MacBook Pro Setup-Tracker

fdesetup status

sw_vers

# Computer-, Host- und lokaler Hostname auf einen Namen vereinheitlichen
sudo scutil --set ComputerName "zkybook"
sudo scutil --set HostName "zkybook"
sudo scutil --set LocalHostName "zkybook"

# Prüfen
scutil --get ComputerName
scutil --get HostName
scutil --get LocalHostName

diskutil list

# Detail zu einem Volume (z.B. disk4s2):
diskutil info disk4s2

BACKUP="/Volumes/BACKUP/MacMini-Inventar-$(date +%Y%m%d)"
mkdir -p "$BACKUP"

# Klassische Apps
ls -1 /Applications > "$BACKUP/apps-applications.txt"
ls -1 ~/Applications 2>/dev/null > "$BACKUP/apps-user.txt"

# Homebrew
brew bundle dump --describe --file="$BACKUP/Brewfile" 2>/dev/null
brew list > "$BACKUP/brew-formulas.txt"
brew list --cask > "$BACKUP/brew-casks.txt"

# Sprach-Toolchains
npm list -g --depth=0 2>/dev/null > "$BACKUP/npm-global.txt"
pip3 list 2>/dev/null > "$BACKUP/pip-packages.txt"

# Editor-Extensions
code --list-extensions > "$BACKUP/vscode-extensions.txt" 2>/dev/null

# Plug-Ins (Audio)
ls -1 ~/Library/Audio/Plug-Ins/Components > "$BACKUP/au-plugins.txt" 2>/dev/null
ls -1 ~/Library/Audio/Plug-Ins/VST3 > "$BACKUP/vst3-plugins.txt" 2>/dev/null

# Fonts (eigene)
ls -1 ~/Library/Fonts > "$BACKUP/user-fonts.txt" 2>/dev/null

echo "Inventar in $BACKUP"

BACKUP="/Volumes/BACKUP/MacMini-Configs-$(date +%Y%m%d)"
mkdir -p "$BACKUP"

# SSH (komplette Verzeichnisstruktur, Berechtigungen mit)
cp -Rp ~/.ssh "$BACKUP/ssh"

# Git
cp ~/.gitconfig "$BACKUP/" 2>/dev/null
cp ~/.gitignore_global "$BACKUP/" 2>/dev/null

# Shell
cp ~/.zshrc "$BACKUP/" 2>/dev/null
cp ~/.zprofile "$BACKUP/" 2>/dev/null
cp ~/.zshenv "$BACKUP/" 2>/dev/null

# Editor / Terminal Settings
cp -R ~/Library/Application\ Support/Code/User "$BACKUP/vscode-user" 2>/dev/null
cp -R ~/Library/Application\ Support/Zed "$BACKUP/zed" 2>/dev/null
cp -R ~/Library/Application\ Support/com.mitchellh.ghostty "$BACKUP/ghostty" 2>/dev/null

# Hosts-Datei (falls angepasst)
sudo cp /etc/hosts "$BACKUP/etc-hosts"

# Karabiner (falls verwendet)
cp -R ~/.config/karabiner "$BACKUP/karabiner" 2>/dev/null

echo "Configs in $BACKUP"

gpg --list-secret-keys

# Private Keys exportieren
gpg --export-secret-keys --armor > /Volumes/BACKUP/gpg-private-keys.asc
gpg --export --armor > /Volumes/BACKUP/gpg-public-keys.asc
gpg --export-ownertrust > /Volumes/BACKUP/gpg-ownertrust.txt

BACKUP="/Volumes/BACKUP/MacMini-Apps-$(date +%Y%m%d)"
mkdir -p "$BACKUP"

# Apple Mail (POP3 = lokal! IMAP = nur Settings nötig)
cp -R ~/Library/Mail "$BACKUP/AppleMail" 2>/dev/null
cp ~/Library/Preferences/com.apple.mail.plist "$BACKUP/" 2>/dev/null

# Chrome / Firefox / Opera / DuckDuckGo Profile
cp -R ~/Library/Application\ Support/Google/Chrome "$BACKUP/Chrome" 2>/dev/null
cp -R ~/Library/Application\ Support/Firefox "$BACKUP/Firefox" 2>/dev/null
cp -R ~/Library/Application\ Support/com.operasoftware.Opera "$BACKUP/Opera" 2>/dev/null

# Notion / Obsidian Vaults (Pfade prüfen!)
cp -R ~/Library/Application\ Support/Notion "$BACKUP/Notion" 2>/dev/null
# Obsidian-Vault liegt da, wo DU ihn angelegt hast – das ist NICHT der Application-Support-Ordner!
# Beispiel:
# cp -R ~/Documents/Obsidian "$BACKUP/Obsidian-Vault"

echo "App-Daten in $BACKUP"

#!/bin/bash
set -e
BACKUP="/Volumes/BACKUP/MacMini-Full-$(date +%Y%m%d)"
mkdir -p "$BACKUP"

echo "=== Schnell-Backup Mac mini → $BACKUP ==="

# Auth & Dev
cp -Rp ~/.ssh "$BACKUP/"
cp ~/.gitconfig "$BACKUP/" 2>/dev/null || true
cp ~/.gitignore_global "$BACKUP/" 2>/dev/null || true

# Shell
cp ~/.zshrc ~/.zprofile ~/.zshenv "$BACKUP/" 2>/dev/null || true

# Dokumente
cp -R ~/Documents "$BACKUP/Documents"
cp -R ~/Desktop "$BACKUP/Desktop"

# Projekte / Developer (sehr wichtig!)
[ -d ~/Projekte ] && cp -R ~/Projekte "$BACKUP/Projekte"
[ -d ~/Developer ] && cp -R ~/Developer "$BACKUP/Developer"

# Logic
[ -d ~/Music/Logic ] && cp -R ~/Music/Logic "$BACKUP/Logic"
[ -d "$HOME/Music/Audio Music Apps" ] && cp -R "$HOME/Music/Audio Music Apps" "$BACKUP/AudioMusicApps"

# Inventar
ls -1 /Applications > "$BACKUP/apps-liste.txt"
brew bundle dump --describe --file="$BACKUP/Brewfile" 2>/dev/null || true

echo "Fertig: $BACKUP"
du -sh "$BACKUP"

tmutil startbackup --block
tmutil status

# Pfadleiste + Statusleiste
defaults write com.apple.finder ShowPathbar -bool true
defaults write com.apple.finder ShowStatusBar -bool true

# Dateiendungen immer anzeigen
defaults write NSGlobalDomain AppleShowAllExtensions -bool true

# Suche im aktuellen Ordner
defaults write com.apple.finder FXDefaultSearchScope -string "SCcf"

# Versteckte Dateien sichtbar
defaults write com.apple.finder AppleShowAllFiles -bool true

# Finder neu starten
killall Finder

defaults write com.apple.dock orientation -string "left"
defaults write com.apple.dock show-recents -bool false
defaults write com.apple.dock tilesize -int 48
defaults write com.apple.dock autohide -bool false
defaults write com.apple.dock mineffect -string "scale"
killall Dock

defaults write NSGlobalDomain KeyRepeat -int 2
defaults write NSGlobalDomain InitialKeyRepeat -int 15

# Autokorrektur und Smart Quotes aus
defaults write NSGlobalDomain NSAutomaticSpellingCorrectionEnabled -bool false
defaults write NSGlobalDomain NSAutomaticQuoteSubstitutionEnabled -bool false
defaults write NSGlobalDomain NSAutomaticDashSubstitutionEnabled -bool false

#!/bin/bash
# macOS-Komfort-Defaults – einmal nach Phase 1-4 ausführen.

# --- Screenshots in ~/Pictures/Screenshots statt Schreibtisch ---
mkdir -p ~/Pictures/Screenshots
defaults write com.apple.screencapture location ~/Pictures/Screenshots
defaults write com.apple.screencapture type -string "png"
defaults write com.apple.screencapture show-thumbnail -bool true

# --- Standardansicht im Finder: Liste ---
defaults write com.apple.finder FXPreferredViewStyle -string "Nlsv"

# --- Tabs statt Fenster bevorzugen ---
defaults write NSGlobalDomain AppleWindowTabbingMode -string "always"

# --- Beim Speichern: detaillierter Save-Dialog (mit allen Ordnern) ---
defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode -bool true
defaults write NSGlobalDomain NSNavPanelExpandedStateForSaveMode2 -bool true

# --- Drucken: Drucker-Dialog detailliert ---
defaults write NSGlobalDomain PMPrintingExpandedStateForPrint -bool true
defaults write NSGlobalDomain PMPrintingExpandedStateForPrint2 -bool true

# --- Per Standard auf 'Speichern' bei Schließen (statt Verwerfen) ---
defaults write NSGlobalDomain NSCloseAlwaysConfirmsChanges -bool true

# --- Schreibtisch: Externe Volumes anzeigen (Time-Machine-HDD sichtbar) ---
defaults write com.apple.finder ShowExternalHardDrivesOnDesktop -bool true
defaults write com.apple.finder ShowRemovableMediaOnDesktop -bool true
defaults write com.apple.finder ShowMountedServersOnDesktop -bool true

# --- Spaces NICHT automatisch neu anordnen ---
defaults write com.apple.dock mru-spaces -bool false

# --- Quick Look: Text in Quick Look auswählbar ---
defaults write com.apple.finder QLEnableTextSelection -bool true

# --- Mission Control: Animationen kürzer ---
defaults write com.apple.dock expose-animation-duration -float 0.12

# --- Save Screenshots/Screen Capture als PNG (oben schon, hier no-op) ---

# Anwenden
killall Finder
killall Dock
killall SystemUIServer

echo "Defaults gesetzt. Logout für volle Wirkung."

xcode-select --install

/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"

echo >> ~/.zprofile
echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> ~/.zprofile
eval "$(/opt/homebrew/bin/brew shellenv)"

# Prüfen
which brew    # → /opt/homebrew/bin/brew
brew --version

# Brewfile in ein Arbeitsverzeichnis legen (Beispiel: Downloads)
cd ~/Downloads

# Bundle installieren – Casks brauchen ggf. sudo-Passwort für /Applications
brew bundle --file=Brewfile --verbose

# Was hat NICHT geklappt?
brew bundle check --file=Brewfile

# Cleanup: alles deinstallieren, was NICHT im Brewfile steht (vorsichtig!)
# brew bundle cleanup --file=Brewfile --force

mas list

# App im Store suchen
mas search "Logic Pro"

# App installieren (ID herausfinden mit 'mas search')
# mas install 634148309   # Logic Pro
# mas install 409183694   # Keynote
# mas install 409203825   # Numbers
# mas install 409201541   # Pages
# mas install 1289583905  # Pixelmator Pro

which code
code --version
code --list-extensions | sort

# --- Homebrew Aliases ---
alias bup='brew update && brew upgrade && brew upgrade --cask && brew cleanup'
alias bls='brew leaves'
alias bcheck='brew doctor && brew missing'
alias bdump='brew bundle dump --describe --force --file=~/Ressourcen/Dev/Brewfile'

# Update + Upgrade alles + Cleanup
brew update
brew upgrade
brew upgrade --cask
brew autoremove
brew cleanup

# Probleme prüfen
brew doctor

# --- Aktive Projekte ---
mkdir -p ~/Projekte/{_Archive,_Templates,Audio/{Logic,Ableton,Bitwig},Video/{DaVinci,Footage,Proxies},Dev,Design,DJ}

# --- Ressourcen (projektübergreifend) ---
mkdir -p ~/Ressourcen/{Audio/{Samples,Kontakt-Libraries,Presets,IRs,Loops},Video/{LUTs,Footage,Overlays,PowerGrades,Templates},Dev/{Snippets,Dotfiles,Templates,Scripts},Design/{Fonts,Mockups,Assets,Icons},Software/{Installer,Lizenzen,Keys}}

# --- Developer (Apple-Konvention für Code) ---
mkdir -p ~/Developer

# --- Scripts + Logs ---
mkdir -p ~/Scripts/logs

# --- Dokumente: persönliche Struktur ---
mkdir -p ~/Documents/Privat/{"Haus & Garten",Fahrzeuge,Finanzen,Versicherungen,Gesundheit,Torry,Reisen}
mkdir -p ~/Documents/Arbeit/Stadtverwaltung

# --- VM-Backups (Proxmox etc.) ---
mkdir -p ~/VM-Backups

echo "Struktur fertig:"
tree -L 2 -d ~/Projekte ~/Ressourcen ~/Developer ~/Scripts ~/Documents 2>/dev/null

git config --global user.name "Roy Risser"
git config --global user.email "royrisser@gmail.com"

# Sane defaults
git config --global init.defaultBranch main
git config --global pull.rebase true
git config --global pull.ff only
git config --global push.default current
git config --global push.autoSetupRemote true
git config --global core.editor "code --wait"
git config --global core.autocrlf input
git config --global core.excludesFile ~/.gitignore_global
git config --global rerere.enabled true
git config --global fetch.prune true
git config --global merge.conflictstyle zdiff3
git config --global diff.colorMoved zebra
git config --global commit.gpgsign false

# macOS
.DS_Store
.AppleDouble
.LSOverride
Icon?
._*
.Spotlight-V100
.Trashes

# IDE
.vscode/
.idea/
*.swp
*.swo
*~
.history/

# Node / Python
node_modules/
.venv/
__pycache__/
*.pyc
.pytest_cache/
.mypy_cache/

# Build outputs
dist/
build/
.next/
.cache/
.turbo/

# Logs / Env
*.log
.env
.env.local
.env.*.local

# Claude
.claude/

git config --global core.excludesFile ~/.gitignore_global

mkdir -p ~/.ssh && chmod 700 ~/.ssh

# GitHub
ssh-keygen -t ed25519 -f ~/.ssh/id_github -C "royrisser+github@gmail.com" -N ""

# Hetzner-Server (Beispiel)
ssh-keygen -t ed25519 -f ~/.ssh/id_hetzner_server -C "macbook → hetzner-server" -N ""

# Hetzner Storage Box (für BorgBackup)
ssh-keygen -t ed25519 -f ~/.ssh/hetzner_storagebox -C "macbook → storagebox u540244" -N ""

# Berechtigungen härten
chmod 600 ~/.ssh/id_* ~/.ssh/hetzner_*
chmod 644 ~/.ssh/*.pub

# === GitHub ===
Host github.com
    HostName github.com
    User git
    IdentityFile ~/.ssh/id_github
    IdentitiesOnly yes
    AddKeysToAgent yes
    UseKeychain yes

# === Hetzner Server (Beispiel) ===
Host hetzner-server
    HostName your-hetzner-server.example
    User root
    IdentityFile ~/.ssh/id_hetzner_server
    IdentitiesOnly yes
    AddKeysToAgent yes
    UseKeychain yes
    ServerAliveInterval 60
    ServerAliveCountMax 3

# === Hetzner Storage Box (BorgBackup) ===
Host hetzner-backup
    HostName u540244.your-storagebox.de
    User u540244
    Port 23
    IdentityFile ~/.ssh/hetzner_storagebox
    IdentitiesOnly yes
    AddKeysToAgent yes
    UseKeychain yes
    ServerAliveInterval 60
    ServerAliveCountMax 3

# Bei GitHub einfügen → Settings → SSH and GPG keys → New SSH key
pbcopy < ~/.ssh/id_github.pub
echo "GitHub-Key in der Zwischenablage."

# Beim Hetzner Robot (Storage Box → SSH Keys)
pbcopy < ~/.ssh/hetzner_storagebox.pub
echo "Storage-Box-Key in der Zwischenablage."

ssh -T git@github.com
# Erwartete Antwort: "Hi <username>! You've successfully authenticated…"

sftp hetzner-backup
# Wenn 'sftp>' kommt → funktioniert. mit 'exit' raus.

# --- Brew shellenv (kommt aus zprofile – sicherheitshalber hier auch) ---
[ -f /opt/homebrew/bin/brew ] && eval "$(/opt/homebrew/bin/brew shellenv)"

# --- History sinnvoll ---
HISTSIZE=20000
SAVEHIST=20000
HISTFILE=~/.zsh_history
setopt SHARE_HISTORY HIST_IGNORE_DUPS HIST_IGNORE_SPACE HIST_REDUCE_BLANKS INC_APPEND_HISTORY

# --- Completions ---
autoload -Uz compinit && compinit -i
zstyle ':completion:*' menu select
zstyle ':completion:*' matcher-list 'm:{a-zA-Z}={A-Za-z}'

# --- Autosuggestions ---
[ -f /opt/homebrew/share/zsh-autosuggestions/zsh-autosuggestions.zsh ] && \
  source /opt/homebrew/share/zsh-autosuggestions/zsh-autosuggestions.zsh

# --- zoxide (smartes cd) ---
command -v zoxide >/dev/null 2>&1 && eval "$(zoxide init zsh)"

# --- fzf Tastatur-Bindings ---
[ -f ~/.fzf.zsh ] && source ~/.fzf.zsh

# --- Starship Prompt ---
command -v starship >/dev/null 2>&1 && eval "$(starship init zsh)"

# --- Aliase ---
alias ls='eza --icons --group-directories-first'
alias ll='eza -l --icons --group-directories-first --git'
alias la='eza -la --icons --group-directories-first --git'
alias lt='eza --tree --level=2 --icons --group-directories-first'
alias cat='bat --plain'
alias grep='rg'
alias find='fd'
alias cdp='cd ~/Projekte'
alias cdd='cd ~/Developer'

# --- Homebrew ---
alias bup='brew update && brew upgrade && brew upgrade --cask && brew cleanup'

# --- Git ---
alias gs='git status -sb'
alias gco='git checkout'
alias gp='git pull'
alias gpu='git push'
alias gl='git log --oneline --graph --decorate --all -20'

# --- Editoren ---
export EDITOR="code --wait"
export VISUAL="code --wait"

$(brew --prefix)/opt/fzf/install --key-bindings --completion --no-update-rc

add_newline = true
command_timeout = 800

format = """
[╭─](#7a8c93) $username$hostname$directory$git_branch$git_status$nodejs$python$cmd_duration
[╰─](#7a8c93)$character """

[character]
success_symbol = "[›](#3DAD66)"
error_symbol   = "[›](#D24D4D)"

[directory]
truncation_length = 4
style = "bold #6AACBB"

[git_branch]
symbol = " "
style = "#C4653A"

[git_status]
style = "#D4B04A"

[cmd_duration]
min_time = 2_000
format = "[$duration]($style) "
style = "#7a8c93"

# Prefix auf Ctrl-a (statt Ctrl-b)
set -g prefix C-a
unbind C-b
bind C-a send-prefix

# Mouse + 24-bit-Color
set -g mouse on
set -g default-terminal "screen-256color"
set -ga terminal-overrides ",xterm-256color:RGB"

# Vim-Style Pane-Navigation
bind h select-pane -L
bind j select-pane -D
bind k select-pane -U
bind l select-pane -R

# Splits intuitiver
bind | split-window -h -c "#{pane_current_path}"
bind - split-window -v -c "#{pane_current_path}"

# Reload Config
bind r source-file ~/.tmux.conf \; display "Config reloaded"

# Statusbar
set -g status-position top
set -g status-bg "#11171a"
set -g status-fg "#d7e5e8"
set -g status-left  "#[fg=#3DAD66] #S "
set -g status-right "#[fg=#6AACBB] %H:%M  #[fg=#C4653A]%d.%m. "

mkdir -p ~/.nvm

# In ~/.zshrc anhängen (nicht doppeln, falls schon drin)
cat >> ~/.zshrc <<'EOF'

# --- NVM ---
export NVM_DIR="$HOME/.nvm"
[ -s "$(brew --prefix nvm)/nvm.sh" ] && \. "$(brew --prefix nvm)/nvm.sh"
[ -s "$(brew --prefix nvm)/etc/bash_completion.d/nvm" ] && \. "$(brew --prefix nvm)/etc/bash_completion.d/nvm"
EOF

# Shell neu laden, dann LTS installieren
source ~/.zshrc
nvm install --lts
nvm alias default 'lts/*'
node --version
npm --version

# Python kommt im Brewfile (python@3.12 oder neuer)
python3 --version

# uv: schneller pip/poetry-Ersatz (im Brewfile)
uv --version

# Globales Tool installieren:
uv tool install ruff
uv tool install yt-dlp

npm install -g @anthropic-ai/claude-code

# Login (öffnet Browser)
claude /login

# In einem Projekt starten:
cd ~/Projekte/Dev/mein-projekt
claude

# rclone ist im Brewfile
rclone config
# → n (new remote)
# → name: onedrive
# → storage: 31 (Microsoft OneDrive)
# → leave client_id/secret empty (default app)
# → region: global
# → leave drive_id default
# → use auto config: y
# → browser-Login durchlaufen
# → q (quit)

# Inhalte sichten
rclone lsd onedrive:

# Komplette Documents migrieren
rclone copy onedrive:Documents ~/Documents/ --progress --transfers 8 --checkers 16

# Danach Remote entfernen
rclone config delete onedrive

diskutil info /Volumes/Libraries | grep -E '(Capacity|Free)'

mkdir -p /Volumes/Libraries/{Audio/{Samples,"Kontakt-Libraries","Komplete Libraries",Loops,IRs,Presets,"Sample-Packs"},Video/{"DaVinci-Cache","DaVinci-Archive","Footage-Library","LUTs-XL","Stock-Footage"},DJ/{Rekordbox,"DJ-Music","DJ-Stems","DJ-Recordings"},Plugins/{"Spectrasonics-STEAM","Native-Instruments","Output","Komplete-Content"},Scratch}

tree -L 2 -d /Volumes/Libraries

ls -la ~/Music/Audio\ Music\ Apps
ls -la ~/Library/Application\ Support/Logic

# AU (Logic, GarageBand, Live, andere AU-Hosts)
~/Library/Audio/Plug-Ins/Components/

# VST3 (Live, Bitwig, Studio One, Reaper)
~/Library/Audio/Plug-Ins/VST3/

# Audio-Presets
~/Library/Audio/Presets/

# Validierung in Logic erzwingen:
killall -9 AudioComponentRegistrar
auvaltool -a

system_profiler SPUSBDataType | grep -i flx10 -A 5

# Caches und Build-Outputs ausschließen
sudo tmutil addexclusion -p ~/Library/Caches
sudo tmutil addexclusion -p ~/Downloads
sudo tmutil addexclusion -p ~/Developer/**/node_modules
sudo tmutil addexclusion -p ~/Projekte/**/node_modules
sudo tmutil addexclusion -p ~/Projekte/**/.next
sudo tmutil addexclusion -p ~/Projekte/Video/DaVinci/CacheClip
sudo tmutil addexclusion -p ~/Library/Application\ Support/DaVinci\ Resolve/Cache

# Prüfen
sudo tmutil isexcluded ~/Downloads

tmutil startbackup
tmutil status

# Komfortablerer Status-Watcher:
while true; do clear; tmutil status; sleep 5; done

mkdir -p "/Volumes/Time Machine/Archiv/Musik"
mkdir -p "/Volumes/Time Machine/Archiv/Bilder"

# Beispiele: vom alten Mac mini (oder aus dem Backup) kopieren
# rsync ist robuster als cp:
rsync -avh --progress /Volumes/MacMini-Backup/Musik/ "/Volumes/Time Machine/Archiv/Musik/"
rsync -avh --progress /Volumes/MacMini-Backup/Bilder/ "/Volumes/Time Machine/Archiv/Bilder/"

pbcopy < ~/.ssh/hetzner_storagebox.pub
echo 'Key in der Zwischenablage – jetzt bei Hetzner einfügen.'

sftp hetzner-backup
# Wenn 'sftp>' kommt → funktioniert. mit 'exit' raus.

# borgbackup ist im Brewfile
borg --version

# Repo auf der Storage Box erstellen
borg init --encryption=repokey \
  ssh://u540244@u540244.your-storagebox.de:23/./macbook-pro

borg key export \
  ssh://u540244@u540244.your-storagebox.de:23/./macbook-pro \
  ~/borg-key-macbook-pro.txt

# Inhalt anzeigen → in den Passwort-Manager kopieren
cat ~/borg-key-macbook-pro.txt

# Wenn sicher abgelegt: lokale Kopie LÖSCHEN
rm ~/borg-key-macbook-pro.txt

# Einmalig: Passwort hinzufügen
security add-generic-password -a "borg-hetzner" -s "BorgBackup Hetzner u540244" -w "DEIN_BORG_PASSWORT"

# Im Script abrufen
export BORG_PASSPHRASE=$(security find-generic-password -a "borg-hetzner" -w)

# Test
borg info ssh://u540244@u540244.your-storagebox.de:23/./macbook-pro

export BORG_REPO="ssh://u540244@u540244.your-storagebox.de:23/./macbook-pro"
export BORG_PASSPHRASE=$(security find-generic-password -a "borg-hetzner" -w)

borg create --progress --stats --compression lz4 \
  ${BORG_REPO}::erst-${HOSTNAME}-{now:%Y-%m-%d_%H%M} \
  ~/Documents \
  ~/Desktop \
  ~/Projekte \
  ~/Developer \
  ~/Ressourcen/Dev \
  ~/Ressourcen/Software \
  ~/Scripts \
  --exclude '.DS_Store' \
  --exclude 'node_modules' \
  --exclude '.Trash' \
  --exclude '*.wav' \
  --exclude '*.aif' \
  --exclude '*.flac' \
  --exclude 'DerivedData' \
  --exclude '.cache' \
  --exclude '__pycache__' \
  --exclude '.venv' \
  --exclude '.next' \
  --exclude 'dist'

#!/bin/bash
# ============================================
# BorgBackup – MacBook Pro → Hetzner Storage Box (u540244)
# ============================================
set -e

export BORG_REPO="ssh://u540244@u540244.your-storagebox.de:23/./macbook-pro"
export BORG_PASSPHRASE=$(security find-generic-password -a "borg-hetzner" -w)

LOG_DIR="$HOME/Scripts/logs"
mkdir -p "$LOG_DIR"
LOG_FILE="$LOG_DIR/hetzner-backup-$(date +%Y%m%d_%H%M).log"

{
  echo "=== BorgBackup MacBook → Hetzner ==="
  echo "Start: $(date)"

  borg create --progress --stats --compression lz4 \
    ${BORG_REPO}::macbook-{now:%Y-%m-%d_%H%M} \
    ~/Documents \
    ~/Desktop \
    ~/Projekte \
    ~/Developer \
    ~/Ressourcen/Dev \
    ~/Ressourcen/Software \
    ~/Scripts \
    --exclude '.DS_Store' \
    --exclude 'node_modules' \
    --exclude '.Trash' \
    --exclude '*.wav' \
    --exclude '*.aif' \
    --exclude '*.flac' \
    --exclude 'DerivedData' \
    --exclude '.cache' \
    --exclude '__pycache__' \
    --exclude '.venv' \
    --exclude '.next' \
    --exclude 'dist'

  echo "--- Prune ---"
  borg prune --stats \
    ${BORG_REPO} \
    --keep-daily 7 \
    --keep-weekly 4 \
    --keep-monthly 6 \
    --keep-yearly 2

  echo "--- Compact ---"
  borg compact ${BORG_REPO}

  echo "Fertig: $(date)"
} 2>&1 | tee "$LOG_FILE"

chmod +x ~/Scripts/hetzner-backup.sh
~/Scripts/hetzner-backup.sh

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>com.roy.hetzner-backup</string>
    <key>ProgramArguments</key>
    <array>
        <string>/bin/bash</string>
        <string>/Users/royrisser/Scripts/hetzner-backup.sh</string>
    </array>
    <key>StartCalendarInterval</key>
    <dict>
        <key>Hour</key>
        <integer>2</integer>
        <key>Minute</key>
        <integer>0</integer>
        <key>Weekday</key>
        <integer>0</integer>
    </dict>
    <key>StandardOutPath</key>
    <string>/Users/royrisser/Scripts/logs/hetzner-backup.out.log</string>
    <key>StandardErrorPath</key>
    <string>/Users/royrisser/Scripts/logs/hetzner-backup.err.log</string>
    <key>EnvironmentVariables</key>
    <dict>
        <key>PATH</key>
        <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin</string>
    </dict>
</dict>
</plist>

launchctl unload ~/Library/LaunchAgents/com.roy.hetzner-backup.plist 2>/dev/null
launchctl load ~/Library/LaunchAgents/com.roy.hetzner-backup.plist

# Status checken
launchctl list | grep hetzner
# Logs ansehen
tail -f ~/Scripts/logs/hetzner-backup.out.log

export BORG_REPO="ssh://u540244@u540244.your-storagebox.de:23/./macbook-pro"
export BORG_PASSPHRASE=$(security find-generic-password -a "borg-hetzner" -w)

# Snapshots auflisten
borg list $BORG_REPO

# Inhalt eines Snapshots zeigen
borg list $BORG_REPO::macbook-2026-05-17_0200 | head -20

# Eine Datei testweise wiederherstellen
mkdir -p /tmp/borg-test && cd /tmp/borg-test
borg extract $BORG_REPO::macbook-2026-05-17_0200 Users/royrisser/Documents/Privat/Finanzen
ls -la /tmp/borg-test/Users/royrisser/Documents/Privat/Finanzen

# Aufräumen
rm -rf /tmp/borg-test

# --- Borg ---
export BORG_REPO_HETZNER="ssh://u540244@u540244.your-storagebox.de:23/./macbook-pro"

alias borg-list='BORG_PASSPHRASE=$(security find-generic-password -a "borg-hetzner" -w) borg list $BORG_REPO_HETZNER'
alias borg-info='BORG_PASSPHRASE=$(security find-generic-password -a "borg-hetzner" -w) borg info $BORG_REPO_HETZNER'
alias borg-run='~/Scripts/hetzner-backup.sh'
alias borg-mount='BORG_PASSPHRASE=$(security find-generic-password -a "borg-hetzner" -w) borg mount $BORG_REPO_HETZNER /tmp/borg-mnt'
alias borg-unmount='borg umount /tmp/borg-mnt'

rsync -avh --progress "/Volumes/Time Machine/Archiv/Musik/" "/Volumes/Cold Storage/Musik/"
rsync -avh --progress "/Volumes/Time Machine/Archiv/Bilder/" "/Volumes/Cold Storage/Bilder/"

rsync -avh --delete --progress "/Volumes/Time Machine/Archiv/" "/Volumes/Cold Storage/"

# BorgBackup
sudo apt install borgbackup

# Eigener SSH-Key
ssh-keygen -t ed25519 -f ~/.ssh/hetzner_storagebox -C "linux-server → u540244"

# Public Key bei Hetzner hinterlegen (Robot → SSH-Keys, GLEICHE Box)
cat ~/.ssh/hetzner_storagebox.pub

# Eigenes Repo
borg init --encryption=repokey \
  ssh://u540244@u540244.your-storagebox.de:23/./linux-server

# Schlüssel exportieren und sichern!
borg key export \
  ssh://u540244@u540244.your-storagebox.de:23/./linux-server \
  ~/borg-key-linux-server.txt

crontab -e
# Folgende Zeile einfügen:
0 3 * * 0 /root/scripts/hetzner-backup.sh >> /var/log/hetzner-backup.log 2>&1

alias hetzner-mount='open "smb://u540244@u540244.your-storagebox.de/u540244"'
alias hetzner-unmount='diskutil unmount /Volumes/u540244 2>/dev/null'

system_profiler SPHardwareDataType SPDisplaysDataType SPAudioDataType SPUSBDataType SPThunderboltDataType > ~/Documents/Privat/MBP-Inventar-$(date +%Y%m%d).txt

tmutil latestbackup
tmutil status

borg-list
borg-info

# GitHub
cd ~/Developer
git clone git@github.com:royrisser/dotfiles.git test-clone 2>/dev/null || \
  echo "Repo nicht da – Test mit eigenem privatem Repo wiederholen"
ssh -T git@github.com

# Hetzner Server
ssh hetzner-server "uname -a"

# Storage Box
sftp hetzner-backup <<EOF
ls
exit
EOF

# Über Homebrew (auch auf Mac mini)
brew install ollama

# Service als LaunchAgent starten (läuft beim Login)
brew services start ollama

# Testen
ollama --version
curl http://127.0.0.1:11434/api/tags

# Allrounder
ollama pull llama3.3:8b
ollama pull qwen2.5:14b

# Code
ollama pull qwen2.5-coder:7b
ollama pull deepseek-coder-v2:16b-lite-base-q4_0

# Embeddings (für Open WebUI / RAG)
ollama pull nomic-embed-text

# Liste
ollama list

# Test-Chat
ollama run llama3.3:8b "Erkläre Tailscale in zwei Sätzen."

# Als brew service: Environment per launchd plist
launchctl setenv OLLAMA_HOST "0.0.0.0:11434"

# Service neustarten
brew services restart ollama

# Vom MacBook aus testen
curl http://zkyserver:11434/api/tags

# Docker Desktop ist im Brewfile
open -a "Docker"

# Open WebUI Container starten
docker run -d \
  --name open-webui \
  --restart unless-stopped \
  -p 8080:8080 \
  -v open-webui:/app/backend/data \
  -e OLLAMA_BASE_URL=http://host.docker.internal:11434 \
  ghcr.io/open-webui/open-webui:main

# Erreichbar unter:
# http://zkyserver:8080  (vom MacBook via Tailscale)
# http://localhost:8080    (lokal auf dem Mac mini)