Repository navigation
Home
Rui edited this page Nov 3, 2026
·
2 revisions
An Ansible playbook that sets up a Mac for DevOps work: Homebrew packages and apps, Kubernetes / IaC / CI tools, cloud CLIs, editors, the terminal, macOS settings, and the dotfiles (whose own wiki covers using them: dotfiles wiki). It runs on localhost, so a run is idempotent: run it again any time to bring a machine in line.
- A new Mac: Installing, then the Manual steps.
-
A part only: Running parts (tags:
--tags dotfiles,--tags k9s, …). - This machine's choices (cloud providers, optional tools, your taps): Configuration.
| Page | What it covers |
|---|---|
| Installing | prerequisites, a fresh install, the sudo prompt, a dry run |
| Running parts | tags by role and area, feature tags, the by-hand ones, one package at a time |
| Configuration |
host_vars/localhost.yml: cloud providers, optional tools, dotfiles, folders, custom taps |
| Roles | what each role installs and does |
| Dotfiles | how the playbook installs the dotfiles, and the files it never touches |
| macOS settings | Dock, Finder, keyboard, Spaces, Touch ID for sudo |
| Desktop and terminal | AeroSpace, borders, SketchyBar, Ghostty + tmux, Neovim |
| Commit signing | GPG setup, or SSH signing through an agent |
| Raycast | why its settings travel as an export, and the import from Bitwarden |
| Privacy permissions | the Accessibility / Automation grants only you can give |
| Manual steps | what the playbook can't automate |
| Development | lint, tests, CI (--check on macOS), Renovate |
| Troubleshooting | known failures and fixes |