feat: optimize system configs, add custom viewers, and configure Kiview previews

Author: dolfbarr

.chezmoignore

@@ -9,11 +9,14 @@ bin/chezmoi
 .cursorrules
 .directory
 CLAUDE.md
-install_toshy.sh
 apply_dns.sh
 setup_stationary.sh
 .agents/
 README.md
 LICENSE
 AGENTS.md
 scripts/
+
+{{ if ne .chezmoi.os "darwin" }}
+Library/**
+{{ end }}

AGENTS.md

@@ -13,6 +13,7 @@ If you are an AI assistant (Cursor, Claude Code, etc.), you MUST adhere to the f
 ## 2. Privilege Escalation
 - On **Linux**, when running commands that require root or administrator privileges, **ALWAYS use `pkexec` instead of `sudo`**. The user cannot type their password in the IDE terminal, so a GUI prompt via `pkexec` is required.
 - On **macOS**, `pkexec` does not exist, so you may use standard `sudo` (or `osascript`) as macOS handles terminal authentication differently.
+- **Selective Phase Execution**: When running the setup scripts (`run_once_setup_fedora.sh`), avoid running blindly with `AUTO_YES=1` in the background if root authorizations are required. Instead, run interactively and selectively authorize only the phases that contain the modified files (e.g. Phase 2 for general/flatpak package updates) while declining others (like Phase 1/Phase 3) to minimize prompt overhead and privilege escalation failures.
 
 ## 3. Scripting & Code Quality
 - **Idempotency**: All bash scripts (like `bootstrap.sh`) must be safely repeatable. Always check if a command or directory exists before trying to install it.
@@ -55,3 +56,17 @@ To achieve a macOS-like modifier experience on PC keyboard hardware, the followi
 ## 9. KDE Plasma Style Theme Management
 - Plasma panel theme styles (Breeze Light/Dark) are separate from standard window color schemes and are saved in `plasmarc`.
 - Because Chezmoi template deployment completely overwrites `plasmarc` (often wiping out the `[Theme]` group), you must use the `run_after_setup_plasma.sh` hook. This script reads the active `kdeglobals` color scheme and dynamically re-writes the matching Plasma style (`breeze-light` or `breeze-dark`) back into `plasmarc` to guarantee the panel colors stay in sync after every apply.
+
+## 10. Flatpak Applications, Settings & Overrides
+- **Permission Overrides**: Custom Flatpak permission overrides (such as browser integrations, global menus, or GTK theme access for apps like Todoist) MUST be tracked under `dot_local/share/flatpak/overrides/` to maintain desktop consistency.
+- **EasyEffects Syncing**: Because EasyEffects is a Flatpak, it sandboxes its configs. Its data directories (`~/.var/app/com.github.wwmm.easyeffects/data/easyeffects` and `~/.var/app/com.github.wwmm.easyeffects/config/easyeffects`) MUST be symlinked to the central, chezmoi-tracked `~/.config/easyeffects` folder via setup scripts to ensure presets remain in sync.
+
+## 11. KDE Panels, Greeters, and Settings
+- **KDE Panels & Applets**: Do NOT track the dynamic `plasma-org.kde.plasma.desktop-appletsrc` file as it contains coordinate layouts and unique IDs that break across screens. Instead, panels must be configured programmatically using the KDE Desktop Scripting API via `scripts/setup_plasma_panels.js`.
+- **kscreenlockerrc**: Static screen lock settings (disabling auto-lock, setting solid black background) are tracked directly as a private chezmoi file (`dot_config/private_kscreenlockerrc`).
+- **SDDM Greeter Theme Sync**: Do NOT track `/etc/sddm.conf` directly. Instead, customize the login screen programmatically during bootstrapping by writing synchronized cursor/font settings to `/etc/sddm.conf.d/kde_settings.conf`.
+
+## 12. Steam Client and Gaming Optimizations
+- **Client Configuration**: Do NOT track Steam's `config.vdf` file directly as it contains personal credentials and active download history logs.
+- **Download Speed Fixes**: Automatically write the HTTP2 and connection optimizations (`steam_dev.cfg`) to `~/.local/share/Steam/steam_dev.cfg` during bootstrapping.
+- **Btrfs No-CoW**: Always disable Copy-on-Write (`chattr +C`) on Steam directories to prevent database fragmentation and gaming stutters.

Library/Preferences/private_com.knollsoft.Rectangle.plist

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>launchOnLogin</key>
+	<true/>
+</dict>
+</plist>

bootstrap.sh

@@ -49,21 +49,55 @@ if [[ "$OSTYPE" == "darwin"* ]]; then
     export SUI_SUDO="sudo -A"
     trap 'rm -f "$SUDO_ASKPASS"' EXIT
 else
-    export SUI_SUDO="pkexec"
+    if command -v pkexec &> /dev/null; then
+        export SUI_SUDO="pkexec"
+    else
+        export SUI_SUDO="sudo"
+    fi
+fi
+
+# Ensure basic prerequisites are installed on Fedora/Linux
+if [[ "$OSTYPE" != "darwin"* ]] && command -v dnf &> /dev/null; then
+    MISSING_PREREQS=()
+    for cmd in curl tar unzip git pkexec; do
+        if ! command -v "$cmd" &>/dev/null; then
+            pkg="$cmd"
+            if [[ "$cmd" == "pkexec" ]]; then pkg="polkit"; fi
+            MISSING_PREREQS+=("$pkg")
+        fi
+    done
+    
+    if [ ${#MISSING_PREREQS[@]} -ne 0 ]; then
+        echo "Installing missing prerequisites: ${MISSING_PREREQS[*]}"
+        if [ "$EUID" -eq 0 ]; then
+            dnf install -y "${MISSING_PREREQS[@]}"
+        else
+            sudo dnf install -y "${MISSING_PREREQS[@]}"
+        fi
+    fi
 fi
 
 # Terminal Candy: install gum
 if ! command -v gum &> /dev/null; then
     echo "Installing gum for terminal UI..."
     GUM_VERSION="0.14.3"
+    ARCH=$(uname -m)
     if [[ "$OSTYPE" == "darwin"* ]]; then
-        curl -sL "https://github.com/charmbracelet/gum/releases/download/v${GUM_VERSION}/gum_${GUM_VERSION}_Darwin_arm64.tar.gz" | tar xz -C /tmp
+        GUM_ARCH="Darwin_x86_64"
+        if [[ "$ARCH" == "arm64" ]]; then
+            GUM_ARCH="Darwin_arm64"
+        fi
+        curl -sL "https://github.com/charmbracelet/gum/releases/download/v${GUM_VERSION}/gum_${GUM_VERSION}_${GUM_ARCH}.tar.gz" | tar xz -C /tmp
         mkdir -p "$HOME/.local/bin"
-        mv /tmp/gum_${GUM_VERSION}_Darwin_arm64/gum "$HOME/.local/bin/gum"
+        mv "/tmp/gum_${GUM_VERSION}_${GUM_ARCH}/gum" "$HOME/.local/bin/gum"
     else
-        curl -sL "https://github.com/charmbracelet/gum/releases/download/v${GUM_VERSION}/gum_${GUM_VERSION}_linux_x86_64.tar.gz" | tar xz -C /tmp
+        GUM_ARCH="linux_x86_64"
+        if [[ "$ARCH" == "aarch64" || "$ARCH" == "arm64" ]]; then
+            GUM_ARCH="linux_arm64"
+        fi
+        curl -sL "https://github.com/charmbracelet/gum/releases/download/v${GUM_VERSION}/gum_${GUM_VERSION}_${GUM_ARCH}.tar.gz" | tar xz -C /tmp
         mkdir -p "$HOME/.local/bin"
-        mv /tmp/gum_${GUM_VERSION}_linux_x86_64/gum "$HOME/.local/bin/gum"
+        mv "/tmp/gum_${GUM_VERSION}_${GUM_ARCH}/gum" "$HOME/.local/bin/gum"
     fi
     export PATH="$HOME/.local/bin:$PATH"
 fi
@@ -120,8 +154,8 @@ echo ""
 gum style --border normal --margin "1" --padding "1" --border-foreground 212 "Starting Dotfiles Bootstrap (${PROFILE} profile)"
 
 # Shell History Migration (Bash -> Zsh)
-if [[ -n "$BASH_VERSION" ]] || [[ -f "$HOME/.bash_history" ]]; then
-    run_step "Migrating Bash history to Zsh format" bash -c 'if [[ -f "$HOME/.bash_history" ]]; then cat "$HOME/.bash_history" | while read -r line; do echo ": $(date +%s):0;$line"; done >> "$HOME/.zsh_history"; fi'
+if [[ -f "$HOME/.bash_history" ]]; then
+    run_step "Migrating Bash history to Zsh format" bash -c 'cat "$HOME/.bash_history" | while read -r line; do echo ": $(date +%s):0;$line"; done >> "$HOME/.zsh_history" && mv "$HOME/.bash_history" "$HOME/.bash_history.migrated"'
 fi
 
 # 0. Update System Packages
@@ -142,10 +176,14 @@ if [[ $AUTO_YES -eq 1 ]] || gum confirm "Setup YubiKey for passwordless sudo now
     run_step_sudo "Enabling Smartcard Daemon (pcscd)" systemctl enable --now pcscd.socket 2>/dev/null || true
 
     if [ ! -f "$HOME/.config/Yubico/u2f_keys" ] && command -v pamu2fcfg &> /dev/null; then
-        echo ""
-        gum style --foreground 220 "🔑 Please enter your YubiKey PIN (if prompted) and then touch your YubiKey..."
-        mkdir -p "$HOME/.config/Yubico"
-        pamu2fcfg > "$HOME/.config/Yubico/u2f_keys" || true
+        if [[ $DRY_RUN -eq 1 ]]; then
+            echo "[DRY-RUN] Touch YubiKey and write key map to $HOME/.config/Yubico/u2f_keys"
+        else
+            echo ""
+            gum style --foreground 220 "🔑 Please enter your YubiKey PIN (if prompted) and then touch your YubiKey..."
+            mkdir -p "$HOME/.config/Yubico"
+            pamu2fcfg > "$HOME/.config/Yubico/u2f_keys" || true
+        fi
     fi
 
     run_step_sudo "Configuring PAM for YubiKey" bash -c "
@@ -181,15 +219,27 @@ fi
 
 REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
-run_step "Linking Chezmoi to $REPO_DIR" bash -c "mkdir -p '$HOME/.config/chezmoi' && echo 'sourceDir = \"$REPO_DIR\"' > '$HOME/.config/chezmoi/chezmoi.toml'"
+run_step "Linking Chezmoi to $REPO_DIR" bash -c "
+mkdir -p '\$HOME/.config/chezmoi'
+if [ -f '\$HOME/.config/chezmoi/chezmoi.toml' ]; then
+    if ! grep -q 'sourceDir' '\$HOME/.config/chezmoi/chezmoi.toml'; then
+        echo 'sourceDir = \"$REPO_DIR\"' >> '\$HOME/.config/chezmoi/chezmoi.toml'
+    fi
+else
+    echo 'sourceDir = \"$REPO_DIR\"' > '\$HOME/.config/chezmoi/chezmoi.toml'
+fi"
 
 # Apply dotfiles (this automatically triggers run_once_setup scripts)
 if [[ $AUTO_YES -eq 1 ]] || gum confirm "Apply dotfiles and overwrite local configurations?"; then
     echo ""
     gum style --foreground 212 "Applying dotfiles and running OS-specific setups..."
     # We do not use gum spin here because OS setups (dnf/brew) take a long time 
-    # and provide their own important interactive output/progress bars.
-    chezmoi apply --force
+    # and provide their own interactive output/progress bars.
+    if [[ $DRY_RUN -eq 1 ]]; then
+        chezmoi apply --force --dry-run
+    else
+        chezmoi apply --force
+    fi
     gum style --foreground 46 "✔ Dotfiles applied successfully!"
 fi
 

dot_config/environment.d/10-nvidia-wayland.conf

@@ -0,0 +1,6 @@
+# NVIDIA Shader Cache optimizations for gaming
+__GL_SHADER_DISK_CACHE_SIZE=10737418240
+__GL_SHADER_DISK_CACHE_SKIP_CLEANUP=1
+
+# NVIDIA VA-API hardware video acceleration configuration
+NVD_BACKEND=direct

dot_config/environment.d/10-nvidia.conf

@@ -17,7 +17,6 @@ RefreshRate=240
 [Plugins]
 applicationswitcherEnabled=true
 highlightwindowEnabled=false
-toshy-dbus-notifyactivewindowEnabled=true
 wobblywindowsEnabled=false
 poloniumEnabled=false
 

dot_config/environment.d/20-nvidia-shader-cache.conf

@@ -0,0 +1,74 @@
+[Added Associations]
+text/plain=dev.zed.Zed.desktop;
+video/mp4=mpv.desktop;
+video/x-matroska=mpv.desktop;
+video/webm=mpv.desktop;
+video/quicktime=mpv.desktop;
+application/pdf=org.gnome.Evince.desktop;
+image/png=com.interversehq.qView.desktop;
+image/jpeg=com.interversehq.qView.desktop;
+
+[Default Applications]
+# Web
+text/html=google-chrome.desktop
+x-scheme-handler/http=google-chrome.desktop
+x-scheme-handler/https=google-chrome.desktop
+x-scheme-handler/about=google-chrome.desktop
+x-scheme-handler/unknown=google-chrome.desktop
+
+# Folders
+inode/directory=org.kde.dolphin.desktop
+
+# Text & Code
+text/plain=dev.zed.Zed.desktop
+text/markdown=dev.zed.Zed.desktop
+application/json=dev.zed.Zed.desktop
+application/xml=dev.zed.Zed.desktop
+text/xml=dev.zed.Zed.desktop
+text/yaml=dev.zed.Zed.desktop
+application/x-yaml=dev.zed.Zed.desktop
+text/x-python=dev.zed.Zed.desktop
+text/x-shellscript=dev.zed.Zed.desktop
+text/x-csrc=dev.zed.Zed.desktop
+text/x-chdr=dev.zed.Zed.desktop
+text/x-c++src=dev.zed.Zed.desktop
+text/x-c++hdr=dev.zed.Zed.desktop
+text/javascript=dev.zed.Zed.desktop
+
+# Videos (MPV)
+video/mp4=mpv.desktop
+video/x-matroska=mpv.desktop
+video/webm=mpv.desktop
+video/quicktime=mpv.desktop
+video/mpeg=mpv.desktop
+video/x-msvideo=mpv.desktop
+video/ogg=mpv.desktop
+video/3gpp=mpv.desktop
+video/x-flv=mpv.desktop
+
+# Audios (MPV)
+audio/mpeg=mpv.desktop
+audio/flac=mpv.desktop
+audio/ogg=mpv.desktop
+audio/x-wav=mpv.desktop
+audio/aac=mpv.desktop
+audio/m4a=mpv.desktop
+audio/x-m4a=mpv.desktop
+
+# Images (qView)
+image/png=com.interversehq.qView.desktop
+image/jpeg=com.interversehq.qView.desktop
+image/gif=com.interversehq.qView.desktop
+image/webp=com.interversehq.qView.desktop
+image/svg+xml=com.interversehq.qView.desktop
+image/bmp=com.interversehq.qView.desktop
+image/tiff=com.interversehq.qView.desktop
+
+# Documents & PDFs (Evince)
+application/pdf=org.gnome.Evince.desktop
+
+# Custom URI Handlers
+x-scheme-handler/antigravity=antigravity.desktop
+x-scheme-handler/bitwarden=bitwarden.desktop
+x-scheme-handler/com.todoist=todoist.desktop
+x-scheme-handler/todoist=todoist.desktop

dot_config/kwinrc.tmpl

@@ -84,7 +84,7 @@ progress_line_width=20
 #   fullscreen = cycle:crop_free:fullscreen:no/yes=fullscreen_exit!?Fullscreen
 #   loop-playlist = cycle:repeat:loop-playlist:no/inf!?Loop playlist
 #   toggle:{icon}:{prop} = cycle:{icon}:{prop}:no/yes!
-controls=menu,gap,<video,audio>subtitles,<has_many_audio>audio,<has_many_video>video,<has_many_edition>editions,<stream>stream-quality,gap,space,<video,audio>speed,space,shuffle,loop-playlist,loop-file,gap,prev,items,next,gap,fullscreen
+controls=menu,gap,<video,audio>subtitles,<has_many_audio>audio,<has_many_video>video,<has_many_edition>editions,<stream>stream-quality,gap,space,<video,audio>speed,space,shuffle,loop-playlist,loop-file,gap,prev,items,next,gap,cycle:volume_up:mute:no/yes=volume_off!,gap,fullscreen
 controls_size=32
 controls_margin=8
 controls_spacing=2