~ / rigs / bfpimentel / dotfiles

bfpimentel/dotfiles

Personal dotfiles and server orchestration using Nix and Home Manager

↗ GitHub ★ 48 no license updated 2d ago personal setup Codex
share on X
ARCHETYPE
Pragmatist
A balanced, no-drama setup: some rules, some tools, nothing extreme.
CONTEXT TAX · EVERY TURN
~17.5k tokens
Context hog · median rig: 2.3k · breakdown
GUARDRAILS
0/5
No committed guardrails · details

Copy this rig

# review before running: this installs third-party code
$ claude mcp add searxng -e SEARXNG_URL=YOUR_SEARXNG_URL -- npx -y mcp-searxng
$ claude mcp add playwright -e PLAYWRIGHT_MCP_EXECUTABLE_PATH=YOUR_PLAYWRIGHT_MCP_EXECUTABLE_PATH -e PWTEST_SOCKETS_DIR=YOUR_PWTEST_SOCKETS_DIR -- npx -y @playwright/mcp@latest --browser=chrome
$ claude mcp add nixos -- uvx mcp-nixos
$ claude mcp add open-pencil -- openpencil-mcp

MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.

$ claude mcp add searxng -e SEARXNG_URL=YOUR_SEARXNG_URL -- npx -y mcp-searxng
$ claude mcp add playwright -e PLAYWRIGHT_MCP_EXECUTABLE_PATH=YOUR_PLAYWRIGHT_MCP_EXECUTABLE_PATH -e PWTEST_SOCKETS_DIR=YOUR_PWTEST_SOCKETS_DIR -- npx -y @playwright/mcp@latest --browser=chrome
$ claude mcp add nixos -- uvx mcp-nixos
$ claude mcp add open-pencil -- openpencil-mcp

This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:

{
  "permissions": {
    "deny": [
      "Read(./.env)",
      "Read(**/.env)",
      "Read(~/.ssh/**)",
      "Bash(rm -rf *)",
      "Read(**/*.pem)",
      "Bash(rm -rf /)",
      "Bash(git push --force:*)",
      "Bash(sudo *)",
      "Read(.env)",
      "Bash(rm -rf /*)",
      "Read(./.env.*)",
      "Read(~/.aws/**)",
      "Bash(git push --force*)",
      "Bash(rm -rf:*)",
      "Read(**/*.key)",
      "Read(**/.env.*)",
      "Bash(sudo:*)",
      "Bash(git reset --hard*)",
      "Bash(git reset --hard:*)",
      "Read(.env.*)"
    ],
    "ask": [
      "Bash(git push:*)",
      "Bash(git push *)",
      "Bash(git commit:*)",
      "Bash(rm *)",
      "Bash(rm:*)",
      "Bash(git rebase *)",
      "Bash(wget *)",
      "Bash(npm publish:*)",
      "Bash(git commit *)",
      "Bash(gh pr merge *)"
    ]
  }
}

MCP servers (5)

serversourceest. tokens
codebase-memory-mcp local / custom 2.5k
mcp-searxng · "searxng"
env: SEARXNG_URL
npm 2.5k
Playwright MCP · "playwright"
env: PLAYWRIGHT_MCP_EXECUTABLE_PATH, PWTEST_SOCKETS_DIR
npm 7.5k
mcp-nixos · "nixos" pypi 2.5k
openpencil-mcp · "open-pencil" binary 2.5k

Similar rigs

copied ✓