/.tmux.conf | sh -s _fpp #{pane_id}"
+
+
+# -- list choice (tmux < 2.4) --------------------------------------------------
+
+# vi-choice is gone in tmux >= 2.4
+#run -b 'tmux bind -t vi-choice h tree-collapse 2> /dev/null || true'
+#run -b 'tmux bind -t vi-choice l tree-expand 2> /dev/null || true'
+#run -b 'tmux bind -t vi-choice K start-of-list 2> /dev/null || true'
+#run -b 'tmux bind -t vi-choice J end-of-list 2> /dev/null || true'
+#run -b 'tmux bind -t vi-choice H tree-collapse-all 2> /dev/null || true'
+#run -b 'tmux bind -t vi-choice L tree-expand-all 2> /dev/null || true'
+#run -b 'tmux bind -t vi-choice Escape cancel 2> /dev/null || true'
+
+
+# -- edit mode (tmux < 2.4) ----------------------------------------------------
+
+# vi-edit is gone in tmux >= 2.4
+#run -b 'tmux bind -ct vi-edit H start-of-line 2> /dev/null || true'
+#run -b 'tmux bind -ct vi-edit L end-of-line 2> /dev/null || true'
+#run -b 'tmux bind -ct vi-edit q cancel 2> /dev/null || true'
+#run -b 'tmux bind -ct vi-edit Escape cancel 2> /dev/null || true'
+
+
+# -- copy mode -----------------------------------------------------------------
+
+bind Enter copy-mode # enter copy mode
+
+#run -b 'tmux bind -t vi-copy v begin-selection 2> /dev/null || true'
+#run -b 'tmux bind -T copy-mode-vi v send -X begin-selection 2> /dev/null || true'
+#run -b 'tmux bind -t vi-copy C-v rectangle-toggle 2> /dev/null || true'
+#run -b 'tmux bind -T copy-mode-vi C-v send -X rectangle-toggle 2> /dev/null || true'
+#run -b 'tmux bind -t vi-copy y copy-selection 2> /dev/null || true'
+#run -b 'tmux bind -T copy-mode-vi y send -X copy-selection-and-cancel 2> /dev/null || true'
+#run -b 'tmux bind -t vi-copy Escape cancel 2> /dev/null || true'
+#run -b 'tmux bind -T copy-mode-vi Escape send -X cancel 2> /dev/null || true'
+#run -b 'tmux bind -t vi-copy H start-of-line 2> /dev/null || true'
+#run -b 'tmux bind -T copy-mode-vi H send -X start-of-line 2> /dev/null || true'
+#run -b 'tmux bind -t vi-copy L end-of-line 2> /dev/null || true'
+#run -b 'tmux bind -T copy-mode-vi L send -X end-of-line 2> /dev/null || true'
+
+# copy to macOS clipboard
+#if -b 'command -v pbcopy > /dev/null 2>&1' 'bind y run -b "tmux save-buffer - | pbcopy"'
+#if -b 'command -v reattach-to-user-namespace > /dev/null 2>&1' 'bind y run -b "tmux save-buffer - | reattach-to-user-namespace pbcopy"'
+# copy to X11 clipboard
+if -b 'command -v xsel > /dev/null 2>&1' 'bind y run -b "tmux save-buffer - | xsel -i -b"'
+if -b '! command -v xsel > /dev/null 2>&1 && command -v xclip > /dev/null 2>&1' 'bind y run -b "tmux save-buffer - | xclip -i -selection clipboard >/dev/null 2>&1"'
+# copy to Windows clipboard
+#if -b 'command -v clip.exe > /dev/null 2>&1' 'bind y run -b "tmux save-buffer - | clip.exe"'
+#if -b '[ -c /dev/clipboard ]' 'bind y run -b "tmux save-buffer - > /dev/clipboard"'
+
+
+# -- buffers -------------------------------------------------------------------
+
+#bind b list-buffers # list paste buffers
+#bind p paste-buffer # paste from the top paste buffer
+#bind P choose-buffer # choose which buffer to paste from
+
+
+# -- user defined overrides ----------------------------------------------------
+
+if '[ -f ~/.tmux.conf.local ]' 'source ~/.tmux.conf.local'
+
+
+# -- 8< ------------------------------------------------------------------------
+
+run 'cut -c3- ~/.tmux.conf | sh -s _apply_configuration'
+run -b '[ -z "#{window_active}" ] && [ -z "#{version}" ] && tmux set display-time 3000 \; display "This configuration will soon require tmux >= 2.4" \; set -u display-time || true'
+
+
+# EOF
+#
+# # exit the script if any statement returns a non-true return value
+# set -e
+#
+# unset GREP_OPTIONS
+# export LC_NUMERIC=C
+#
+# if ! printf '' | sed -E 's///' 2>/dev/null; then
+# if printf '' | sed -r 's///' 2>/dev/null; then
+# sed () {
+# n=$#; while [ "$n" -gt 0 ]; do arg=$1; shift; case $arg in -E*) arg=-r${arg#-E};; esac; set -- "$@" "$arg"; n=$(( n - 1 )); done
+# command sed "$@"
+# }
+# fi
+# fi
+#
+# _uname_s=$(uname -s)
+#
+# _tmux_version=$(tmux -V | tr -cd '[:digit:].' | cut -d' ' -f2 | awk -F '.' '{print $1 * 100 + $2}')
+#
+# _is_enabled() {
+# [ x"$1" = x"true" ] || [ x"$1" = x"yes" ] || [ x"$1" = x"enabled" ] || [ x"$1" = x"1" ]
+# }
+#
+# _circled() {
+# circled_digits='⓪ ① ② ③ ④ ⑤ ⑥ ⑦ ⑧ ⑨ ⑩ ⑪ ⑫ ⑬ ⑭ ⑮ ⑯ ⑰ ⑱ ⑲ ⑳'
+# if [ "$1" -le 20 ] 2>/dev/null; then
+# i=$(( $1 + 1 ))
+# eval set -- "$circled_digits"
+# eval echo "\${$i}"
+# else
+# echo "$1"
+# fi
+# }
+#
+# _decode_unicode_escapes() {
+# printf '%s' "$*" | perl -CS -pe 's/(\\u([0-9A-Fa-f]{1,4})|\\U([0-9A-Fa-f]{1,8}))/chr(hex($2.$3))/eg' 2>/dev/null
+# }
+#
+# if command -v pkill > /dev/null 2>&1; then
+# _pkillf() {
+# pkill -f "$@" || true
+# }
+# else
+# case "$_uname_s" in
+# *CYGWIN*)
+# _pkillf() {
+# while IFS= read -r pid; do
+# kill "$pid" || true
+# done << EOF
+# $(grep -Eao "$@" /proc/*/cmdline | xargs -0 | sed -E -n 's,/proc/([0-9]+)/.+$,\1,pg')
+# EOF
+# }
+# ;;
+# *)
+# _pkillf() {
+# while IFS= read -r pid; do
+# kill "$pid" || true
+# done << EOF
+# $(ps -x -o pid= -o command= | grep -E "$@" | cut -d' ' -f1)
+# EOF
+# }
+# ;;
+# esac
+# fi
+#
+# _maximize_pane() {
+# current_session=${1:-$(tmux display -p '#{session_name}')}
+# current_pane=${2:-$(tmux display -p '#{pane_id}')}
+#
+# dead_panes=$(tmux list-panes -s -t "$current_session" -F '#{pane_dead} #{pane_id} #{pane_start_command}' | grep -E -o '^1 %.+maximized.+$' || true)
+# restore=$(printf "%s" "$dead_panes" | sed -n -E -e "s/^1 $current_pane .+maximized.+'(%[0-9]+)'\"?$/tmux swap-pane -s \1 -t $current_pane \; kill-pane -t $current_pane/p"\
+# -e "s/^1 (%[0-9]+) .+maximized.+'$current_pane'\"?$/tmux swap-pane -s \1 -t $current_pane \; kill-pane -t \1/p")
+#
+# if [ -z "$restore" ]; then
+# [ "$(tmux list-panes -t "$current_session:" | wc -l | sed 's/^ *//g')" -eq 1 ] && tmux display "Can't maximize with only one pane" && return
+# current_pane_height=$(tmux display -t "$current_pane" -p "#{pane_height}")
+# info=$(tmux new-window -t "$current_session:" -F "#{session_name}:#{window_index}.#{pane_id}" -P "maximized... 2>/dev/null & tmux setw -t \"$current_session:\" remain-on-exit on; printf \"\\033[\$(tput lines);0fPane has been maximized, press + to restore\n\" '$current_pane'")
+# session_window=${info%.*}
+# new_pane=${info#*.}
+#
+# retry=1000
+# while [ x"$(tmux list-panes -t "$session_window" -F '#{session_name}:#{window_index}.#{pane_id} #{pane_dead}' 2>/dev/null)" != x"$info 1" ] && [ "$retry" -ne 0 ]; do
+# sleep 0.1
+# retry=$((retry - 1))
+# done
+# if [ "$retry" -eq 0 ]; then
+# tmux display 'Unable to maximize pane'
+# fi
+#
+# tmux setw -t "$session_window" remain-on-exit off \; swap-pane -s "$current_pane" -t "$new_pane"
+# else
+# $restore || tmux kill-pane
+# fi
+# }
+#
+# _toggle_mouse() {
+# old=$(tmux show -gv mouse)
+# new=""
+#
+# if [ "$old" = "on" ]; then
+# new="off"
+# else
+# new="on"
+# fi
+#
+# tmux set -g mouse $new \;\
+# display "mouse: $new"
+# }
+#
+# _battery_info() {
+# count=0
+# charge=0
+# case "$_uname_s" in
+# *Darwin*)
+# while IFS= read -r line; do
+# [ -z "$line" ] && continue
+# discharging=$(printf '%s' "$line" | grep -qi "discharging" && echo "true" || echo "false")
+# percentage=$(printf '%s' "$line" | grep -E -o '[0-9]+%')
+# charge=$(awk -v charge="$charge" -v percentage="${percentage%%%}" 'BEGIN { print charge + percentage / 100 }')
+# count=$((count + 1))
+# done << EOF
+# $(pmset -g batt | grep 'InternalBattery')
+# EOF
+# ;;
+# *Linux*)
+# while IFS= read -r batpath; do
+# [ -z "$batpath" ] && continue
+# grep -i -q device "$batpath/scope" 2> /dev/null && continue
+#
+# discharging=$(grep -qi "discharging" "$batpath/status" && echo "true" || echo "false")
+# bat_capacity="$batpath/capacity"
+# if [ -r "$bat_capacity" ]; then
+# charge=$(awk -v charge="$charge" -v capacity="$(cat "$bat_capacity")" 'BEGIN { print charge + capacity / 100 }')
+# else
+# bat_energy_full="$batpath/energy_full"
+# bat_energy_now="$batpath/energy_now"
+# if [ -r "$bat_energy_full" ] && [ -r "$bat_energy_now" ]; then
+# charge=$(awk -v charge="$charge" -v energy_now="$(cat "$bat_energy_now")" -v energy_full="$(cat "$bat_energy_full")" 'BEGIN { print charge + energy_now / energy_full }')
+# fi
+# fi
+# count=$((count + 1))
+# done << EOF
+# $(find /sys/class/power_supply -maxdepth 1 -iname '*bat*')
+# EOF
+# ;;
+# *CYGWIN*|*MSYS*|*MINGW*)
+# while IFS= read -r line; do
+# [ -z "$line" ] && continue
+# discharging=$(printf '%s' "$line" | awk '{ s = ($1 == 1) ? "true" : "false"; print s }')
+# charge=$(printf '%s' "$line" | awk -v charge="$charge" '{ print charge + $2 / 100 }')
+# count=$((count + 1))
+# done << EOF
+# $(wmic path Win32_Battery get BatteryStatus, EstimatedChargeRemaining 2> /dev/null | tr -d '\r' | tail -n +2 || true)
+# EOF
+# ;;
+# *OpenBSD*)
+# for batid in 0 1 2; do
+# sysctl -n "hw.sensors.acpibat$batid.raw0" 2>&1 | grep -q 'not found' && continue
+# discharging=$(sysctl -n "hw.sensors.acpibat$batid.raw0" | grep -q 1 && echo "true" || echo "false")
+# if sysctl -n "hw.sensors.acpibat$batid" | grep -q amphour; then
+# charge=$(awk -v charge="$charge" -v remaining="$(sysctl -n hw.sensors.acpibat$batid.amphour3 | cut -d' ' -f1)" -v full="$(sysctl -n hw.sensors.acpibat$batid.amphour0 | cut -d' ' -f1)" 'BEGIN { print charge + remaining / full }')
+# else
+# charge=$(awk -v charge="$charge" -v remaining="$(sysctl -n hw.sensors.acpibat$batid.watthour3 | cut -d' ' -f1)" -v full="$(sysctl -n hw.sensors.acpibat$batid.watthour0 | cut -d' ' -f1)" 'BEGIN { print charge + remaining / full }')
+# fi
+# count=$((count + 1))
+# done
+# ;;
+# esac
+# [ "$count" -ne 0 ] && charge=$(awk -v charge="$charge" -v count="$count" 'BEGIN { print charge / count }') || true
+# }
+#
+# _battery_status() {
+# _battery_info
+# if [ "$charge" = 0 ]; then
+# tmux set -ug '@battery_status'
+# return
+# fi
+#
+# battery_status_charging=$1
+# battery_status_discharging=$2
+# if [ x"$discharging" = x"true" ]; then
+# battery_status="$battery_status_discharging"
+# else
+# battery_status="$battery_status_charging"
+# fi
+#
+# tmux set -g '@battery_status' "$battery_status"
+# }
+#
+# _battery_bar() {
+# _battery_info
+# if [ "$charge" = 0 ]; then
+# tmux set -ug '@battery_bar' \;\
+# set -ug '@battery_hbar' \;\
+# set -ug '@battery_vbar' \;\
+# set -ug '@battery_percentage'
+# return
+# fi
+#
+# battery_bar_symbol_full=$1
+# battery_bar_symbol_empty=$2
+# battery_bar_length=$3
+# battery_bar_palette=$4
+# battery_hbar_palette=$5
+# battery_vbar_palette=$6
+#
+# if [ x"$battery_bar_length" = x"auto" ]; then
+# columns=$(tmux -q display -p '#{client_width}' 2> /dev/null || echo 80)
+# if [ "$columns" -ge 80 ]; then
+# battery_bar_length=10
+# else
+# battery_bar_length=5
+# fi
+# fi
+#
+# if echo "$battery_bar_palette" | grep -q -E '^heat|gradient(,[#a-z0-9]{7,9})?$'; then
+# # shellcheck disable=SC2086
+# { set -f; IFS=,; set -- $battery_bar_palette; unset IFS; set +f; }
+# palette_style=$1
+# battery_bg=${2:-none}
+# [ x"$palette_style" = x"gradient" ] && \
+# palette="196 202 208 214 220 226 190 154 118 82 46"
+# [ x"$palette_style" = x"heat" ] && \
+# palette="243 245 247 144 143 142 184 214 208 202 196"
+#
+# palette=$(echo "$palette" | awk -v n="$battery_bar_length" '{ for (i = 0; i < n; ++i) printf $(1 + (i * NF / n))" " }')
+# eval set -- "$palette"
+#
+# full=$(awk "BEGIN { printf \"%.0f\", ($charge) * $battery_bar_length }")
+# battery_bar="#[bg=$battery_bg]"
+# # shellcheck disable=SC2046
+# [ "$full" -gt 0 ] && \
+# battery_bar="$battery_bar$(printf "#[fg=colour%s]$battery_bar_symbol_full" $(echo "$palette" | cut -d' ' -f1-"$full"))"
+# # shellcheck disable=SC2046
+# empty=$((battery_bar_length - full))
+# # shellcheck disable=SC2046
+# [ "$empty" -gt 0 ] && \
+# battery_bar="$battery_bar$(printf "#[fg=colour%s]$battery_bar_symbol_empty" $(echo "$palette" | cut -d' ' -f$((full + 1))-$((full + empty))))"
+# eval battery_bar="$battery_bar#[fg=colour\${$((full == 0 ? 1 : full))}]"
+# elif echo "$battery_bar_palette" | grep -q -E '^(([#a-z0-9]{7,9}|none),?){3}$'; then
+# # shellcheck disable=SC2086
+# { set -f; IFS=,; set -- $battery_bar_palette; unset IFS; set +f; }
+# battery_full_fg=$1
+# battery_empty_fg=$2
+# battery_bg=$3
+#
+# full=$(awk "BEGIN { printf \"%.0f\", ($charge) * $battery_bar_length }")
+# [ x"$battery_bg" != x"none" ] && \
+# battery_bar="#[bg=$battery_bg]"
+# #shellcheck disable=SC2046
+# [ "$full" -gt 0 ] && \
+# battery_bar="$battery_bar#[fg=$battery_full_fg]$(printf "%0.s$battery_bar_symbol_full" $(seq 1 "$full"))"
+# empty=$((battery_bar_length - full))
+# #shellcheck disable=SC2046
+# [ "$empty" -gt 0 ] && \
+# battery_bar="$battery_bar#[fg=$battery_empty_fg]$(printf "%0.s$battery_bar_symbol_empty" $(seq 1 "$empty"))" && \
+# battery_bar="$battery_bar#[fg=$battery_empty_fg]"
+# fi
+#
+# if echo "$battery_hbar_palette" | grep -q -E '^heat|gradient(,[#a-z0-9]{7,9})?$'; then
+# # shellcheck disable=SC2086
+# { set -f; IFS=,; set -- $battery_hbar_palette; unset IFS; set +f; }
+# palette_style=$1
+# [ x"$palette_style" = x"gradient" ] && \
+# palette="196 202 208 214 220 226 190 154 118 82 46"
+# [ x"$palette_style" = x"heat" ] && \
+# palette="233 234 235 237 239 241 243 245 247 144 143 142 184 214 208 202 196"
+#
+# palette=$(echo "$palette" | awk -v n="$battery_bar_length" '{ for (i = 0; i < n; ++i) printf $(1 + (i * NF / n))" " }')
+# eval set -- "$palette"
+#
+# full=$(awk "BEGIN { printf \"%.0f\", ($charge) * $battery_bar_length }")
+# eval battery_hbar_fg="colour\${$((full == 0 ? 1 : full))}"
+# elif echo "$battery_hbar_palette" | grep -q -E '^([#a-z0-9]{7,9},?){3}$'; then
+# # shellcheck disable=SC2086
+# { set -f; IFS=,; set -- $battery_hbar_palette; unset IFS; set +f; }
+#
+# # shellcheck disable=SC2046
+# eval $(awk "BEGIN { printf \"battery_hbar_fg=$%d\", (($charge) - 0.001) * $# + 1 }")
+# fi
+#
+# eval set -- "▏ ▎ ▍ ▌ ▋ ▊ ▉ █"
+# # shellcheck disable=SC2046
+# eval $(awk "BEGIN { printf \"battery_hbar_symbol=$%d\", ($charge) * ($# - 1) + 1 }")
+# battery_hbar="#[fg=${battery_hbar_fg?}]${battery_hbar_symbol?}"
+#
+# if echo "$battery_vbar_palette" | grep -q -E '^heat|gradient(,[#a-z0-9]{7,9})?$'; then
+# # shellcheck disable=SC2086
+# { set -f; IFS=,; set -- $battery_vbar_palette; unset IFS; set +f; }
+# palette_style=$1
+# [ x"$palette_style" = x"gradient" ] && \
+# palette="196 202 208 214 220 226 190 154 118 82 46"
+# [ x"$palette_style" = x"heat" ] && \
+# palette="233 234 235 237 239 241 243 245 247 144 143 142 184 214 208 202 196"
+#
+# palette=$(echo "$palette" | awk -v n="$battery_bar_length" '{ for (i = 0; i < n; ++i) printf $(1 + (i * NF / n))" " }')
+# eval set -- "$palette"
+#
+# full=$(awk "BEGIN { printf \"%.0f\", ($charge) * $battery_bar_length }")
+# eval battery_vbar_fg="colour\${$((full == 0 ? 1 : full))}"
+# elif echo "$battery_vbar_palette" | grep -q -E '^([#a-z0-9]{7,9},?){3}$'; then
+# # shellcheck disable=SC2086
+# { set -f; IFS=,; set -- $battery_vbar_palette; unset IFS; set +f; }
+#
+# # shellcheck disable=SC2046
+# eval $(awk "BEGIN { printf \"battery_vbar_fg=$%d\", (($charge) - 0.001) * $# + 1 }")
+# fi
+#
+# eval set -- "▁ ▂ ▃ ▄ ▅ ▆ ▇ █"
+# # shellcheck disable=SC2046
+# eval $(awk "BEGIN { printf \"battery_vbar_symbol=$%d\", ($charge) * ($# - 1) + 1 }")
+# battery_vbar="#[fg=${battery_vbar_fg?}]${battery_vbar_symbol?}"
+#
+# battery_percentage="$(awk "BEGIN { printf \"%.0f%%\", ($charge) * 100 }")"
+#
+# tmux set -g '@battery_status' "$battery_status" \;\
+# set -g '@battery_bar' "$battery_bar" \;\
+# set -g '@battery_hbar' "$battery_hbar" \;\
+# set -g '@battery_vbar' "$battery_vbar" \;\
+# set -g '@battery_percentage' "$battery_percentage"
+# }
+#
+# _tty_info() {
+# tty="${1##/dev/}"
+# case "$_uname_s" in
+# *CYGWIN*)
+# ps -al | tail -n +2 | awk -v tty="$tty" '
+# ((/ssh/ && !/-W/) || !/ssh/) && $5 == tty {
+# user[$1] = $6; parent[$1] = $2; child[$2] = $1
+# }
+# END {
+# for (i in parent)
+# {
+# j = i
+# while (parent[j])
+# j = parent[j]
+#
+# if (!(i in child) && j != 1)
+# {
+# file = "/proc/" i "/cmdline"; getline command < file; close(file)
+# gsub(/\0/, " ", command)
+# "id -un " user[i] | getline username
+# print i":"username":"command
+# exit
+# }
+# }
+# }
+# '
+# ;;
+# *)
+# ps -t "$tty" -o user=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX -o pid= -o ppid= -o command= | awk '
+# NR > 1 && ((/ssh/ && !/-W/) || !/ssh/) {
+# user[$2] = $1; parent[$2] = $3; child[$3] = $2; pid=$2; $1 = $2 = $3 = ""; command[pid] = substr($0,4)
+# }
+# END {
+# for (i in parent)
+# {
+# j = i
+# while (parent[j])
+# j = parent[j]
+#
+# if (!(i in child) && j != 1)
+# {
+# print i":"user[i]":"command[i]
+# exit
+# }
+# }
+# }
+# '
+# ;;
+# esac
+# }
+#
+# _ssh_or_mosh_args() {
+# case "$1" in
+# *ssh*)
+# args=$(printf '%s' "$1" | perl -n -e 'print if s/(.*?)\bssh\b\s+(.*)/\2/')
+# ;;
+# *mosh-client*)
+# args=$(printf '%s' "$1" | sed -E -e 's/.*mosh-client -# (.*)\|.*$/\1/' -e 's/-[^ ]*//g' -e 's/\d:\d//g')
+# ;;
+# esac
+#
+# printf '%s' "$args"
+# }
+#
+# _username() {
+# tty=${1:-$(tmux display -p '#{pane_tty}')}
+# ssh_only=$2
+#
+# tty_info=$(_tty_info "$tty")
+# command=${tty_info#*:}
+# command=${command#*:}
+#
+# ssh_or_mosh_args=$(_ssh_or_mosh_args "$command")
+# if [ -n "$ssh_or_mosh_args" ]; then
+# # shellcheck disable=SC2086
+# username=$(ssh -G $ssh_or_mosh_args 2>/dev/null | awk '/^user / { print $2; exit }')
+# # shellcheck disable=SC2086
+# [ -z "$username" ] && username=$(ssh -T -o ControlPath=none -o ProxyCommand="sh -c 'echo %%username%% %r >&2'" $ssh_or_mosh_args 2>&1 | awk '/^%username% / { print $2; exit }')
+# else
+# if ! _is_enabled "$ssh_only"; then
+# username=${tty_info#*:}
+# username=${username%%:*}
+# fi
+# fi
+#
+# printf '%s\n' "$username"
+# }
+#
+# _hostname() {
+# tty=${1:-$(tmux display -p '#{pane_tty}')}
+# ssh_only=$2
+#
+# tty_info=$(_tty_info "$tty")
+# command=${tty_info#*:}
+# command=${command#*:}
+#
+# ssh_or_mosh_args=$(_ssh_or_mosh_args "$command")
+# if [ -n "$ssh_or_mosh_args" ]; then
+# # shellcheck disable=SC2086
+# hostname=$(ssh -G $ssh_or_mosh_args 2>/dev/null | awk '/^hostname / { print $2; exit }')
+# # shellcheck disable=SC2086
+# [ -z "$hostname" ] && hostname=$(ssh -T -o ControlPath=none -o ProxyCommand="sh -c 'echo %%hostname%% %h >&2'" $ssh_or_mosh_args 2>&1 | awk '/^%hostname% / { print $2; exit }')
+#
+# case "$hostname" in
+# *[a-z-].*)
+# hostname=${hostname%%.*}
+# ;;
+# 127.0.0.1)
+# hostname="localhost"
+# ;;
+# esac
+# else
+# if ! _is_enabled "$ssh_only"; then
+# hostname=$3
+# fi
+# fi
+#
+# printf '%s\n' "$hostname"
+# }
+#
+# _root() {
+# tty=${1:-$(tmux display -p '#{pane_tty}')}
+# root=$2
+#
+# username=$(_username "$tty" false)
+#
+# [ x"$username" = x"root" ] && echo "$root"
+# }
+#
+# _uptime() {
+# case "$_uname_s" in
+# *Darwin*|*FreeBSD*)
+# boot=$(sysctl -q -n kern.boottime | awk -F'[ ,:]+' '{ print $4 }')
+# now=$(date +%s)
+# ;;
+# *Linux*|*CYGWIN*|*MSYS*|*MINGW*)
+# boot=0
+# now=$(cut -d' ' -f1 < /proc/uptime)
+# ;;
+# *OpenBSD*)
+# boot=$(sysctl -n kern.boottime)
+# now=$(date +%s)
+# esac
+# # shellcheck disable=SC1004
+# awk -v boot="$boot" -v now="$now" '
+# BEGIN {
+# uptime = now - boot
+# y = int(uptime / 31536000)
+# dy = int(uptime / 86400) % 365
+# d = int(uptime / 86400)
+# h = int(uptime / 3600) % 24
+# m = int(uptime / 60) % 60
+# s = int(uptime) % 60
+#
+# system("tmux set -g @uptime_y " y + 0 " \\; " \
+# "set -g @uptime_dy " dy + 0 " \\; " \
+# "set -g @uptime_d " d + 0 " \\; " \
+# "set -g @uptime_h " h + 0 " \\; " \
+# "set -g @uptime_m " m + 0 " \\; " \
+# "set -g @uptime_s " s + 0)
+# }'
+# }
+#
+# _loadavg() {
+# case "$_uname_s" in
+# *Darwin*|*FreeBSD*)
+# tmux set -g @loadavg "$(sysctl -q -n vm.loadavg | cut -d' ' -f2)"
+# ;;
+# *Linux*|*CYGWIN*)
+# tmux set -g @loadavg "$(cut -d' ' -f1 < /proc/loadavg)"
+# ;;
+# *OpenBSD*)
+# tmux set -g @loadavg "$(sysctl -q -n vm.loadavg | cut -d' ' -f1)"
+# ;;
+# esac
+# }
+#
+# _split_window_ssh() {
+# tty=${1:-$(tmux display -p '#{pane_tty}')}
+# shift
+#
+# tty_info=$(_tty_info "$tty")
+# command=${tty_info#*:}
+# command=${command#*:}
+#
+# case "$command" in
+# *mosh-client*)
+# # shellcheck disable=SC2046
+# tmux split-window "$@" mosh $(echo "$command" | sed -E -e 's/.*mosh-client -# (.*)\|.*$/\1/')
+# ;;
+# *ssh*)
+# # shellcheck disable=SC2046
+# tmux split-window "$@" $(echo "$command" | sed -e 's/;/\\;/g')
+# ;;
+# *)
+# tmux split-window "$@"
+# esac
+# }
+#
+# _split_window() {
+# _split_window_ssh "$@"
+# }
+#
+# _apply_overrides() {
+# tmux_conf_theme_24b_colour=${tmux_conf_theme_24b_colour:-false}
+# tmux_conf_24b_colour=${tmux_conf_24b_colour:-$tmux_conf_theme_24b_colour}
+# if _is_enabled "$tmux_conf_24b_colour"; then
+# case "$TERM" in
+# screen-*|tmux-*)
+# ;;
+# *)
+# tmux set-option -ga terminal-overrides ",*256col*:Tc"
+# ;;
+# esac
+# fi
+# }
+#
+# _apply_bindings() {
+# cfg=$(mktemp) && trap 'rm -f $cfg*' EXIT
+#
+# tmux list-keys | grep -vF 'tmux.conf.local' | grep -E 'new-window|split(-|_)window|new-session|copy-selection|copy-pipe' > "$cfg"
+#
+# # tmux 3.0 doesn't include 02254d1e5c881be95fd2fc37b4c4209640b6b266 and the
+# # output of list-keys can be truncated
+# perl -p -i -e "s/'#\{\?window_zoomed_flag,Unzoom,Zoom\}' 'z' \{resize-pane -$/'#{?window_zoomed_flag,Unzoom,Zoom}' 'z' {resize-pane -Z}\"/g" "$cfg"
+#
+# perl -p -i -e "
+# s/\bnew-window\b([^;}\n]*?)(?:\s+-c\s+((?:\\\\\")?|\"?|'?)#\{pane_current_path\}\2)/new-window\1/g
+# ;
+# s/\brun-shell\b\s+(\"|')cut\s+-c3-\s+~\/\.tmux\.conf\s+\|\s+sh\s+-s\s+_split_window\s+#\{pane_tty\}([^\n\1]*)(\s+-c\s+((?:\\\\\")?|\"?|'?)#\{pane_current_path\}\4)([^\n\1]*)\1/run-shell \1cut -c3- ~\/.tmux.conf | sh -s _split_window #{pane_tty}\2\5\1/g
+# ;
+# s/\brun-shell\b(\s+((?:\\\\\")?|\"?|'?)cut\s+-c3-\s+~\/\.tmux\.conf\s+\|\s+sh\s+-s\s+_split_window\s+((?:\\\\\")?|\"?|'?)#\{pane_tty\}\3)(.*?)\2/split-window\4/g
+# ;
+# s/\bsplit-window\b([^;}\n]*?)(?:\s+-c\s+((?:\\\\\")?|\"?|'?)#\{pane_current_path\}\2)/split-window\1/g" \
+# "$cfg"
+#
+# tmux_conf_new_window_retain_current_path=${tmux_conf_new_window_retain_current_path:-false}
+# if _is_enabled "$tmux_conf_new_window_retain_current_path"; then
+# perl -p -i -e "
+# s/\bnew-window\b(?!\s+-)/{$&}/g if /\bdisplay-menu\b/
+# ;
+# s/\bnew-window\b/new-window -c '#\{pane_current_path\}'/g" \
+# "$cfg"
+# fi
+#
+# perl -p -i -e "
+# s/\bsplit-window\b((?:(?:[ \t]+-[bdfhIvP])|(?:[ \t]+-[celtF][ \t]+(?!\bssh\b)[^\s]+))*)?(?:\s+(\bssh\b))((?:(?:[ \t]+-[bdfhIvP])|(?:[ \t]+-[celtF][ \t]+(?!\bssh\b)[^\s]+))*)?/run-shell 'cut -c3- ~\/\.tmux\.conf | sh -s _split_window_ssh #\{pane_tty\}\1'/g if /\bsplit-window\b((?:(?:[ \t]+-[bdfhIvP])|(?:[ \t]+-[celtF][ \t]+(?!ssh)[^\s]+))*)?(?:\s+(ssh))((?:(?:[ \t]+-[bdfhIvP])|(?:[ \t]+-[celtF][ \t]+(?!ssh)[^\s]+))*)?/"\
+# "$cfg"
+#
+# tmux_conf_new_pane_retain_current_path=${tmux_conf_new_pane_retain_current_path:-true}
+# tmux_conf_new_pane_reconnect_ssh=${tmux_conf_new_pane_reconnect_ssh:-false}
+# if _is_enabled "$tmux_conf_new_pane_reconnect_ssh"; then
+# perl -p -i -e "s/\bsplit-window\b([^;}\n\"]*)/run-shell 'cut -c3- ~\/\.tmux\.conf | sh -s _split_window #\{pane_tty\}\1'/g" "$cfg"
+# fi
+#
+# if _is_enabled "$tmux_conf_new_pane_retain_current_path"; then
+# perl -p -i -e "
+# s/\bsplit-window\b(?!\s+-)/{$&}/g if /\bdisplay-menu\b/
+# ;
+# s/\bsplit-window\b/split-window -c '#{pane_current_path}'\1/g
+# ;
+# s/\brun-shell\b\s+'cut\s+-c3-\s+~\/\.tmux\.conf\s+\|\s+sh\s+-s\s+_split_window(_ssh)?\s+#\{pane_tty\}([^}\n']*)'/run-shell 'cut -c3- ~\/.tmux.conf | sh -s _split_window\1 #\{pane_tty\} -c \\\\\"#\{pane_current_path\}\\\\\"\2'/g if /\bdisplay-menu\b/
+# ;
+# s/\brun-shell\b\s+'cut\s+-c3-\s+~\/\.tmux\.conf\s+\|\s+sh\s+-s\s+_split_window(_ssh)?\s+#\{pane_tty\}([^}\n']*)'/run-shell 'cut -c3- ~\/.tmux.conf | sh -s _split_window\1 #\{pane_tty\} -c \"#\{pane_current_path\}\"\2'/g" \
+# "$cfg"
+# fi
+#
+# tmux_conf_new_session_prompt=${tmux_conf_new_session_prompt:-false}
+# if _is_enabled "$tmux_conf_new_session_prompt"; then
+# perl -p -i \
+# -e "s/(? /dev/null 2>&1 && command='pbcopy'
+# command -v reattach-to-user-namespace > /dev/null 2>&1 && command='reattach-to-user-namespace pbcopy'
+# command -v xsel > /dev/null 2>&1 && command='xsel -i -b'
+# ! command -v xsel > /dev/null 2>&1 && command -v xclip > /dev/null 2>&1 && command='xclip -i -selection clipboard > \/dev\/null 2>\&1'
+# command -v clip.exe > /dev/null 2>&1 && command='clip\.exe'
+# [ -c /dev/clipboard ] && command='cat > \/dev\/clipboard'
+#
+# if [ -n "$command" ]; then
+# if _is_enabled "$tmux_conf_copy_to_os_clipboard"; then
+# perl -p -i -e "s/\bcopy-selection(-and-cancel)?\b/copy-pipe\1 '$command'/g" "$cfg"
+# else
+# perl -p -i -e "s/\bcopy-pipe(-and-cancel)?\b\s+(\"|')?$command\2/copy-selection\1/g" "$cfg"
+# fi
+# fi
+#
+# # until tmux >= 3.0, output of tmux list-keys can't be consumed back by tmux source-file without applying some escapings
+# awk < "$cfg" \
+# '{i = $2 == "-T" ? 4 : 5; gsub(/^[;]$/, "\\\\&", $i); gsub(/^[$"#~]$/, "'"'"'&'"'"'", $i); gsub(/^['"'"']$/, "\"&\"", $i); print}' > "$cfg.in"
+#
+# # ignore bindings with errors
+# if ! tmux source-file "$cfg.in"; then
+# verbose_flag=$(tmux source-file -v /dev/null 2> /dev/null && printf -- '-v' || true)
+# while ! out=$(tmux source-file "$verbose_flag" "$cfg.in"); do
+# line=$(printf "%s" "$out" | tail -1 | cut -d':' -f2)
+# perl -n -i -e "if ($. != $line) { print }" "$cfg.in"
+# done
+# fi
+# }
+#
+# _apply_theme() {
+#
+# # -- default theme -----------------------------------------------------
+#
+# tmux_conf_theme_colour_1=${tmux_conf_theme_colour_1:-#080808} # dark gray
+# tmux_conf_theme_colour_2=${tmux_conf_theme_colour_2:-#303030} # gray
+# tmux_conf_theme_colour_3=${tmux_conf_theme_colour_3:-#8a8a8a} # light gray
+# tmux_conf_theme_colour_4=${tmux_conf_theme_colour_4:-#00afff} # light blue
+# tmux_conf_theme_colour_5=${tmux_conf_theme_colour_5:-#ffff00} # yellow
+# tmux_conf_theme_colour_6=${tmux_conf_theme_colour_6:-#080808} # dark gray
+# tmux_conf_theme_colour_7=${tmux_conf_theme_colour_7:-#e4e4e4} # white
+# tmux_conf_theme_colour_8=${tmux_conf_theme_colour_8:-#080808} # dark gray
+# tmux_conf_theme_colour_9=${tmux_conf_theme_colour_9:-#ffff00} # yellow
+# tmux_conf_theme_colour_10=${tmux_conf_theme_colour_10:-#ff00af} # pink
+# tmux_conf_theme_colour_11=${tmux_conf_theme_colour_11:-#5fff00} # green
+# tmux_conf_theme_colour_12=${tmux_conf_theme_colour_12:-#8a8a8a} # light gray
+# tmux_conf_theme_colour_13=${tmux_conf_theme_colour_13:-#e4e4e4} # white
+# tmux_conf_theme_colour_14=${tmux_conf_theme_colour_14:-#080808} # dark gray
+# tmux_conf_theme_colour_15=${tmux_conf_theme_colour_15:-#080808} # dark gray
+# tmux_conf_theme_colour_16=${tmux_conf_theme_colour_16:-#d70000} # red
+# tmux_conf_theme_colour_17=${tmux_conf_theme_colour_17:-#e4e4e4} # white
+#
+# # -- panes -------------------------------------------------------------
+#
+# tmux_conf_theme_window_fg=${tmux_conf_theme_window_fg:-default}
+# tmux_conf_theme_window_bg=${tmux_conf_theme_window_bg:-default}
+# tmux_conf_theme_highlight_focused_pane=${tmux_conf_theme_highlight_focused_pane:-false}
+# tmux_conf_theme_focused_pane_fg=${tmux_conf_theme_focused_pane_fg:-default}
+# tmux_conf_theme_focused_pane_bg=${tmux_conf_theme_focused_pane_bg:-$tmux_conf_theme_colour_2}
+#
+# window_style="fg=$tmux_conf_theme_window_fg,bg=$tmux_conf_theme_window_bg"
+# if _is_enabled "$tmux_conf_theme_highlight_focused_pane"; then
+# window_active_style="fg=$tmux_conf_theme_focused_pane_fg,bg=$tmux_conf_theme_focused_pane_bg"
+# else
+# window_active_style="default"
+# fi
+#
+# tmux_conf_theme_pane_border_style=${tmux_conf_theme_pane_border_style:-thin}
+# tmux_conf_theme_pane_border=${tmux_conf_theme_pane_border:-$tmux_conf_theme_colour_2}
+# tmux_conf_theme_pane_active_border=${tmux_conf_theme_pane_active_border:-$tmux_conf_theme_colour_4}
+# tmux_conf_theme_pane_border_fg=${tmux_conf_theme_pane_border_fg:-$tmux_conf_theme_pane_border}
+# tmux_conf_theme_pane_active_border_fg=${tmux_conf_theme_pane_active_border_fg:-$tmux_conf_theme_pane_active_border}
+# case "$tmux_conf_theme_pane_border_style" in
+# fat)
+# tmux_conf_theme_pane_border_bg=${tmux_conf_theme_pane_border_bg:-$tmux_conf_theme_pane_border_fg}
+# tmux_conf_theme_pane_active_border_bg=${tmux_conf_theme_pane_active_border_bg:-$tmux_conf_theme_pane_active_border_fg}
+# ;;
+# thin|*)
+# tmux_conf_theme_pane_border_bg=${tmux_conf_theme_pane_border_bg:-default}
+# tmux_conf_theme_pane_active_border_bg=${tmux_conf_theme_pane_active_border_bg:-default}
+# ;;
+# esac
+#
+# tmux_conf_theme_pane_indicator=${tmux_conf_theme_pane_indicator:-$tmux_conf_theme_colour_4}
+# tmux_conf_theme_pane_active_indicator=${tmux_conf_theme_pane_active_indicator:-$tmux_conf_theme_colour_4}
+#
+# # -- status line -------------------------------------------------------
+#
+# tmux_conf_theme_left_separator_main=$(_decode_unicode_escapes "${tmux_conf_theme_left_separator_main-}")
+# tmux_conf_theme_left_separator_sub=$(_decode_unicode_escapes "${tmux_conf_theme_left_separator_sub-|}")
+# tmux_conf_theme_right_separator_main=$(_decode_unicode_escapes "${tmux_conf_theme_right_separator_main-}")
+# tmux_conf_theme_right_separator_sub=$(_decode_unicode_escapes "${tmux_conf_theme_right_separator_sub-|}")
+#
+# tmux_conf_theme_message_fg=${tmux_conf_theme_message_fg:-$tmux_conf_theme_colour_1}
+# tmux_conf_theme_message_bg=${tmux_conf_theme_message_bg:-$tmux_conf_theme_colour_5}
+# tmux_conf_theme_message_attr=${tmux_conf_theme_message_attr:-bold}
+#
+# tmux_conf_theme_message_command_fg=${tmux_conf_theme_message_command_fg:-$tmux_conf_theme_colour_5}
+# tmux_conf_theme_message_command_bg=${tmux_conf_theme_message_command_bg:-$tmux_conf_theme_colour_1}
+# tmux_conf_theme_message_command_attr=${tmux_conf_theme_message_command_attr:-bold}
+#
+# tmux_conf_theme_mode_fg=${tmux_conf_theme_mode_fg:-$tmux_conf_theme_colour_1}
+# tmux_conf_theme_mode_bg=${tmux_conf_theme_mode_bg:-$tmux_conf_theme_colour_5}
+# tmux_conf_theme_mode_attr=${tmux_conf_theme_mode_attr:-bold}
+#
+# tmux_conf_theme_status_fg=${tmux_conf_theme_status_fg:-$tmux_conf_theme_colour_3}
+# tmux_conf_theme_status_bg=${tmux_conf_theme_status_bg:-$tmux_conf_theme_colour_1}
+# tmux_conf_theme_status_attr=${tmux_conf_theme_status_attr:-none}
+#
+# tmux_conf_theme_terminal_title=${tmux_conf_theme_terminal_title:-#h ❐ #S ● #I #W}
+#
+# tmux_conf_theme_terminal_title=$(echo "$tmux_conf_theme_terminal_title" | sed \
+# -e 's%#{circled_window_index}%#(cut -c3- ~/.tmux.conf | sh -s _circled #I)%g' \
+# -e 's%#{circled_session_name}%#(cut -c3- ~/.tmux.conf | sh -s _circled #S)%g' \
+# -e 's%#{username}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} false #D)%g' \
+# -e 's%#{hostname}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} false #h #D)%g' \
+# -e 's%#{username_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} true #D)%g' \
+# -e 's%#{hostname_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} true #h #D)%g')
+#
+# tmux_conf_theme_window_status_fg=${tmux_conf_theme_window_status_fg:-$tmux_conf_theme_colour_3}
+# tmux_conf_theme_window_status_bg=${tmux_conf_theme_window_status_bg:-$tmux_conf_theme_colour_1}
+# tmux_conf_theme_window_status_attr=${tmux_conf_theme_window_status_attr:-none}
+# tmux_conf_theme_window_status_format=${tmux_conf_theme_window_status_format:-#I #W}
+#
+# tmux_conf_theme_window_status_current_fg=${tmux_conf_theme_window_status_current_fg:-$tmux_conf_theme_colour_1}
+# tmux_conf_theme_window_status_current_bg=${tmux_conf_theme_window_status_current_bg:-$tmux_conf_theme_colour_4}
+# tmux_conf_theme_window_status_current_attr=${tmux_conf_theme_window_status_current_attr:-bold}
+# tmux_conf_theme_window_status_current_format=${tmux_conf_theme_window_status_current_format:-#I #W}
+#
+# tmux_conf_theme_window_status_activity_fg=${tmux_conf_theme_window_status_activity_fg:-default}
+# tmux_conf_theme_window_status_activity_bg=${tmux_conf_theme_window_status_activity_bg:-default}
+# tmux_conf_theme_window_status_activity_attr=${tmux_conf_theme_window_status_activity_attr:-underscore}
+#
+# tmux_conf_theme_window_status_bell_fg=${tmux_conf_theme_window_status_bell_fg:-$tmux_conf_theme_colour_5}
+# tmux_conf_theme_window_status_bell_bg=${tmux_conf_theme_window_status_bell_bg:-default}
+# tmux_conf_theme_window_status_bell_attr=${tmux_conf_theme_window_status_bell_attr:-blink,bold}
+#
+# tmux_conf_theme_window_status_last_fg=${tmux_conf_theme_window_status_last_fg:-$tmux_conf_theme_colour_4}
+# tmux_conf_theme_window_status_last_bg=${tmux_conf_theme_window_status_last_bg:-default}
+# tmux_conf_theme_window_status_last_attr=${tmux_conf_theme_window_status_last_attr:-none}
+#
+# if [ x"$tmux_conf_theme_status_bg" = x"$tmux_conf_theme_window_status_bg" ]; then
+# spacer=''
+# spacer_current=' '
+# else
+# spacer=' '
+# spacer_current=' '
+# fi
+# if [ x"$tmux_conf_theme_status_bg" = x"$tmux_conf_theme_window_status_last_bg" ]; then
+# spacer_last=''
+# else
+# spacer_last=' '
+# fi
+# if [ x"$tmux_conf_theme_status_bg" = x"$tmux_conf_theme_window_status_activity_bg" ]; then
+# spacer_activity=''
+# else
+# spacer_activity=' '
+# fi
+# if [ x"$tmux_conf_theme_status_bg" = x"$tmux_conf_theme_window_status_bell_bg" ]; then
+# spacer_bell=''
+# else
+# spacer_bell=' '
+# fi
+# if [ x"$(tmux show -g -v status-justify)" = x"right" ]; then
+# if [ -z "$tmux_conf_theme_right_separator_main" ]; then
+# window_status_separator=' '
+# else
+# window_status_separator=''
+# fi
+# tmux_conf_theme_window_status_format="#[fg=$tmux_conf_theme_window_status_bg,bg=$tmux_conf_theme_status_bg,none]#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_bg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_bg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_bg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}$tmux_conf_theme_right_separator_main#[fg=$tmux_conf_theme_window_status_fg,bg=$tmux_conf_theme_window_status_bg,$tmux_conf_theme_window_status_attr]#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_fg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}$(printf "$tmux_conf_theme_window_status_last_attr" | perl -n -e 'print "#[none]" if !/default/ ; s/([a-z]+),?/#{?window_last_flag,#[\1],}/g; print if !/default/')#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_fg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}$(printf "$tmux_conf_theme_window_status_activity_attr" | perl -n -e 'print "#[none]" if !/default/ ; s/([a-z]+),?/#{?window_activity_flag,#[\1],}/g; print if !/default/')#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_fg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}$(printf "$tmux_conf_theme_window_status_bell_attr" | perl -n -e 'print "#[none]" if !/default/ ; s/([a-z]+),?/#{?window_bell_flag,#[\1],}/g; print if !/default/')#{?window_bell_flag,$spacer_bell,#{?window_activity_flag,$spacer_activity,#{?window_last_flag,$spacer_last,$spacer}}}$tmux_conf_theme_window_status_format#{?window_bell_flag,$spacer_bell,#{?window_activity_flag,$spacer_activity,#{?window_last_flag,$spacer_last,$spacer}}}#[fg=$tmux_conf_theme_status_bg,bg=$tmux_conf_theme_window_status_bg]#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}#[none]$tmux_conf_theme_right_separator_main"
+# tmux_conf_theme_window_status_current_format="#[fg=$tmux_conf_theme_window_status_current_bg,bg=$tmux_conf_theme_status_bg,none]$tmux_conf_theme_right_separator_main#[fg=$tmux_conf_theme_window_status_current_fg,bg=$tmux_conf_theme_window_status_current_bg,$tmux_conf_theme_window_status_current_attr]$spacer_current$tmux_conf_theme_window_status_current_format$spacer_current#[fg=$tmux_conf_theme_status_bg,bg=$tmux_conf_theme_window_status_current_bg,none]$tmux_conf_theme_right_separator_main"
+# else
+# if [ -z "$tmux_conf_theme_left_separator_main" ]; then
+# window_status_separator=' '
+# else
+# window_status_separator=''
+# fi
+# tmux_conf_theme_window_status_format="#[fg=$tmux_conf_theme_status_bg,bg=$tmux_conf_theme_window_status_bg,none]#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}$tmux_conf_theme_left_separator_main#[fg=$tmux_conf_theme_window_status_fg,bg=$tmux_conf_theme_window_status_bg,$tmux_conf_theme_window_status_attr]#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_fg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}$(printf "$tmux_conf_theme_window_status_last_attr" | perl -n -e 'print "#[none]" if !/default/ ; s/([a-z]+),?/#{?window_last_flag,#[\1],}/g; print if !/default/')#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_fg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}$(printf "$tmux_conf_theme_window_status_activity_attr" | perl -n -e 'print "#[none]" if !/default/ ; s/([a-z]+),?/#{?window_activity_flag,#[\1],}/g; print if !/default/')#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_fg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_bg" | perl -n -e "s/.+/#[bg=$&]/; print if !/default/"),}$(printf "$tmux_conf_theme_window_status_bell_attr" | perl -n -e 'print "#[none]" if /!default/ ; s/([a-z]+),?/#{?window_bell_flag,#[\1],}/g; print if !/default/')#{?window_bell_flag,$spacer_bell,#{?window_activity_flag,$spacer_activity,#{?window_last_flag,$spacer_last,$spacer}}}$tmux_conf_theme_window_status_format#{?window_bell_flag,$spacer_bell,#{?window_activity_flag,$spacer_activity,#{?window_last_flag,$spacer_last,$spacer}}}#[fg=$tmux_conf_theme_window_status_bg,bg=$tmux_conf_theme_status_bg]#{?window_last_flag,$(printf "$tmux_conf_theme_window_status_last_bg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_activity_flag,$(printf "$tmux_conf_theme_window_status_activity_bg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#{?window_bell_flag,$(printf "$tmux_conf_theme_window_status_bell_bg" | perl -n -e "s/.+/#[fg=$&]/; print if !/default/"),}#[none]$tmux_conf_theme_left_separator_main"
+# tmux_conf_theme_window_status_current_format="#[fg=$tmux_conf_theme_status_bg,bg=$tmux_conf_theme_window_status_current_bg,none]$tmux_conf_theme_left_separator_main#[fg=$tmux_conf_theme_window_status_current_fg,bg=$tmux_conf_theme_window_status_current_bg,$tmux_conf_theme_window_status_current_attr]$spacer_current$tmux_conf_theme_window_status_current_format$spacer_current#[fg=$tmux_conf_theme_window_status_current_bg,bg=$tmux_conf_theme_status_bg]$tmux_conf_theme_left_separator_main"
+# fi
+#
+# tmux_conf_theme_window_status_format=$(echo "$tmux_conf_theme_window_status_format" | sed \
+# -e 's%#{circled_window_index}%#(cut -c3- ~/.tmux.conf | sh -s _circled #I)%g' \
+# -e 's%#{circled_session_name}%#(cut -c3- ~/.tmux.conf | sh -s _circled #S)%g' \
+# -e 's%#{username}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} false #D)%g' \
+# -e 's%#{hostname}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} false #h #D)%g' \
+# -e 's%#{username_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} true #D)%g' \
+# -e 's%#{hostname_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} true #h #D)%g')
+# tmux_conf_theme_window_status_current_format=$(echo "$tmux_conf_theme_window_status_current_format" | sed \
+# -e 's%#{circled_window_index}%#(cut -c3- ~/.tmux.conf | sh -s _circled #I)%g' \
+# -e 's%#{circled_session_name}%#(cut -c3- ~/.tmux.conf | sh -s _circled #S)%g' \
+# -e 's%#{username}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} false #D)%g' \
+# -e 's%#{hostname}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} false #h #D)%g' \
+# -e 's%#{username_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} true #D)%g' \
+# -e 's%#{hostname_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} true #h #D)%g')
+#
+# # -- indicators
+#
+# tmux_conf_theme_pairing=${tmux_conf_theme_pairing:-⚇} # U+2687
+# tmux_conf_theme_pairing_fg=${tmux_conf_theme_pairing_fg:-none}
+# tmux_conf_theme_pairing_bg=${tmux_conf_theme_pairing_bg:-none}
+# tmux_conf_theme_pairing_attr=${tmux_conf_theme_pairing_attr:-none}
+#
+# tmux_conf_theme_prefix=${tmux_conf_theme_prefix:-⌨} # U+2328
+# tmux_conf_theme_prefix_fg=${tmux_conf_theme_prefix_fg:-none}
+# tmux_conf_theme_prefix_bg=${tmux_conf_theme_prefix_bg:-none}
+# tmux_conf_theme_prefix_attr=${tmux_conf_theme_prefix_attr:-none}
+#
+# tmux_conf_theme_root=${tmux_conf_theme_root:-!}
+# tmux_conf_theme_root_fg=${tmux_conf_theme_root_fg:-none}
+# tmux_conf_theme_root_bg=${tmux_conf_theme_root_bg:-none}
+# tmux_conf_theme_root_attr=${tmux_conf_theme_root_attr:-bold,blink}
+#
+# tmux_conf_theme_synchronized=${tmux_conf_theme_synchronized:-⚏} # U+268F
+# tmux_conf_theme_synchronized_fg=${tmux_conf_theme_synchronized_fg:-none}
+# tmux_conf_theme_synchronized_bg=${tmux_conf_theme_synchronized_bg:-none}
+# tmux_conf_theme_synchronized_attr=${tmux_conf_theme_synchronized_attr:-none}
+#
+# # -- status-left style
+#
+# tmux_conf_theme_status_left=${tmux_conf_theme_status_left-' ❐ #S | ↑#{?uptime_y, #{uptime_y}y,}#{?uptime_d, #{uptime_d}d,}#{?uptime_h, #{uptime_h}h,}#{?uptime_m, #{uptime_m}m,} '}
+# tmux_conf_theme_status_left_fg=${tmux_conf_theme_status_left_fg:-$tmux_conf_theme_colour_6,$tmux_conf_theme_colour_7,$tmux_conf_theme_colour_8}
+# tmux_conf_theme_status_left_bg=${tmux_conf_theme_status_left_bg:-$tmux_conf_theme_colour_9,$tmux_conf_theme_colour_10,$tmux_conf_theme_colour_11}
+# tmux_conf_theme_status_left_attr=${tmux_conf_theme_status_left_attr:-bold,none,none}
+#
+# if [ -n "$tmux_conf_theme_status_left" ]; then
+# status_left=$(echo "$tmux_conf_theme_status_left" | sed \
+# -e "s/#{pairing}/#[fg=$tmux_conf_theme_pairing_fg]#[bg=$tmux_conf_theme_pairing_bg]#[$tmux_conf_theme_pairing_attr]#{?session_many_attached,$tmux_conf_theme_pairing ,}/g" \
+# -e "s/#{prefix}/#[fg=$tmux_conf_theme_prefix_fg]#[bg=$tmux_conf_theme_prefix_bg]#[$tmux_conf_theme_prefix_attr]#{?client_prefix$tmux_conf_theme_prefix ,$(print "$tmux_conf_theme_prefix" | sed -e 's/./ /g') }/g" \
+# -e "s%#{synchronized}%#[fg=$tmux_conf_theme_synchronized_fg]#[bg=$tmux_conf_theme_synchronized_bg]#[$tmux_conf_theme_synchronized_attr]#{?pane_synchronized,$tmux_conf_theme_synchronized ,}%g" \
+# -e 's%#{circled_session_name}%#(cut -c3- ~/.tmux.conf | sh -s _circled #S)%g')
+#
+# if [ -n "$(tmux display -p '#{version}')" ]; then
+# status_left=$(echo "$status_left" | sed \
+# -e "s%#{root}%#[fg=$tmux_conf_theme_root_fg]#[bg=$tmux_conf_theme_root_bg]#[$tmux_conf_theme_root_attr]#{?#{==:#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} #D),root},$tmux_conf_theme_root,}#[inherit]%g")
+# else
+# status_left=$(echo "$status_left" | sed \
+# -e "s%#{root}%#[fg=$tmux_conf_theme_root_fg]#[bg=$tmux_conf_theme_root_bg]#[$tmux_conf_theme_root_attr]#(cut -c3- ~/.tmux.conf | sh -s _root #{pane_tty} $tmux_conf_theme_root #D)#[inherit]%g")
+# fi
+#
+# status_left=$(printf '%s' "$status_left" | awk \
+# -v status_bg="$tmux_conf_theme_status_bg" \
+# -v fg_="$tmux_conf_theme_status_left_fg" \
+# -v bg_="$tmux_conf_theme_status_left_bg" \
+# -v attr_="$tmux_conf_theme_status_left_attr" \
+# -v mainsep="$tmux_conf_theme_left_separator_main" \
+# -v subsep="$tmux_conf_theme_left_separator_sub" '
+# function subsplit(s, l, i, a, r)
+# {
+# l = split(s, a, ",")
+# for (i = 1; i <= l; ++i)
+# {
+# o = split(a[i], _, "(") - 1
+# c = split(a[i], _, ")") - 1
+# open += o - c
+# o_ = split(a[i], _, "{") - 1
+# c_ = split(a[i], _, "}") - 1
+# open_ += o_ - c_
+# o__ = split(a[i], _, "[") - 1
+# c__ = split(a[i], _, "]") - 1
+# open__ += o__ - c__
+#
+# if (i == l)
+# r = sprintf("%s%s", r, a[i])
+# else if (open || open_ || open__)
+# r = sprintf("%s%s,", r, a[i])
+# else
+# r = sprintf("%s%s#[fg=%s,bg=%s,%s]%s", r, a[i], fg[j], bg[j], attr[j], subsep)
+# }
+#
+# gsub(/#\[inherit\]/, sprintf("#[default]#[fg=%s,bg=%s,%s]", fg[j], bg[j], attr[j]), r)
+# return r
+# }
+# BEGIN {
+# FS = "|"
+# l1 = split(fg_, fg, ",")
+# l2 = split(bg_, bg, ",")
+# l3 = split(attr_, attr, ",")
+# l = l1 < l2 ? (l1 < l3 ? l1 : l3) : (l2 < l3 ? l2 : l3)
+# }
+# {
+# for (i = j = 1; i <= NF; ++i)
+# {
+# if (open || open_ || open__)
+# printf "|%s", subsplit($i)
+# else
+# {
+# if (i > 1)
+# printf "#[fg=%s,bg=%s,none]%s#[fg=%s,bg=%s,%s]%s", bg[j_], bg[j], mainsep, fg[j], bg[j], attr[j], subsplit($i)
+# else
+# printf "#[fg=%s,bg=%s,%s]%s", fg[j], bg[j], attr[j], subsplit($i)
+# }
+#
+# if (!open && !open_ && !open__)
+# {
+# j_ = j
+# j = j % l + 1
+# }
+# }
+# printf "#[fg=%s,bg=%s,none]%s", bg[j_], status_bg, mainsep
+# }')
+# fi
+#
+# status_left="$status_left "
+#
+# # -- status-right style
+#
+# tmux_conf_theme_status_right=${tmux_conf_theme_status_right-' #{prefix}#{pairing}#{synchronized}#{?battery_status, #{battery_status},}#{?battery_bar, #{battery_bar},}#{?battery_percentage, #{battery_percentage},} , %R , %d %b | #{username}#{root} | #{hostname} '}
+# tmux_conf_theme_status_right_fg=${tmux_conf_theme_status_right_fg:-$tmux_conf_theme_colour_12,$tmux_conf_theme_colour_13,$tmux_conf_theme_colour_14}
+# tmux_conf_theme_status_right_bg=${tmux_conf_theme_status_right_bg:-$tmux_conf_theme_colour_15,$tmux_conf_theme_colour_16,$tmux_conf_theme_colour_17}
+# tmux_conf_theme_status_right_attr=${tmux_conf_theme_status_right_attr:-none,none,bold}
+#
+# if [ -n "$tmux_conf_theme_status_right" ]; then
+# status_right=$(echo "$tmux_conf_theme_status_right" | sed \
+# -e "s/#{pairing}/#[fg=$tmux_conf_theme_pairing_fg]#[bg=$tmux_conf_theme_pairing_bg]#[$tmux_conf_theme_pairing_attr]#{?session_many_attached,$tmux_conf_theme_pairing ,}/g" \
+# -e "s/#{prefix}/#[fg=$tmux_conf_theme_prefix_fg]#[bg=$tmux_conf_theme_prefix_bg]#[$tmux_conf_theme_prefix_attr]#{?client_prefix,$tmux_conf_theme_prefix ,$(printf "$tmux_conf_theme_prefix" | sed -e 's/./ /g') }/g" \
+# -e "s%#{synchronized}%#[fg=$tmux_conf_theme_synchronized_fg]#[bg=$tmux_conf_theme_synchronized_bg]#[$tmux_conf_theme_synchronized_attr]#{?pane_synchronized,$tmux_conf_theme_synchronized ,}%g" \
+# -e 's%#{circled_session_name}%#(cut -c3- ~/.tmux.conf | sh -s _circled #S)%g')
+#
+# if [ -n "$(tmux display -p '#{version}')" ]; then
+# status_right=$(echo "$status_right" | sed \
+# -e "s%#{root}%#[fg=$tmux_conf_theme_root_fg]#[bg=$tmux_conf_theme_root_bg]#[$tmux_conf_theme_root_attr]#{?#{==:#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} #D),root},$tmux_conf_theme_root,}#[inherit]%g")
+# else
+# status_right=$(echo "$status_right" | sed \
+# -e "s%#{root}%#[fg=$tmux_conf_theme_root_fg]#[bg=$tmux_conf_theme_root_bg]#[$tmux_conf_theme_root_attr]#(cut -c3- ~/.tmux.conf | sh -s _root #{pane_tty} $tmux_conf_theme_root #D)#[inherit]%g")
+# fi
+#
+# status_right=$(printf '%s' "$status_right" | awk \
+# -v status_bg="$tmux_conf_theme_status_bg" \
+# -v fg_="$tmux_conf_theme_status_right_fg" \
+# -v bg_="$tmux_conf_theme_status_right_bg" \
+# -v attr_="$tmux_conf_theme_status_right_attr" \
+# -v mainsep="$tmux_conf_theme_right_separator_main" \
+# -v subsep="$tmux_conf_theme_right_separator_sub" '
+# function subsplit(s, l, i, a, r)
+# {
+# l = split(s, a, ",")
+# for (i = 1; i <= l; ++i)
+# {
+# o = split(a[i], _, "(") - 1
+# c = split(a[i], _, ")") - 1
+# open += o - c
+# o_ = split(a[i], _, "{") - 1
+# c_ = split(a[i], _, "}") - 1
+# open_ += o_ - c_
+# o__ = split(a[i], _, "[") - 1
+# c__ = split(a[i], _, "]") - 1
+# open__ += o__ - c__
+#
+# if (i == l)
+# r = sprintf("%s%s", r, a[i])
+# else if (open || open_ || open__)
+# r = sprintf("%s%s,", r, a[i])
+# else
+# r = sprintf("%s%s#[fg=%s,bg=%s,%s]%s", r, a[i], fg[j], bg[j], attr[j], subsep)
+# }
+#
+# gsub(/#\[inherit\]/, sprintf("#[default]#[fg=%s,bg=%s,%s]", fg[j], bg[j], attr[j]), r)
+# return r
+# }
+# BEGIN {
+# FS = "|"
+# l1 = split(fg_, fg, ",")
+# l2 = split(bg_, bg, ",")
+# l3 = split(attr_, attr, ",")
+# l = l1 < l2 ? (l1 < l3 ? l1 : l3) : (l2 < l3 ? l2 : l3)
+# }
+# {
+# for (i = j = 1; i <= NF; ++i)
+# {
+# if (open_ || open || open__)
+# printf "|%s", subsplit($i)
+# else
+# printf "#[fg=%s,bg=%s,none]%s#[fg=%s,bg=%s,%s]%s", bg[j], (i == 1) ? status_bg : bg[j_], mainsep, fg[j], bg[j], attr[j], subsplit($i)
+#
+# if (!open && !open_ && !open__)
+# {
+# j_ = j
+# j = j % l + 1
+# }
+# }
+# }')
+# fi
+#
+# # -- variables
+#
+# tmux_conf_battery_bar_symbol_full=$(_decode_unicode_escapes "${tmux_conf_battery_bar_symbol_full:-◼}")
+# tmux_conf_battery_bar_symbol_empty=$(_decode_unicode_escapes "${tmux_conf_battery_bar_symbol_empty:-◻}")
+# tmux_conf_battery_bar_length=${tmux_conf_battery_bar_length:-auto}
+# tmux_conf_battery_bar_palette=${tmux_conf_battery_bar_palette:-gradient}
+# tmux_conf_battery_hbar_palette=${tmux_conf_battery_hbar_palette:-gradient}
+# tmux_conf_battery_vbar_palette=${tmux_conf_battery_vbar_palette:-gradient}
+# tmux_conf_battery_status_charging=$(_decode_unicode_escapes "${tmux_conf_battery_status_charging:-↑}") # U+2191
+# tmux_conf_battery_status_discharging=$(_decode_unicode_escapes "${tmux_conf_battery_status_discharging:-↓}") # U+2193
+#
+# _pkillf 'cut -c3- ~/\.tmux\.conf \| sh -s _battery_bar'
+# _battery_info
+# if [ "$charge" != 0 ]; then
+# case "$status_left $status_right" in
+# *'#{battery_status}'*|*'#{battery_bar}'*|*'#{battery_hbar}'*|*'#{battery_vbar}'*|*'#{battery_percentage}'*)
+# status_left=$(echo "$status_left" | sed -E \
+# -e 's/#\{(\?)?battery_bar/#\{\1@battery_bar/g' \
+# -e 's/#\{(\?)?battery_hbar/#\{\1@battery_hbar/g' \
+# -e 's/#\{(\?)?battery_vbar/#\{\1@battery_vbar/g' \
+# -e 's/#\{(\?)?battery_status/#\{\1@battery_status/g' \
+# -e 's/#\{(\?)?battery_percentage/#\{\1@battery_percentage/g')
+# status_right=$(echo "$status_right" | sed -E \
+# -e 's/#\{(\?)?battery_bar/#\{\1@battery_bar/g' \
+# -e 's/#\{(\?)?battery_hbar/#\{\1@battery_hbar/g' \
+# -e 's/#\{(\?)?battery_vbar/#\{\1@battery_vbar/g' \
+# -e 's/#\{(\?)?battery_status/#\{\1@battery_status/g' \
+# -e 's/#\{(\?)?battery_percentage/#\{\1@battery_percentage/g')
+# status_right="#(printf '\n'; nice cut -c3- ~/.tmux.conf | sh -s _battery_status \"$tmux_conf_battery_status_charging\" \"$tmux_conf_battery_status_discharging\")$status_right"
+# interval=60
+# if [ $_tmux_version -ge 302 ]; then
+# tmux run -b "trap 'exit 0' TERM; while :; do nice cut -c3- ~/.tmux.conf | sh -s _battery_bar \"$tmux_conf_battery_bar_symbol_full\" \"$tmux_conf_battery_bar_symbol_empty\" \"$tmux_conf_battery_bar_length\" \"$tmux_conf_battery_bar_palette\" \"$tmux_conf_battery_hbar_palette\" \"$tmux_conf_battery_vbar_palette\"; sleep $interval; done"
+# elif [ $_tmux_version -gt 204 ]; then
+# status_right="#(printf '\n'; while :; do nice cut -c3- ~/.tmux.conf | sh -s _battery_bar \"$tmux_conf_battery_bar_symbol_full\" \"$tmux_conf_battery_bar_symbol_empty\" \"$tmux_conf_battery_bar_length\" \"$tmux_conf_battery_bar_palette\" \"$tmux_conf_battery_hbar_palette\" \"$tmux_conf_battery_vbar_palette\"; sleep $interval; done)$status_right"
+# else
+# status_right="#(nice cut -c3- ~/.tmux.conf | sh -s _battery_bar \"$tmux_conf_battery_bar_symbol_full\" \"$tmux_conf_battery_bar_symbol_empty\" \"$tmux_conf_battery_bar_length\" \"$tmux_conf_battery_bar_palette\" \"$tmux_conf_battery_hbar_palette\" \"$tmux_conf_battery_vbar_palette\")$status_right"
+# fi
+# ;;
+# esac
+# fi
+#
+# case "$status_left $status_right" in
+# *'#{username}'*|*'#{hostname}'*|*'#{username_ssh}'*|*'#{hostname_ssh}'*)
+# status_left=$(echo "$status_left" | sed \
+# -e 's%#{username}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} false #D)%g' \
+# -e 's%#{hostname}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} false #h #D)%g' \
+# -e 's%#{username_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} true #D)%g' \
+# -e 's%#{hostname_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} true #h #D)%g')
+# status_right=$(echo "$status_right" | sed \
+# -e 's%#{username}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} false #D)%g' \
+# -e 's%#{hostname}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} false #h #D)%g' \
+# -e 's%#{username_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _username #{pane_tty} true #D)%g' \
+# -e 's%#{hostname_ssh}%#(cut -c3- ~/.tmux.conf | sh -s _hostname #{pane_tty} true #h #D)%g')
+# ;;
+# esac
+#
+# _pkillf 'cut -c3- ~/\.tmux\.conf \| sh -s _uptime'
+# case "$status_left $status_right" in
+# *'#{uptime_d}'*|*'#{uptime_h}'*|*'#{uptime_m}'*|*'#{uptime_s}'*)
+# status_left=$(echo "$status_left" | sed -E \
+# -e 's/#\{(\?)?uptime_y/#\{\1@uptime_y/g' \
+# -e 's/#\{(\?)?uptime_d/#\{\1@uptime_d/g' \
+# -e '/@uptime_y/ s/@uptime_d/@uptime_dy/g' \
+# -e 's/#\{(\?)?uptime_h/#\{\1@uptime_h/g' \
+# -e 's/#\{(\?)?uptime_m/#\{\1@uptime_m/g' \
+# -e 's/#\{(\?)?uptime_s/#\{\1@uptime_s/g')
+# status_right=$(echo "$status_right" | sed -E \
+# -e 's/#\{(\?)?uptime_y/#\{\1@uptime_y/g' \
+# -e 's/#\{(\?)?uptime_d/#\{\1@uptime_d/g' \
+# -e '/@uptime_y/ s/@uptime_d/@uptime_dy/g' \
+# -e 's/#\{(\?)?uptime_h/#\{\1@uptime_h/g' \
+# -e 's/#\{(\?)?uptime_m/#\{\1@uptime_m/g' \
+# -e 's/#\{(\?)?uptime_s/#\{\1@uptime_s/g')
+# interval=60
+# case "$status_left $status_right" in
+# *'#{@uptime_s}'*)
+# interval=$(tmux show -gv status-interval)
+# ;;
+# esac
+# if [ $_tmux_version -ge 302 ]; then
+# tmux run -b "trap 'exit 0' TERM; while :; do nice cut -c3- ~/.tmux.conf | sh -s _uptime; sleep $interval; done"
+# elif [ $_tmux_version -gt 204 ]; then
+# status_right="#(printf '\n'; while :; do nice cut -c3- ~/.tmux.conf | sh -s _uptime; sleep $interval; done)$status_right"
+# else
+# status_right="#(nice cut -c3- ~/.tmux.conf | sh -s _uptime)$status_right"
+# fi
+# ;;
+# esac
+#
+# _pkillf 'cut -c3- ~/\.tmux\.conf \| sh -s _loadavg'
+# case "$status_left $status_right" in
+# *'#{loadavg}'*)
+# status_left=$(echo "$status_left" | sed -E \
+# -e 's/#\{(\?)?loadavg/#\{\1@loadavg/g')
+# status_right=$(echo "$status_right" | sed -E \
+# -e 's/#\{(\?)?loadavg/#\{\1@loadavg/g')
+# interval=$(tmux show -gv status-interval)
+# if [ $_tmux_version -ge 302 ]; then
+# tmux run -b "trap 'exit 0' TERM; while :; do nice cut -c3- ~/.tmux.conf | sh -s _loadavg; sleep $interval; done"
+# elif [ $_tmux_version -gt 204 ]; then
+# status_right="#(printf '\n'; while :; do nice cut -c3- ~/.tmux.conf | sh -s _loadavg; sleep $interval; done)$status_right"
+# else
+# status_right="#(nice cut -c3- ~/.tmux.conf | sh -s _loadavg)$status_right"
+# fi
+# ;;
+# esac
+#
+# # -- clock -------------------------------------------------------------
+#
+# tmux_conf_theme_clock_colour=${tmux_conf_theme_clock_colour:-$tmux_conf_theme_colour_4}
+# tmux_conf_theme_clock_style=${tmux_conf_theme_clock_style:-24}
+#
+# # -- custom variables ---------------------------------------------------
+#
+# if [ -f ~/.tmux.conf.local ] && [ x"$(cut -c3- ~/.tmux.conf.local | sh 2>/dev/null -s printf probe)" = x"probe" ]; then
+# replacements=$(perl -n -e 'print if s!^#\s+([^()\s]+)\s*\(\)\s*{\s*\n!s%#\\\{\1\\\}%#(cut -c3- ~/.tmux.conf.local | sh -s \1)%g; !p' < ~/.tmux.conf.local)
+# status_left=$(echo "$status_left" | perl -p -e "$replacements" || echo "$status_left")
+# status_right=$(echo "$status_right" | perl -p -e "$replacements" || echo "$status_right")
+# fi
+#
+# # -----------------------------------------------------------------------
+#
+# tmux setw -g window-style "$window_style" \; setw -g window-active-style "$window_active_style" \;\
+# setw -g pane-border-style "fg=$tmux_conf_theme_pane_border_fg,bg=$tmux_conf_theme_pane_border_bg" \; set -g pane-active-border-style "fg=$tmux_conf_theme_pane_active_border_fg,bg=$tmux_conf_theme_pane_active_border_bg" \;\
+# set -g display-panes-colour "$tmux_conf_theme_pane_indicator" \; set -g display-panes-active-colour "$tmux_conf_theme_pane_active_indicator" \;\
+# set -g message-style "fg=$tmux_conf_theme_message_fg,bg=$tmux_conf_theme_message_bg,$tmux_conf_theme_message_attr" \;\
+# set -g message-command-style "fg=$tmux_conf_theme_message_command_fg,bg=$tmux_conf_theme_message_command_bg,$tmux_conf_theme_message_command_attr" \;\
+# setw -g mode-style "fg=$tmux_conf_theme_mode_fg,bg=$tmux_conf_theme_mode_bg,$tmux_conf_theme_mode_attr" \;\
+# set -g status-style "fg=$tmux_conf_theme_status_fg,bg=$tmux_conf_theme_status_bg,$tmux_conf_theme_status_attr" \;\
+# set -g status-left-style "fg=$tmux_conf_theme_status_fg,bg=$tmux_conf_theme_status_bg,$tmux_conf_theme_status_attr" \;\
+# set -g status-right-style "fg=$tmux_conf_theme_status_fg,bg=$tmux_conf_theme_status_bg,$tmux_conf_theme_status_attr" \;\
+# set -g set-titles-string "$(_decode_unicode_escapes "$tmux_conf_theme_terminal_title")" \;\
+# setw -g window-status-style "fg=$tmux_conf_theme_window_status_fg,bg=$tmux_conf_theme_window_status_bg,$tmux_conf_theme_window_status_attr" \;\
+# setw -g window-status-format "$(_decode_unicode_escapes "$tmux_conf_theme_window_status_format")" \;\
+# setw -g window-status-current-style "fg=$tmux_conf_theme_window_status_current_fg,bg=$tmux_conf_theme_window_status_current_bg,$tmux_conf_theme_window_status_current_attr" \;\
+# setw -g window-status-current-format "$(_decode_unicode_escapes "$tmux_conf_theme_window_status_current_format")" \;\
+# setw -g window-status-activity-style "fg=$tmux_conf_theme_window_status_activity_fg,bg=$tmux_conf_theme_window_status_activity_bg,$tmux_conf_theme_window_status_activity_attr" \;\
+# setw -g window-status-bell-style "fg=$tmux_conf_theme_window_status_bell_fg,bg=$tmux_conf_theme_window_status_bell_bg,$tmux_conf_theme_window_status_bell_attr" \;\
+# setw -g window-status-last-style "fg=$tmux_conf_theme_window_status_last_fg,bg=$tmux_conf_theme_window_status_last_bg,$tmux_conf_theme_window_status_last_attr" \;\
+# setw -g window-status-separator "$window_status_separator" \;\
+# set -g status-left-length 1000 \; set -g status-left "$(_decode_unicode_escapes "$status_left")" \;\
+# set -g status-right-length 1000 \; set -g status-right "$(_decode_unicode_escapes "$status_right")" \;\
+# setw -g clock-mode-colour "$tmux_conf_theme_clock_colour" \;\
+# setw -g clock-mode-style "$tmux_conf_theme_clock_style"
+# }
+#
+# _apply_configuration() {
+#
+# if ! command -v perl > /dev/null 2>&1; then
+# tmux run -b 'tmux set display-time 3000 \; display "This configuration requires perl" \; set -u display-time'
+# return
+# fi
+# if ! command -v sed > /dev/null 2>&1; then
+# tmux run -b 'tmux set display-time 3000 \; display "This configuration requires sed" \; set -u display-time'
+# return
+# fi
+# if ! command -v awk > /dev/null 2>&1; then
+# tmux run -b 'tmux set display-time 3000 \; display "This configuration requires awk" \; set -u display-time'
+# return
+# fi
+#
+# # see https://github.com/ChrisJohnsen/tmux-MacOSX-pasteboard
+# if command -v reattach-to-user-namespace > /dev/null 2>&1; then
+# default_shell="$(tmux show -gv default-shell)"
+# case "$default_shell" in
+# *fish)
+# tmux set -g default-command "reattach-to-user-namespace -l $default_shell"
+# ;;
+# *sh)
+# tmux set -g default-command "exec $default_shell... 2> /dev/null & reattach-to-user-namespace -l $default_shell"
+# ;;
+# esac
+# fi
+#
+# case "$_uname_s" in
+# *CYGWIN*|*MSYS*)
+# # prevent Cygwin and MSYS2 from cd-ing into home directory when evaluating /etc/profile
+# tmux setenv -g CHERE_INVOKING 1
+# ;;
+# esac
+#
+# _apply_overrides
+# _apply_theme&
+# _apply_bindings&
+#
+# # shellcheck disable=SC2046
+# tmux setenv -gu tmux_conf_dummy $(printenv | grep -E -o '^tmux_conf_[^=]+' | awk '{printf "; setenv -gu %s", $0}')
+# wait
+# }
+#
+# _urlview() {
+# tmux capture-pane -J -S - -E - -b "urlview-$1" -t "$1"
+# tmux split-window "tmux show-buffer -b urlview-$1 | urlview || true; tmux delete-buffer -b urlview-$1"
+# }
+#
+# _fpp() {
+# tmux capture-pane -J -S - -E - -b "fpp-$1" -t "$1"
+# tmux split-window "tmux show-buffer -b fpp-$1 | fpp || true; tmux delete-buffer -b fpp-$1"
+# }
+#
+# "$@"
+set -g mouse off
diff --git a/dotfiles/.tmux.conf.local b/dotfiles/.tmux.conf.local
new file mode 100644
index 0000000..6ec9720
--- /dev/null
+++ b/dotfiles/.tmux.conf.local
@@ -0,0 +1,404 @@
+# : << EOF
+# https://github.com/gpakosz/.tmux
+# (‑●‑●)> dual licensed under the WTFPL v2 license and the MIT license,
+# without any warranty.
+# Copyright 2012— Gregory Pakosz (@gpakosz).
+
+
+# -- navigation ----------------------------------------------------------------
+
+# if you're running tmux within iTerm2
+# - and tmux is 1.9 or 1.9a
+# - and iTerm2 is configured to let option key act as +Esc
+# - and iTerm2 is configured to send [1;9A -> [1;9D for option + arrow keys
+# then uncomment the following line to make Meta + arrow keys mapping work
+#set -ga terminal-overrides "*:kUP3=\e[1;9A,*:kDN3=\e[1;9B,*:kRIT3=\e[1;9C,*:kLFT3=\e[1;9D"
+
+
+# -- windows & pane creation ---------------------------------------------------
+
+# new window retains current path, possible values are:
+# - true
+# - false (default)
+tmux_conf_new_window_retain_current_path=false
+
+# new pane retains current path, possible values are:
+# - true (default)
+# - false
+tmux_conf_new_pane_retain_current_path=true
+
+# new pane tries to reconnect ssh sessions (experimental), possible values are:
+# - true
+# - false (default)
+tmux_conf_new_pane_reconnect_ssh=true
+
+# prompt for session name when creating a new session, possible values are:
+# - true
+# - false (default)
+tmux_conf_new_session_prompt=false
+
+
+# -- display -------------------------------------------------------------------
+
+# RGB 24-bit colour support (tmux >= 2.2), possible values are:
+# - true
+# - false (default)
+tmux_conf_24b_colour=true
+
+# default theme
+tmux_conf_theme_colour_1="#080808" # dark gray
+tmux_conf_theme_colour_2="#303030" # gray
+tmux_conf_theme_colour_3="#8a8a8a" # light gray
+tmux_conf_theme_colour_4="#00afff" # light blue
+tmux_conf_theme_colour_5="#ffff00" # yellow
+tmux_conf_theme_colour_6="#080808" # dark gray
+tmux_conf_theme_colour_7="#e4e4e4" # white
+tmux_conf_theme_colour_8="#080808" # dark gray
+tmux_conf_theme_colour_9="#ffff00" # yellow
+tmux_conf_theme_colour_10="#ff00af" # pink
+tmux_conf_theme_colour_11="#5fff00" # green
+tmux_conf_theme_colour_12="#8a8a8a" # light gray
+tmux_conf_theme_colour_13="#e4e4e4" # white
+tmux_conf_theme_colour_14="#080808" # dark gray
+tmux_conf_theme_colour_15="#080808" # dark gray
+tmux_conf_theme_colour_16="#d70000" # red
+tmux_conf_theme_colour_17="#e4e4e4" # white
+
+# default theme (ansi)
+#tmux_conf_theme_colour_1="colour0"
+#tmux_conf_theme_colour_2="colour8"
+#tmux_conf_theme_colour_3="colour8"
+#tmux_conf_theme_colour_4="colour14"
+#tmux_conf_theme_colour_5="colour11"
+#tmux_conf_theme_colour_6="colour0"
+#tmux_conf_theme_colour_7="colour15"
+#tmux_conf_theme_colour_8="colour0"
+#tmux_conf_theme_colour_9="colour11"
+#tmux_conf_theme_colour_10="colour13"
+#tmux_conf_theme_colour_11="colour10"
+#tmux_conf_theme_colour_12="colour8"
+#tmux_conf_theme_colour_13="colour15"
+#tmux_conf_theme_colour_14="colour0"
+#tmux_conf_theme_colour_15="colour0"
+#tmux_conf_theme_colour_16="colour1"
+#tmux_conf_theme_colour_17="colour15"
+
+# window style
+tmux_conf_theme_window_fg="default"
+tmux_conf_theme_window_bg="default"
+
+# highlight focused pane (tmux >= 2.1), possible values are:
+# - true
+# - false (default)
+tmux_conf_theme_highlight_focused_pane=false
+
+# focused pane colours:
+tmux_conf_theme_focused_pane_bg="$tmux_conf_theme_colour_2"
+
+# pane border style, possible values are:
+# - thin (default)
+# - fat
+tmux_conf_theme_pane_border_style=thin
+
+# pane borders colours:
+tmux_conf_theme_pane_border="$tmux_conf_theme_colour_2"
+tmux_conf_theme_pane_active_border="$tmux_conf_theme_colour_4"
+
+# pane indicator colours (when you hit + q)
+tmux_conf_theme_pane_indicator="$tmux_conf_theme_colour_4"
+tmux_conf_theme_pane_active_indicator="$tmux_conf_theme_colour_4"
+
+# status line style
+tmux_conf_theme_message_fg="$tmux_conf_theme_colour_1"
+tmux_conf_theme_message_bg="$tmux_conf_theme_colour_5"
+tmux_conf_theme_message_attr="bold"
+
+# status line command style ( : Escape)
+tmux_conf_theme_message_command_fg="$tmux_conf_theme_colour_5"
+tmux_conf_theme_message_command_bg="$tmux_conf_theme_colour_1"
+tmux_conf_theme_message_command_attr="bold"
+
+# window modes style
+tmux_conf_theme_mode_fg="$tmux_conf_theme_colour_1"
+tmux_conf_theme_mode_bg="$tmux_conf_theme_colour_5"
+tmux_conf_theme_mode_attr="bold"
+
+# status line style
+tmux_conf_theme_status_fg="$tmux_conf_theme_colour_3"
+tmux_conf_theme_status_bg="$tmux_conf_theme_colour_1"
+tmux_conf_theme_status_attr="none"
+
+# terminal title
+# - built-in variables are:
+# - #{circled_window_index}
+# - #{circled_session_name}
+# - #{hostname}
+# - #{hostname_ssh}
+# - #{username}
+# - #{username_ssh}
+#tmux_conf_theme_terminal_title="#{username}@#{hostname}: #S - #I - #W"
+tmux_conf_theme_terminal_title=" "
+
+# window status style
+# - built-in variables are:
+# - #{circled_window_index}
+# - #{circled_session_name}
+# - #{hostname}
+# - #{hostname_ssh}
+# - #{username}
+# - #{username_ssh}
+tmux_conf_theme_window_status_fg="$tmux_conf_theme_colour_3"
+tmux_conf_theme_window_status_bg="$tmux_conf_theme_colour_1"
+tmux_conf_theme_window_status_attr="none"
+tmux_conf_theme_window_status_format="#I #W"
+#tmux_conf_theme_window_status_format="#{circled_window_index} #W"
+#tmux_conf_theme_window_status_format="#I #W#{?window_bell_flag,🔔,}#{?window_zoomed_flag,🔍,}"
+
+# window current status style
+# - built-in variables are:
+# - #{circled_window_index}
+# - #{circled_session_name}
+# - #{hostname}
+# - #{hostname_ssh}
+# - #{username}
+# - #{username_ssh}
+tmux_conf_theme_window_status_current_fg="$tmux_conf_theme_colour_1"
+tmux_conf_theme_window_status_current_bg="$tmux_conf_theme_colour_4"
+tmux_conf_theme_window_status_current_attr="bold"
+tmux_conf_theme_window_status_current_format="#I #W"
+#tmux_conf_theme_window_status_current_format="#{circled_window_index} #W"
+#tmux_conf_theme_window_status_current_format="#I #W#{?window_zoomed_flag,🔍,}"
+
+# window activity status style
+tmux_conf_theme_window_status_activity_fg="default"
+tmux_conf_theme_window_status_activity_bg="default"
+tmux_conf_theme_window_status_activity_attr="underscore"
+
+# window bell status style
+tmux_conf_theme_window_status_bell_fg="$tmux_conf_theme_colour_5"
+tmux_conf_theme_window_status_bell_bg="default"
+tmux_conf_theme_window_status_bell_attr="blink,bold"
+
+# window last status style
+tmux_conf_theme_window_status_last_fg="$tmux_conf_theme_colour_4"
+tmux_conf_theme_window_status_last_bg="$tmux_conf_theme_colour_2"
+tmux_conf_theme_window_status_last_attr="none"
+
+# status left/right sections separators
+#tmux_conf_theme_left_separator_main=""
+#tmux_conf_theme_left_separator_sub="|"
+#tmux_conf_theme_right_separator_main=""
+#tmux_conf_theme_right_separator_sub="|"
+tmux_conf_theme_left_separator_main="\uE0B0" # /!\ you don't need to install Powerline
+tmux_conf_theme_left_separator_sub="\uE0B1" # you only need fonts patched with
+tmux_conf_theme_right_separator_main="\uE0B2" # Powerline symbols or the standalone
+tmux_conf_theme_right_separator_sub="\uE0B3" # PowerlineSymbols.otf font, see README.md
+
+# status left/right content:
+# - separate main sections with "|"
+# - separate subsections with ","
+# - built-in variables are:
+# - #{battery_bar}
+# - #{battery_hbar}
+# - #{battery_percentage}
+# - #{battery_status}
+# - #{battery_vbar}
+# - #{circled_session_name}
+# - #{hostname_ssh}
+# - #{hostname}
+# - #{loadavg}
+# - #{pairing}
+# - #{prefix}
+# - #{root}
+# - #{synchronized}
+# - #{uptime_y}
+# - #{uptime_d} (modulo 365 when #{uptime_y} is used)
+# - #{uptime_h}
+# - #{uptime_m}
+# - #{uptime_s}
+# - #{username}
+# - #{username_ssh}
+#tmux_conf_theme_status_left=" ❐ #S | ↑#{?uptime_y, #{uptime_y}y,}#{?uptime_d, #{uptime_d}d,}#{?uptime_h, #{uptime_h}h,}#{?uptime_m, #{uptime_m}m,} "
+tmux_conf_theme_status_left=" [#S] | #{username}@#{hostname} ,"
+#tmux_conf_theme_status_left=" [#S] "
+#tmux_conf_theme_status_right=" #{prefix}#{pairing}#{synchronized}#{?battery_status,#{battery_status},}#{?battery_bar, #{battery_bar},}#{?battery_percentage, #{battery_percentage},} , %R , %d %b | #{username}#{root} | #{hostname} "
+tmux_conf_theme_status_right=", %R , %d %b | #{battery_percentage} "
+
+# status left style
+tmux_conf_theme_status_left_fg="$tmux_conf_theme_colour_1,$tmux_conf_theme_colour_12"
+tmux_conf_theme_status_left_bg="$tmux_conf_theme_colour_3,$tmux_conf_theme_colour_1"
+tmux_conf_theme_status_left_attr="bold,none,none"
+
+# status right style
+tmux_conf_theme_status_right_fg="$tmux_conf_theme_colour_12,$tmux_conf_theme_colour_1"
+tmux_conf_theme_status_right_bg="$tmux_conf_theme_colour_1,$tmux_conf_theme_colour_3"
+tmux_conf_theme_status_right_attr="none,none,none"
+
+# pairing indicator
+tmux_conf_theme_pairing="⚇" # U+2687
+tmux_conf_theme_pairing_fg="none"
+tmux_conf_theme_pairing_bg="none"
+tmux_conf_theme_pairing_attr="none"
+
+# prefix indicator
+tmux_conf_theme_prefix="⌨" # U+2328
+tmux_conf_theme_prefix_fg="none"
+tmux_conf_theme_prefix_bg="none"
+tmux_conf_theme_prefix_attr="none"
+
+# root indicator
+tmux_conf_theme_root="!"
+tmux_conf_theme_root_fg="none"
+tmux_conf_theme_root_bg="none"
+tmux_conf_theme_root_attr="bold,blink"
+
+# synchronized indicator
+tmux_conf_theme_synchronized="⚏" # U+268F
+tmux_conf_theme_synchronized_fg="none"
+tmux_conf_theme_synchronized_bg="none"
+tmux_conf_theme_synchronized_attr="none"
+
+# battery bar symbols
+tmux_conf_battery_bar_symbol_full="◼"
+tmux_conf_battery_bar_symbol_empty="◻"
+#tmux_conf_battery_bar_symbol_full="♥"
+#tmux_conf_battery_bar_symbol_empty="·"
+
+# battery bar length (in number of symbols), possible values are:
+# - auto
+# - a number, e.g. 5
+tmux_conf_battery_bar_length="auto"
+
+# battery bar palette, possible values are:
+# - gradient (default)
+# - heat
+# - "colour_full_fg,colour_empty_fg,colour_bg"
+tmux_conf_battery_bar_palette="gradient"
+#tmux_conf_battery_bar_palette="#d70000,#e4e4e4,#000000" # red, white, black
+
+# battery hbar palette, possible values are:
+# - gradient (default)
+# - heat
+# - "colour_low,colour_half,colour_full"
+tmux_conf_battery_hbar_palette="gradient"
+#tmux_conf_battery_hbar_palette="#d70000,#ff5f00,#5fff00" # red, orange, green
+
+# battery vbar palette, possible values are:
+# - gradient (default)
+# - heat
+# - "colour_low,colour_half,colour_full"
+tmux_conf_battery_vbar_palette="gradient"
+#tmux_conf_battery_vbar_palette="#d70000,#ff5f00,#5fff00" # red, orange, green
+
+# symbols used to indicate whether battery is charging or discharging
+tmux_conf_battery_status_charging="↑" # U+2191
+tmux_conf_battery_status_discharging="↓" # U+2193
+#tmux_conf_battery_status_charging="🔌" # U+1F50C
+#tmux_conf_battery_status_discharging="🔋" # U+1F50B
+
+# clock style (when you hit + t)
+# you may want to use %I:%M %p in place of %R in tmux_conf_theme_status_right
+tmux_conf_theme_clock_colour="$tmux_conf_theme_colour_4"
+tmux_conf_theme_clock_style="24"
+
+
+# -- clipboard -----------------------------------------------------------------
+
+# in copy mode, copying selection also copies to the OS clipboard
+# - true
+# - false (default)
+# on macOS, this requires installing reattach-to-user-namespace, see README.md
+# on Linux, this requires xsel or xclip
+tmux_conf_copy_to_os_clipboard=true
+
+
+# -- user customizations -------------------------------------------------------
+# this is the place to override or undo settings
+
+# increase history size
+set -g history-limit 2048
+
+# start with mouse mode enabled
+set -g mouse on
+
+# force Vi mode
+# really you should export VISUAL or EDITOR environment variable, see manual
+#set -g status-keys vi
+#set -g mode-keys vi
+
+# replace C-b by C-a instead of using both prefixes
+#set -gu prefix2
+#unbind C-a
+#unbind C-b
+#set -g prefix C-a
+#bind C-a send-prefix
+
+# move status line to top
+#set -g status-position top
+
+####### FULL CUSTOM ########
+
+#bind '+' split-window -h
+#bind '#' split-window -v
+
+bind -r '+' split-window -p 50 -h -c "#{pane_current_path}"# \; set -u pane-active-border-style
+bind -r '#' split-window -p 50 -v -c "#{pane_current_path}"# \; set -u pane-active-border-style
+
+bind -n C-Left select-pane -L
+bind -n C-Right select-pane -R
+bind -n C-Up select-pane -U
+bind -n C-Down select-pane -D
+
+bind -r Tab next-window
+#bind c new-window -c '#{pane_current_path}'
+bind Z resize-pane -Z
+
+set -g mouse on
+
+setw -g monitor-activity on
+set -g visual-activity on
+
+set -g history-limit 2048
+set -s escape-time 50
+#set -g default-terminal "screen-256color"
+
+set -g status-bg black
+set -g status-fg white
+
+set -g window-status-current-style bg=white,fg=black,bold
+
+#set -g status-justify centre
+set -g status-interval 60
+set -g status-left-length 30
+set -g status-left '#[fg=green][#S] #(whoami)@#(hostname) \uE0B0 #[bg=black] '
+set -g status-right '#[fg=yellow]#(cut -d " " -f 1-3 /proc/loadavg)#[default] #[fg=white]%H:%M#[default]'
+
+#set-option -ga terminal-overrides ",xterm-256color:Tc"
+
+###bind y run-shell "tmux show-buffer | xclip -sel clip -i" \; display-message "Copied tmux buffer to system clipboard"
+#bind -T copy-mode y send-keys -X copy-pipe-and-cancel "xsel -i -p && xsel -o -p | xsel -i -b"
+#bind C-y run "xsel -o | tmux load-buffer - ; tmux paste-buffer"
+
+# -- custom variables ----------------------------------------------------------
+# to define a custom #{foo} variable, define a POSIX shell function between the
+# '# EOF' and the '# "$@"' lines. Please note that the opening brace { character
+# must be on the same line as the function name otherwise the parse won't detect
+# it.
+#
+# then, use #{foo} in e.g. the 'tmux_conf_theme_status_left' or the
+# 'tmux_conf_theme_status_right' variables.
+
+# # /!\ do not remove the following line
+# EOF
+#
+# weather() {
+# curl -m 1 wttr.in?format=3 2>/dev/null
+# sleep 900 # sleep for 15 minutes, throttle network requests whatever the value of status-interval
+# }
+#
+# online() {
+# ping -t 1 -c 1 1.1.1.1 >/dev/null 2>&1 && printf '✔' || printf '✘'
+# }
+#
+# "$@"
+# # /!\ do not remove the previous line
diff --git a/dotfiles/.zshrc b/dotfiles/.zshrc
new file mode 100644
index 0000000..57c42f2
--- /dev/null
+++ b/dotfiles/.zshrc
@@ -0,0 +1,131 @@
+if [[ -r "${XDG_CACHE_HOME:-$HOME/.cache}/p10k-instant-prompt-${(%):-%n}.zsh" ]]; then
+ source "${XDG_CACHE_HOME:-$HOME/.cache}/p10k-instant-prompt-${(%):-%n}.zsh"
+fi
+export ZSH="$HOME/.oh-my-zsh"
+ZSH_THEME="powerlevel10k/powerlevel10k"
+HIST_STAMPS="dd.mm.yyyy"
+plugins=(git)
+source $ZSH/oh-my-zsh.sh
+autoload -U +X bashcompinit && bashcompinit
+[ -f /usr/share/bash-completion/completions/dnf ] && source /usr/share/bash-completion/completions/dnf
+
+######################
+# User configuration #
+######################
+
+export EDITOR='nvim'
+
+if [ $TILIX_ID ] || [ $VTE_VERSION ]; then
+ [ -f /etc/profile.d/vte.sh ] && source /etc/profile.d/vte.sh
+fi
+
+#export LS_COLORS='rs=0:no=00:mi=00:mh=00:ln=01;36:or=01;31:di=01;34:ow=04;01;34:st=34:tw=04;34:pi=01;33:so=01;33:do=01;33:bd=01;33:cd=01;33:su=01;35:sg=01;35:ca=01;35:ex=01;32:'
+
+##########
+
+# lang
+alias ptpython="python -m ptpython"
+alias ptpy="python -m ptpython"
+alias py13='python3.13'
+alias py12='python3.12'
+alias py10='python3.10'
+alias bpytop="python -m bpytop"
+
+# python venv
+alias pvcreate="python -m venv .venv"
+alias pvactivate="source .venv/bin/activate"
+alias pvinstall="echo 'Creating Python-venv' && pvcreate && echo 'Entering venv' && pvactivate && echo 'Upgrading pip' && pip install pip --upgrade && echo 'Installing Dependencies' && pip install -r requirements.txt && echo 'Done.'"
+
+# qol
+alias cls="clear"
+alias root="sudo su --shell /bin/zsh"
+alias open="xdg-open"
+alias filenum="du -a | cut -d/ -f2 | sort | uniq -c | sort -nr"
+alias pg="progress"
+alias hist="history"
+alias untar="tar -zxvf"
+alias neofetch=fastfetch
+
+# grep
+alias antigrep="grep -v"
+alias grep2="grep -A 2 -B 2"
+alias grep4="grep -A 4 -B 4"
+alias grep8="grep -A 8 -B 8"
+alias grep16="grep -A 16 -B 16"
+alias grep32="grep -A 32 -B 32"
+alias ag="alias | grep"
+
+# packages
+alias get="sudo dnf install"
+alias upd="sudo dnf check-upgrade"
+alias upg="sudo dnf upgrade"
+
+# chars
+alias c="clear"
+alias t="bpytop"
+alias p="ptpy"
+alias h="history | grep"
+alias v="nvim"
+alias n="nano"
+alias o="open"
+alias e="\d"
+alias ":q"="exit"
+
+# git
+alias gs="git status"
+alias gt="git log --all --graph --decorate --oneline --abbrev-commit"
+alias gnoc='git shortlog -sn | cat' # Number Of Commit by user
+alias gloc='git ls-files | while read f; do git blame -w -M -C -C --line-porcelain "$f" | grep -I "^author "; done | sort -f | uniq -ic | sort -n --reverse' # Lines Of Code by user (in final version)
+alias gpa='gaa && gc -m "." && gp -4'
+
+# dirs
+alias tmp="cd ~/.tmp"
+
+# extensions
+alias sudo="sudo "
+alias watch="watch "
+alias watch1="watch -n 1 "
+
+# better ls via lsd
+alias ls="lsd"
+alias l="ls -1"
+alias la="ls -A"
+alias laa="ls -a"
+alias lsa="ls -lA"
+alias lla="ls -lA"
+alias ltree="ls --tree"
+alias d0="ls --tree"
+alias d="ls --depth 1 --tree"
+alias d1="ls --depth 1 --tree"
+alias d2="ls --depth 2 --tree"
+alias d3="ls --depth 3 --tree"
+alias d4="ls --depth 4 --tree"
+alias d5="ls --depth 5 --tree"
+alias d6="ls --depth 6 --tree"
+
+# more ls
+alias lo="\ls --color=tty"
+alias dtree="tree --du -h"
+alias gtree="tree --du -h -F -C | grep 'G] ' --color=never"
+
+# better cat via batcat
+alias bat="bat --pager ''"
+alias pat="bat --pager '' --plain"
+alias lat="bat"
+
+# more fancy batcat stuff
+alias man="batman"
+
+# tmux
+alias s="tmux"
+alias sa="tmux attach"
+alias sn="tmux new -s"
+alias san="tmux attach -t"
+alias sl="tmux ls"
+alias sk="tmux kill-session -t"
+alias ska="tmux kill-session -a"
+
+#####
+
+export PATH=$PATH:$HOME/.local/bin
+
diff --git a/install.conf b/install.conf
new file mode 100644
index 0000000..b18f5dc
--- /dev/null
+++ b/install.conf
@@ -0,0 +1,13 @@
+DRIVE1 /dev/sda
+DRIVE2 /dev/sdb
+HOSTNAME nullpoint
+BOOTLOADER grub
+SWRAID 1
+SWRAIDLEVEL 1
+FILESYSTEM xfs
+IMAGE AlmaLinux-9.3-Generic
+CRYPTPASSWORD changeme
+
+PART /boot/efi vfat 512M
+PART /boot xfs 2G
+PART / xfs all
\ No newline at end of file
diff --git a/install.sh b/install.sh
old mode 100755
new mode 100644
index 296bf6a..e961c03
--- a/install.sh
+++ b/install.sh
@@ -1,4 +1,9 @@
#!/bin/bash
+# nullpoint installer - run this from Hetzner rescue mode
+# wget -qO- https://git.dominik-roth.eu/dodox/nullpoint/raw/branch/master/install.sh | bash
+
+set -euo pipefail
+
BANNER=$(cat << "EOF"
:^7J5GB##&&##GPY?~:
^75B&@@@@@@&&&@@@@@@@#GJ~:
@@ -25,389 +30,113 @@ J@@@5 :#@@@Y: :Y@@@B: 5@@@J
EOF
)
-TANG_SERVERS=(
-# "https://tang1.example.com your-thumbprint-1"
-# "https://tang2.example.com your-thumbprint-2"
-)
-TPM_PCR_BANK="sha256"
-TPM_PCR_IDS="0,1,2,3,4,5,6,7,8"
-FEDORA_VERSION="42"
-FEDORA_USER="null"
-ENABLE_MOTD=true
-SSH_KEY="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOkoTn2NreAXMriOUqzyj3YoFW6jMo9B5B+3R5k8yrMi dodox@dodox-ProArt"
-
-########################################################
-# Config End
-########################################################
-
-set -euo pipefail
-alias c="clear"
-alias cls="clear"
clear
echo -e "\n$BANNER"
-echo -e "\n[+] Starting installation..."
+echo -e "\n[+] nullpoint installer starting..."
-# Check for TPM
-echo "[+] Checking for TPM..."
-if [ ! -d "/sys/class/tpm/tpm0" ]; then
- echo "WARNING: No TPM detected!"
- echo "This system will not be able to use TPM-based boot verification."
- echo "You might need to enable TPM in the BIOS. (On Hetzner make a support ticket for KVM access)"
- read -p "Continue without TPM? [y/N] " -n 1 -r
- echo
- if [[ ! $REPLY =~ ^[Yy]$ ]]; then
- echo "Installation aborted."
- exit 1
- fi
- echo "Proceeding without TPM..."
- TPM_ENABLED=false
-else
- echo "TPM detected."
- TPM_ENABLED=true
+# Check if we're in Hetzner rescue mode
+if [ ! -f /etc/hetzner-build ]; then
+ echo "ERROR: This script must be run from Hetzner rescue mode!"
+ exit 1
fi
-# Check for SSH key
-if [ -z "${SSH_KEY:-}" ]; then
- echo "No SSH key provided. Please enter your public SSH key:"
+# Get SSH key from current session
+echo "[+] Detecting SSH key from current session..."
+SSH_KEY=$(grep "^ssh-" ~/.ssh/authorized_keys | head -1)
+if [ -z "$SSH_KEY" ]; then
+ echo "ERROR: No SSH key found in authorized_keys!"
+ echo "Please enter your SSH public key:"
read -r SSH_KEY
if [ -z "$SSH_KEY" ]; then
- echo "Error: SSH key is required for installation"
+ echo "SSH key is required!"
exit 1
fi
fi
+echo "Found SSH key: ${SSH_KEY:0:50}..."
+
+# Ask for hostname
+echo -e "\n[+] Server configuration"
+read -p "Enter hostname [nullpoint]: " HOSTNAME
+HOSTNAME=${HOSTNAME:-nullpoint}
+
+# Ask for username
+read -p "Enter username for admin account [null]: " USERNAME
+USERNAME=${USERNAME:-null}
# Generate secure LUKS passphrase
-echo "[+] Generating secure LUKS passphrase..."
-LUKS_PASSPHRASE=$(openssl rand -base64 30)
+echo -e "\n[+] Generating secure LUKS passphrase..."
+LUKS_PASS=$(openssl rand -base64 30)
-echo "----------------------------------------"
-echo "Generated LUKS passphrase:"
-echo "${LUKS_PASSPHRASE}"
-echo "----------------------------------------"
-echo "Please save these credentials securely. You will need them for recovery."
-echo "Press Enter to continue..."
+echo -e "\n================================================"
+echo "LUKS PASSPHRASE (SAVE THIS!):"
+echo "$LUKS_PASS"
+echo "================================================"
+echo -e "\nPress Enter when you've saved the passphrase..."
read
-# Install required packages
-apt-get update
-DEBIAN_FRONTEND=noninteractive apt-get install -y genisoimage grub-efi-amd64-bin util-linux kexec-tools
-
-# Detect disk naming scheme and set variables
-echo "[+] Detecting disk configuration..."
-DISKS=($(lsblk -d -n -o NAME | grep -E '^(sd[a-z]|nvme[0-9]+n[0-9]+)$' | sort))
-if [ ${#DISKS[@]} -lt 1 ]; then
- echo "Error: Expected at least 1 disk, found ${#DISKS[@]}"
- exit 1
-fi
-
-DISK="/dev/${DISKS[0]}"
-
-# Create a small partition for installer files
-echo "[+] Creating installer partition..."
-parted -s $DISK mklabel gpt
-parted -s $DISK mkpart primary ext4 0% 2GB
-parted -s $DISK name 1 installer
-mkfs.ext4 -L installer ${DISK}1
-mkdir -p /mnt/installer
-mount ${DISK}1 /mnt/installer
-
-# Download Fedora installer
-echo "[+] Downloading Fedora installer..."
-wget -O /mnt/installer/Fedora-Server-netinst-x86_64-${FEDORA_VERSION}-1.1.iso "https://download.fedoraproject.org/pub/fedora/linux/releases/${FEDORA_VERSION}/Server/x86_64/iso/Fedora-Server-netinst-x86_64-${FEDORA_VERSION}-1.1.iso"
-
-# Mount Fedora ISO
-echo "[+] Mounting Fedora installer..."
-mkdir -p /mnt/iso
-mount -o loop /mnt/installer/Fedora-Server-netinst-x86_64-${FEDORA_VERSION}-1.1.iso /mnt/iso
-
-# Get current IP address and gateway from first non-loopback interface
-echo "[+] Detecting current IP address and gateway..."
-INTERFACE=$(ip -o -4 route show to default | awk '{print $5}' | head -n1)
-IPV4=$(ip -4 addr show $INTERFACE | grep -oP '(?<=inet\\s)\\d+(\\.\\d+){3}')
-GATEWAY=$(ip route show default | awk '/default/ {print $3}')
-
-echo "[+] Detected network configuration:"
-echo "Interface: $INTERFACE"
-echo "IP: $IPV4"
-echo "Gateway: $GATEWAY"
-
-# Create kickstart file
-echo "[+] Creating kickstart configuration..."
-cat > /mnt/installer/ks.cfg << 'KICKSTART'
-# Fedora Server installation with our secure setup
-text
-lang en_US.UTF-8
-keyboard us
-timezone --utc Etc/UTC
-
-# Security settings
-selinux --enforcing
-rootpw --lock
-user --name=${FEDORA_USER} --groups=wheel --shell=/bin/bash --lock
-
-# SSH setup
-sshkey --username=${FEDORA_USER} "${SSH_KEY}"
-
-# Network - let installer detect interface
-network --bootproto=static --ip=${IPV4} --netmask=255.255.255.255 --gateway=${GATEWAY} --nameserver=185.12.64.1 --nameserver=185.12.64.2 --activate
-
-# Bootloader
-bootloader --timeout=1 --location=mbr --append="no_timer_check console=tty1 console=ttyS0,115200n8"
-
-# Services
-services --enabled=sshd,clevis-luks-askpass,dropbear
-
-# Use existing partitions
-part /boot/efi --fstype=vfat --onpart=${PART1}
-part /boot --fstype=ext4 --onpart=/dev/md0
-part / --fstype=btrfs --onpart=/dev/mapper/root_a
-
-# Packages
-%packages
-@^server-product-environment
-clevis
-clevis-luks
-clevis-tang
-clevis-tpm2
-tpm2-tools
-tpm2-tss
-cryptsetup
-btrfs-progs
-mdadm
-dropbear
-git
-zsh
-lsd
-bat
-tmux
-neovim
-fortune-mod
-cowsay
-lolcat
-xclip
-python3-pip
-%end
-
-# Pre-installation
-%pre
-#!/bin/bash
-
-# Use the LUKS passphrase from rescue script
-LUKS_PASSPHRASE="${LUKS_PASSPHRASE}"
-echo "\$LUKS_PASSPHRASE" > /tmp/luks.key
-chmod 600 /tmp/luks.key
-
-# Detect disk naming scheme and set variables
-DISKS=($(lsblk -d -n -o NAME | grep -E '^(sd[a-z]|nvme[0-9]+n[0-9]+)$' | sort))
-if [ ${#DISKS[@]} -ne 2 ]; then
- echo "Error: Expected exactly 2 disks, found ${#DISKS[@]}"
- exit 1
-fi
-
-# Set disk variables
-DISK1="/dev/${DISKS[0]}"
-DISK2="/dev/${DISKS[1]}"
-
-# Stop any existing RAID arrays
-mdadm --stop /dev/md0 2>/dev/null || true
-
-# Unmount any existing partitions
-for disk in $DISK1 $DISK2; do
- umount -f $disk* 2>/dev/null || true
-done
-
-# Stop any device mapper devices
-dmsetup remove_all 2>/dev/null || true
-
-# Disconnect NVMe devices if present
-if [[ "$DISK1" =~ nvme ]] || [[ "$DISK2" =~ nvme ]]; then
- nvme disconnect-all
- sleep 2
-fi
-
-# Zero out partition tables
-for disk in $DISK1 $DISK2; do
- if [[ "$disk" =~ nvme ]]; then
- blkdiscard -f $disk
- else
- dd if=/dev/zero of=$disk bs=1M count=2 conv=fsync
- dd if=/dev/zero of=$disk bs=1M seek=$(($(blockdev --getsz $disk) / 2048 - 2)) count=2 conv=fsync
- fi
- sync
-done
-
-# Create partitions
-for disk in $DISK1 $DISK2; do
- parted -s $disk mklabel gpt
- parted -s $disk mkpart primary fat32 0% 512MB
- parted -s $disk mkpart primary ext4 512MB 1.5GB
- parted -s $disk mkpart primary ext4 1.5GB 100%
- parted -s $disk set 1 boot on
- sync
-done
-
-# For NVMe disks, we need to append 'p' to partition numbers
-if [[ "$DISK1" =~ nvme ]]; then
- PART1="${DISK1}p1"
- PART2="${DISK1}p2"
- PART3="${DISK1}p3"
- PART4="${DISK2}p1"
- PART5="${DISK2}p2"
- PART6="${DISK2}p3"
+# Clone or download the nullpoint repo
+echo "[+] Downloading nullpoint configuration..."
+if command -v git &> /dev/null; then
+ git clone https://git.dominik-roth.eu/dodox/nullpoint.git /tmp/nullpoint
else
- PART1="${DISK1}1"
- PART2="${DISK1}2"
- PART3="${DISK1}3"
- PART4="${DISK2}1"
- PART5="${DISK2}2"
- PART6="${DISK2}3"
+ echo "ERROR: git not available and wget fallback insufficient for dotfiles"
+ echo "Please install git or use manual installation method"
+ exit 1
fi
-# Create EFI partitions
-mkfs.vfat -F 32 $PART1
-mkfs.vfat -F 32 $PART4
+# Update install.conf
+echo "[+] Configuring installation..."
+cd /tmp/nullpoint
+sed -i "s/^HOSTNAME .*/HOSTNAME $HOSTNAME/" install.conf
+sed -i "s/^CRYPTPASSWORD .*/CRYPTPASSWORD $LUKS_PASS/" install.conf
-# Create boot RAID1
-mdadm --create /dev/md0 --level=1 --raid-devices=2 --metadata=0.90 --force --run $PART2 $PART5
-mkfs.ext4 /dev/md0
+# Update post-install.sh
+sed -i "s/^ALMA_USER=.*/ALMA_USER=\"$USERNAME\"/" post-install.sh
+sed -i "s|^SSH_KEY=.*|SSH_KEY=\"$SSH_KEY\"|" post-install.sh
-# Create LUKS volumes
-echo "$LUKS_PASSPHRASE" | cryptsetup luksFormat $PART3 --type luks2
-echo "$LUKS_PASSPHRASE" | cryptsetup luksFormat $PART6 --type luks2
+# Copy to root directory where installimage expects them
+cp install.conf /root/
+cp post-install.sh /root/
+chmod +x /root/post-install.sh
-# Open LUKS volumes
-echo "$LUKS_PASSPHRASE" | cryptsetup luksOpen $PART3 root_a
-echo "$LUKS_PASSPHRASE" | cryptsetup luksOpen $PART6 root_b
-
-# Create BTRFS RAID1
-mkfs.btrfs -f -d raid1 -m raid1 /dev/mapper/root_a /dev/mapper/root_b
-
-# Create subvolumes
-mount /dev/mapper/root_a /mnt/sysimage
-btrfs subvolume create /mnt/sysimage/@root
-btrfs subvolume create /mnt/sysimage/@home
-btrfs subvolume create /mnt/sysimage/@db
-chattr +C /mnt/sysimage/@db
-
-# Configure Clevis
-if [ ${#TANG_SERVERS[@]} -gt 0 ] || [ "$TPM_ENABLED" = true ]; then
- mkdir -p /mnt/sysimage/etc/clevis
-
- # Build Tang servers JSON array if we have any
- if [ ${#TANG_SERVERS[@]} -gt 0 ]; then
- TANG_JSON="["
- for server in "${TANG_SERVERS[@]}"; do
- read -r url thumbprint <<< "$server"
- TANG_JSON+="{\"url\":\"$url\",\"thumbprint\":\"$thumbprint\"},"
- done
- TANG_JSON="${TANG_JSON%,}]" # Remove trailing comma and close array
- fi
-
- # Calculate t value based on enabled methods
- T_VALUE=1
- if [ ${#TANG_SERVERS[@]} -gt 0 ] && [ "$TPM_ENABLED" = true ]; then
- T_VALUE=2
- fi
-
- # Create Clevis config
- cat > /mnt/sysimage/etc/clevis/clevis.conf << EOF
-{
- "t": $T_VALUE,
- "pins": {
- $([ "$TPM_ENABLED" = true ] && echo "\"tpm2\": {
- \"pcr_bank\": \"$TPM_PCR_BANK\",
- \"pcr_ids\": \"$TPM_PCR_IDS\"
- },")
- $([ ${#TANG_SERVERS[@]} -gt 0 ] && echo "\"tang\": {
- \"t\": 1,
- \"tang\": $TANG_JSON
- }")
- }
-}
-EOF
-
- # Bind LUKS volumes
- clevis luks bind -d $PART3 sss -c /mnt/sysimage/etc/clevis/clevis.conf
- clevis luks bind -d $PART6 sss -c /mnt/sysimage/etc/clevis/clevis.conf
+# Ask for optional features
+echo -e "\n[+] Optional features:"
+read -p "Do you have a TPM and want to use it? [y/N]: " USE_TPM
+if [[ "$USE_TPM" =~ ^[Yy]$ ]]; then
+ echo "TPM will be configured if available."
+else
+ sed -i 's/^TPM_ENABLED=.*/TPM_ENABLED=false/' /root/post-install.sh
fi
-# Cleanup
-umount /mnt/sysimage
-%end
-
-# Post-installation
-%post
-# Configure network with static IP (Hetzner dedicated server style)
-cat > /etc/sysconfig/network-scripts/ifcfg-ens3 << EOF
-DEVICE=ens3
-ONBOOT=yes
-BOOTPROTO=static
-IPADDR=$IPV4
-NETMASK=255.255.255.255
-SCOPE="peer $GATEWAY"
-EOF
-
-# Create route file
-cat > /etc/sysconfig/network-scripts/route-ens3 << EOF
-ADDRESS0=0.0.0.0
-NETMASK0=0.0.0.0
-GATEWAY0=$GATEWAY
-EOF
-
-# Reload network configuration
-nmcli con reload || true
-nmcli con up ens3 || true
-
-# Update fstab
-cat > /etc/fstab << "FSTAB"
-${PART1} /boot/efi vfat defaults 1 2
-/dev/md0 /boot ext4 defaults 1 2
-/dev/mapper/root_a / btrfs subvol=@root,defaults,noatime 0 0
-/dev/mapper/root_a /home btrfs subvol=@home,defaults,noatime 0 0
-/dev/mapper/root_a /db btrfs subvol=@db,defaults,noatime,nodatacow 0 0
-FSTAB
-
-# Configure dropbear for early SSH access
-mkdir -p /etc/dracut.conf.d
-cat > /etc/dracut.conf.d/dropbear.conf << "DROPBEAR"
-add_drivers+=" dropbear "
-install_optional_items=yes
-DROPBEAR
-
-# Add SSH key to dropbear
-mkdir -p /etc/dropbear
-echo "$SSH_KEY" > /etc/dropbear/authorized_keys
-chmod 600 /etc/dropbear/authorized_keys
-
-# Regenerate initramfs with dropbear
-dracut -f
-
-# Set up MOTD
-if [ "$ENABLE_MOTD" = true ]; then
- cat > /etc/motd << "MOTD"
-$BANNER
-MOTD
+read -p "Do you have Tang servers configured? [y/N]: " USE_TANG
+if [[ "$USE_TANG" =~ ^[Yy]$ ]]; then
+ echo "Please edit /root/post-install.sh after installation to add Tang servers."
fi
-# Enable required services
-systemctl enable clevis-luks-askpass
-systemctl enable dropbear
+# Final confirmation
+echo -e "\n[+] Ready to install with these settings:"
+echo " Hostname: $HOSTNAME"
+echo " Username: $USERNAME"
+echo " SSH Key: ${SSH_KEY:0:50}..."
+echo " LUKS Passphrase: [HIDDEN]"
+echo ""
+read -p "Proceed with installation? [Y/n]: " CONFIRM
+if [[ "$CONFIRM" =~ ^[Nn]$ ]]; then
+ echo "Installation cancelled."
+ exit 1
+fi
-# Force SELinux relabel on next boot
-touch /.autorelabel
-%end
-KICKSTART
+# Run the installer
+echo -e "\n[+] Starting Hetzner installimage..."
+echo "The installer will now run. Follow any prompts if needed."
+echo ""
+installimage -a -c /root/install.conf -s /root/post-install.sh
-# Get actual ISO label
-ISO_LABEL=$(isoinfo -d -i /mnt/installer/Fedora-Server-netinst-x86_64-${FEDORA_VERSION}-1.1.iso | grep "Volume id:" | cut -d: -f2 | tr -d ' ')
-
-# Set IP-related kernel boot params for installer
-KERNEL_NET_PARAMS="ip=$IPV4::$GATEWAY:255.255.255.255::ens3:none nameserver=185.12.64.1 nameserver=185.12.64.2"
-
-echo "[+] Configuration complete. Starting installation with kexec..."
-echo "----------------------------------------"
-cat /mnt/installer/ks.cfg
-echo "----------------------------------------"
-read -p "Press Enter to continue..."
-kexec -l /mnt/iso/images/pxeboot/vmlinuz --initrd=/mnt/iso/images/pxeboot/initrd.img --append="inst.ks=file:///dev/disk/by-label/installer/ks.cfg inst.stage2=hd:LABEL=${ISO_LABEL} ${KERNEL_NET_PARAMS} inst.sshd inst.ssh.port=2222 inst.ssh.key=${SSH_KEY}"
-kexec -e
\ No newline at end of file
+echo -e "\n[+] Installation complete!"
+echo ""
+echo "IMPORTANT REMINDERS:"
+echo "1. Save your LUKS passphrase securely!"
+echo "2. After reboot, you'll need to enter it twice (once per disk)"
+echo "3. SSH to the server as user '$USERNAME'"
+echo ""
+echo "The system is ready for use!"
\ No newline at end of file
diff --git a/post-install.sh b/post-install.sh
new file mode 100755
index 0000000..2eedfcd
--- /dev/null
+++ b/post-install.sh
@@ -0,0 +1,205 @@
+#!/bin/bash
+BANNER=$(cat << "EOF"
+ :^7J5GB##&&##GPY?~:
+ ^75B&@@@@@@&&&@@@@@@@#GJ~:
+ 5&@@@&B5?7~^^^^^~!7YP#@@@@#!
+ Y##P7^ :~JB#B!
+ :: :
+ 7PP?: :^~!!~^: :?PP7
+ :B@@B: !5B&@@@@&B5! :#@@B:
+ :!!: ^G@@@&BPPB@@@@G^ :!!:
+ :B@@@5^ ^5@@@B:
+:7J7: !@@@# :&@@@~ :?J7:
+J@@@5 :#@@@Y: :Y@@@B: 5@@@J
+!@@@&^ ~B@@@&G55G&@@@B~ ~&@@@~
+ 5@@@G: :7P#@@@@@@#P7: :B@@@Y
+ :P@@@B~ :~!77!~: ~B@@@P
+ Y@@@&Y^ ^5@@@@J
+ !G@@@&P7^ ^7P&@@@G~
+ !P&@@@&B? :: ?B&@@@&P!
+ ^75#&&Y :P&&5: 5&&B57^
+ :^^ :P&&5: ^^:
+ ^^
+
+ [nullpoint]
+EOF
+)
+
+TANG_SERVERS=(
+# "https://tang1.example.com your-thumbprint-1"
+# "https://tang2.example.com your-thumbprint-2"
+)
+TPM_PCR_BANK="sha256"
+TPM_PCR_IDS="0,1,2,3,4,5,6,7,8"
+ALMA_USER="null"
+ENABLE_MOTD=true
+# REQUIRED: Set your SSH public key here - installation will fail without it!
+SSH_KEY="ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOkoTn2NreAXMriOUqzyj3YoFW6jMo9B5B+3R5k8yrMi dodox@dodox-ProArt"
+
+########################################################
+# Config End
+########################################################
+
+set -euo pipefail
+
+echo -e "\n$BANNER"
+echo -e "\n[+] Starting post-installation configuration..."
+
+# Check for SSH key
+if [ -z "${SSH_KEY:-}" ]; then
+ echo "ERROR: No SSH key configured!"
+ echo "You must set SSH_KEY variable at the top of this script."
+ exit 1
+fi
+
+# Check for TPM
+echo "[+] Checking for TPM..."
+if [ ! -d "/sys/class/tpm/tpm0" ]; then
+ echo "WARNING: No TPM detected!"
+ TPM_ENABLED=false
+else
+ echo "TPM detected."
+ TPM_ENABLED=true
+fi
+
+# Create user and add SSH key
+echo "[+] Creating user ${ALMA_USER}..."
+useradd -m -G wheel -s /bin/zsh ${ALMA_USER}
+mkdir -p /home/${ALMA_USER}/.ssh
+echo "${SSH_KEY}" > /home/${ALMA_USER}/.ssh/authorized_keys
+chmod 700 /home/${ALMA_USER}/.ssh
+chmod 600 /home/${ALMA_USER}/.ssh/authorized_keys
+chown -R ${ALMA_USER}:${ALMA_USER} /home/${ALMA_USER}/.ssh
+
+# Install oh-my-zsh and powerlevel10k
+echo "[+] Installing oh-my-zsh and powerlevel10k..."
+# Run oh-my-zsh installer as the user
+sudo -u ${ALMA_USER} bash -c 'sh -c "$(wget https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh -O -)" "" --unattended'
+# Clone powerlevel10k theme
+sudo -u ${ALMA_USER} git clone --depth=1 https://github.com/romkatv/powerlevel10k.git /home/${ALMA_USER}/.oh-my-zsh/custom/themes/powerlevel10k
+
+# Install dotfiles
+echo "[+] Setting up dotfiles..."
+if [ -d /tmp/nullpoint/dotfiles ]; then
+ echo "[+] Installing dotfiles from repository..."
+ cp /tmp/nullpoint/dotfiles/.* /home/${ALMA_USER}/ 2>/dev/null || true
+ chown -R ${ALMA_USER}:${ALMA_USER} /home/${ALMA_USER}/
+else
+ echo "[!] No dotfiles directory found, user will need to configure manually"
+fi
+
+# Set up MOTD
+if [ "$ENABLE_MOTD" = true ]; then
+ echo "[+] Setting up MOTD..."
+ cat > /etc/motd << MOTD
+$BANNER
+MOTD
+fi
+
+# Install additional packages
+echo "[+] Installing additional packages..."
+dnf install -y epel-release
+dnf config-manager --set-enabled crb
+dnf install -y \
+ clevis clevis-luks clevis-tang clevis-tpm2 tpm2-tools tpm2-tss \
+ git zsh tmux neovim python3-pip \
+ dracut-clevis dropbear tree curl wget nano
+
+# Install lsd and bat from GitHub releases (not in repos)
+echo "[+] Installing lsd and bat..."
+# Get latest lsd version
+LSD_VERSION=$(curl -s https://api.github.com/repos/lsd-rs/lsd/releases/latest | grep -Po '"tag_name": "v\K[0-9.]+')
+curl -sL "https://github.com/lsd-rs/lsd/releases/download/v${LSD_VERSION}/lsd-v${LSD_VERSION}-x86_64-unknown-linux-musl.tar.gz" | tar xz -C /tmp
+mv /tmp/lsd-*/lsd /usr/local/bin/
+chmod +x /usr/local/bin/lsd
+
+# Get latest bat version
+BAT_VERSION=$(curl -s https://api.github.com/repos/sharkdp/bat/releases/latest | grep -Po '"tag_name": "v\K[0-9.]+')
+curl -sL "https://github.com/sharkdp/bat/releases/download/v${BAT_VERSION}/bat-v${BAT_VERSION}-x86_64-unknown-linux-musl.tar.gz" | tar xz -C /tmp
+mv /tmp/bat-*/bat /usr/local/bin/
+chmod +x /usr/local/bin/bat
+
+# Create batman script for fancy man pages
+cat > /usr/local/bin/batman << 'BATMAN'
+#!/bin/bash
+export MANPAGER="sh -c 'col -bx | bat -l man -p'"
+export MANROFFOPT="-c"
+man "$@"
+BATMAN
+chmod +x /usr/local/bin/batman
+
+# Create .tmp directory for user
+mkdir -p /home/${ALMA_USER}/.tmp
+chown ${ALMA_USER}:${ALMA_USER} /home/${ALMA_USER}/.tmp
+
+# Configure Clevis for automatic unlock
+if [ ${#TANG_SERVERS[@]} -gt 0 ] || [ "$TPM_ENABLED" = true ]; then
+ echo "[+] Configuring Clevis for automatic unlock..."
+
+ # Find LUKS devices
+ LUKS_DEVICES=$(lsblk -o NAME,FSTYPE -nr | grep crypto_LUKS | cut -d' ' -f1)
+
+ for device in $LUKS_DEVICES; do
+ DEVICE_PATH="/dev/${device}"
+ echo "Configuring Clevis for ${DEVICE_PATH}..."
+
+ if [ "$TPM_ENABLED" = true ] && [ ${#TANG_SERVERS[@]} -eq 0 ]; then
+ # TPM only
+ clevis luks bind -d "$DEVICE_PATH" tpm2 "{\"pcr_bank\":\"$TPM_PCR_BANK\",\"pcr_ids\":\"$TPM_PCR_IDS\"}"
+ elif [ "$TPM_ENABLED" = false ] && [ ${#TANG_SERVERS[@]} -gt 0 ]; then
+ # Tang only
+ for server in "${TANG_SERVERS[@]}"; do
+ read -r url thumbprint <<< "$server"
+ clevis luks bind -d "$DEVICE_PATH" tang "{\"url\":\"$url\",\"thp\":\"$thumbprint\"}"
+ done
+ elif [ "$TPM_ENABLED" = true ] && [ ${#TANG_SERVERS[@]} -gt 0 ]; then
+ # Both TPM and Tang (require both)
+ CONFIG="{\"t\":2,\"pins\":{"
+ CONFIG+="\"tpm2\":{\"pcr_bank\":\"$TPM_PCR_BANK\",\"pcr_ids\":\"$TPM_PCR_IDS\"},"
+ CONFIG+="\"tang\":{\"t\":1,\"tang\":["
+ for server in "${TANG_SERVERS[@]}"; do
+ read -r url thumbprint <<< "$server"
+ CONFIG+="{\"url\":\"$url\",\"thp\":\"$thumbprint\"},"
+ done
+ CONFIG="${CONFIG%,}]}}}"
+ clevis luks bind -d "$DEVICE_PATH" sss "$CONFIG"
+ fi
+ done
+fi
+
+# Enable Clevis for early boot
+echo "[+] Enabling Clevis for early boot..."
+systemctl enable clevis-luks-askpass.service
+
+# Configure dropbear for remote unlock
+echo "[+] Configuring dropbear for remote unlock..."
+mkdir -p /etc/dropbear
+echo "${SSH_KEY}" > /etc/dropbear/authorized_keys
+chmod 600 /etc/dropbear/authorized_keys
+
+# Regenerate initramfs
+echo "[+] Regenerating initramfs..."
+dracut -f --regenerate-all
+
+# Enable required services
+echo "[+] Enabling services..."
+# systemctl enable stratisd # Not needed without Stratis
+systemctl enable sshd
+
+# Disable root login
+echo "[+] Securing SSH..."
+sed -i 's/^#PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config
+
+# Set SELinux to enforcing
+echo "[+] Setting SELinux to enforcing..."
+sed -i 's/^SELINUX=.*/SELINUX=enforcing/' /etc/selinux/config
+
+echo "✅ Post-installation complete!"
+echo ""
+echo "IMPORTANT: The LUKS passphrase is set in install.conf"
+echo "Save it securely for recovery purposes."
+echo ""
+echo "After reboot:"
+echo "- System will unlock automatically if TPM/Tang configured"
+echo "- Or SSH to port 22 for manual unlock"
+echo "- Then SSH as user '${ALMA_USER}'"
\ No newline at end of file