Maintenance Guide¶

This guide describes how to maintain the health and security of your dotfiles environment.

🩺 System Health Checks¶

The primary tool for diagnosing issues is the doctor script.

mise run doctor

It checks: - Essential Tools: git, zsh, mise, etc. - Shell Configuration: zsh plugins, p10k. - Secrets: Age key validity, Bitwarden/Vault status. - Symlinks: Integrity of dotfiles links.

Exit Codes: - 0: All checks passed (or only warnings). - 1: Critical errors found.

🔄 Updating Tools¶

To check for outdated tools managed by mise:

mise run check-outdated

To update all tools:

mise upgrade

🔐 Secrets Rotation¶

Rotating Age Key¶

If your age key is compromised or too old (>1 year), rotate it:

mise run rotate-secrets

This will: 1. Generate a new key. 2. Re-encrypt all secrets in encrypted_dot_secrets.age. 3. Backup the old key.

External Secrets (Bitwarden/Vault)¶

• Bitwarden: mise run secrets:bw-login
• Vault: mise run secrets:vault-login

Ensure you log out or lock these vaults when not in use.

🧹 Cleanup¶

To remove unused data:

mise run prune

This cleans up: - Docker images/containers (stopped). - Mise cache. - Package manager caches (npm, pip, go).