macos_config.sh

#!/usr/bin/env bash
# Configure macOS to my linking.
# NOTE make sure this script is idempotent!
# Modeline {
#	vi: foldmarker={,} foldmethod=marker foldlevel=0
# }

# Notes {
# Find out key and values for settings by:
# 1. $ defaults read > before
# 2. Change a setting e.g. in System Settings
# 3. $ defaults read > after
# 4. $ vimdiff before after
# Reference: https://pawelgrzybek.com/change-macos-user-preferences-via-command-line/
# }

# Script Environment {
set -o errexit
set -o nounset
set -o pipefail
set -o xtrace

# From: https://github.com/mathiasbynens/dotfiles/blob/main/.macos
# Close any open System Settings panes, to prevent them from overriding
# settings we’re about to change
osascript -e 'tell application "System Settings" to quit'
# Ask for the administrator password upfront
#sudo -v
# Keep-alive: update existing `sudo` time stamp until this script has finished.
while true; do sudo -n true; sleep 60; kill -0 "$$" || exit; done 2>/dev/null &
# }

# System {

# Allow a sudo session to last a bit longer, across terminals.
sudo sh -c " cat >/etc/sudoers.d/99_my_settings" << EOF
# Set cached password timeout in minutes.
Defaults:USER_NAME timestamp_timeout=16
# Single password cache for user.
Defaults !tty_tickets

# Command groups.
Cmnd_Alias CMDS_POWER = /sbin/halt, /sbin/shutdown, /sbin/reboot

# Let power users issue power commands.
%power ALL = NOPASSWD: CMDS_POWER
EOF


# Create power group and add user for sudo rule above.
if ! dscacheutil -q group | grep -q "name: power"; then
	sudo dseditgroup -o create power
fi
if ! groups | grep -q power; then
	sudo dseditgroup -o edit -u $USER -p -a $USER -t user power
fi

# Sudo with Touch ID. Ref: https://news.ycombinator.com/item?id=26303170
# To work within tmux, need to use pam_reattach. Ref: https://github.com/fabianishere/pam_reattach
# Try detect if TouchID exist. Ref: https://apple.stackexchange.com/a/450646
if (bioutil -r | grep -q "Touch ID for unlock") && (! grep -q pam_tid.so /etc/pam.d/sudo) ; then
	sudo sed -i -e '1s;^;auth       optional        /opt/homebrew/lib/pam/pam_reattach.so\nauth       sufficient     pam_tid.so # Sudo with Touch ID\n;' /etc/pam.d/sudo
fi
# }

# TODO adapt this to System Settings in macOS Ventura
# System Settings {
# Apple ID {
## iCloud
# * Uncheck "Optimize Mac Storage", so that Time Machine can back up all data.
## Media & Purchases
# * Free Downloads: Never Require
# }

# General {
# * Appearance: Auto
# }

# Desktop & Dock {
# * Stage manager: enable
#   * Enable Desktop items
# }

# Wallpaper {
# * Add all folders in ~/media/images/wallpapers/dynamic_mac/.
#   * See https://www.dynamicwallpaper.club/docs on how to use custom dynamic images.
#   * See https://apple.stackexchange.com/questions/71070/how-to-change-desktop-wallpaper-for-all-virtual-desktops/415790#415790 on how to set wallpaper for all desktops.
# }

# Screensaer {
# * Check "Show with clock"
###  Hot Corners:
# Reference: https://blog.jiayu.co/2018/12/quickly-configuring-hot-corners-on-macos/
# Possible values:
#  0: no-op
#  2: Mission Control
#  3: Show application windows
#  4: Desktop
#  5: Start screen saver
#  6: Disable screen saver
#  7: Dashboard
# 10: Put display to sleep
# 11: Launchpad
# 12: Notification Center
# 13: Lock Screen
# * Top Left corner: NOP
defaults write com.apple.dock wvous-tl-corner -int 0
defaults write com.apple.dock wvous-tl-modifier -int 0
# * Top Right corner: Mission Control
defaults write com.apple.dock wvous-tr-corner -int 2
defaults write com.apple.dock wvous-tr-modifier -int 0
# * Bottom Left corner: Desktop
defaults write com.apple.dock wvous-bl-corner -int 4
defaults write com.apple.dock wvous-bl-modifier -int 0
# * Bottom Right corner: Put Display to Sleep
defaults write com.apple.dock wvous-br-corner -int 10
defaults write com.apple.dock wvous-br-modifier -int 0
# }



# Control Center {
# - Wi-Fi: uncheck
# - Bluetooth: uncheck
# - AirDrop: uncheck
# - Focus: when active
# - Keyboard Brightness: uncheck
# - Screen Mirroring: when active
# - Display: uncheck
# - Sound: always
# - Now Playing: unchecked
# * Other modules:
# - Accessibility Shourtcuts: uncheck all
# - Battery: Menu Bar, Control center. Show percentage
# - Fast User Switching: uncheck all
# * Menu Bar Only
# - Clock: nop
# - Spotlight: uncheck
# - Siri: check
# - Time machine: Show in Menu Bar
# }



# Desktop & Dock {
# * Uncheck "Show recent applications in Dock"
#defaults write com.apple.dock show-recents -bool false
# * Prevent accidential change of dock size or position by locking
#defaults write com.apple.Dock position-immutable -bool true

# * Add ~/ (Stack, List)  and ~/Downloads (Stack, Automatic) to dock.
# * For dual monitors: For all applications in dock: Right click > Option > assign to correct monitor and desktop.

# Dim hidden apps (CMD+H) in the dock.
defaults write com.apple.Dock showhidden -boolean yes

# Add two space separators in dock, to organize icons to correspond to which monitor I want them to be open on. Let them be order by the Spaces order too.
if ! defaults read com.apple.dock | grep -q spacer-tile; then
	defaults write com.apple.dock persistent-apps -array-add '{tile-data={}; tile-type="spacer-tile";}'
	defaults write com.apple.dock persistent-apps -array-add '{tile-data={}; tile-type="spacer-tile";}'
fi
# }

# Mission Control {
# * Unckeck "Automatically rearrange Spaces based on most recent use":
defaults write com.apple.dock mru-spaces -bool false
# }

# Language & Region {
# * Add English (US), Swedish, German
defaults write NSGlobalDomain AppleLanguages -array en-us sv-se de-de
# * Region: Germany
defaults write NSGlobalDomain AppleLocale en_DE
# }

# Network {
## CloudflareDNS
# * Ref: https://developers.cloudflare.com/1.1.1.1/setup/macos/
# * For each network connection, manually add DNS servers: 1.1.1.1 & 1.0.0.1
# * Could do this kind of, but don't know name of all adapters and dont' want to set for all
#	$ sudo networksetup -listallnetworkservices
#	$ sudo networksetup -setdnsservers Wi-Fi 1.1.1.1 1.0.0.1
# }

# Notifications & Focus {
## Notifications
# * Uncheck "Show notification on lock screen" for all apps individually, to not leak notifications.
# * Calendar.app: disable notifications if using Cron.app
## Focus
# * Turn on Do Not Disturb:
#  - From 22:00 to 08:00
#  -  When the display is sleeping
#  -  When mirroring to TVs and projectors
# }

# Security & Privacy {
## General
# * Allow apps downloaded from: Anywhere
sudo spctl --master-disable
# * Check: Require password <immediately> after sleep or screen saver begins
## FileVault
# * Enable FileVault, with recovery key.
## Firewall
# * Turn on firewall.
# Reference: https://superuser.com/a/1641741
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setglobalstate on
## Privacy
# * Apple Advertising > uncheck "Personalize Ads".
# }

# Display {
# * Move the white menu bar to the main monitor, so notifications etc. comes on it.
# * Check "Show mirroring options in the menu bar when available".
## Night Shift
# * Schedule: Sunset to Sunrise
# }

# Battery {
## Battery
# * Turn display off after: 5 min
## Power Adapter
# * Turn display off after: 60 min
# * Check "Prevent your mac from automatically sleeping when the display is off"
# }

# Keyboard {
## Keyboard
# * Key Repeat: fastest
#  Could make it even faster than allowed in System Settings by setting to 0 or 1, but that's too fast. Reference: https://stackoverflow.com/a/4490124
defaults write NSGlobalDomain KeyRepeat -int 2
# * Delay Until Repeat: short (2nd most right value)
defaults write -g InitialKeyRepeat -int 25
# * Turn off backlit after: 30 seconds.
# Non-touchbar MPBs {
# ** Uncheck "Use F1, F2 etc. keys as standard function keys".
# }
# Touchbar MBPs {
# ** Press FN key to: Show F1, F2, etc Keys.
# ** Check "Use F1, F2 etc. keys as standard function keys on external keyboards"
### Customtize Control Strip (button)
# * Most-right control strip buttons: Play/pause, Volume Slider, Mute, DnD
# * To the expanded control strip: replace Siri with Sleep button to the very far right.
# }
### Modifier Keys
# ** NOTE if need to swap fn and ctrl on internal keyboard, use karabiner-elements.
# * For internal keyboard:
#    - Set Caps Lock -> Escape
# * For external keyboard:
#    - Set Caps Lock -> Escape
#    (unless the keyboard is an Apple keyboard or has a "mac-switch" toggle):
#    - Set Option -> Command
#    - Set Command -> Option
## Text
# * Set word expansions based on ~/doc/tech/word_expansions.txt
# * Spelling: Automatic by Language
## Shortcuts
### Mission Control:
# * Show Notification Center: Cmd+F11
# * NOPE Enable shortcuts Ctrl+[1-5] for switching to Desktops. (Need to open 5 spaces for this to show up)
# * Do not Distrurb on/off: Cmd+F12
### Input Sources
# * Enable shortcuts for cycling input sources _backwards_ ("Select the previous input source") with CTRL+OPT+Space.
# * Check "Select the *previous* input source: ctrl+opt+space.
# * Uncheck "Select next source"
### Services
# * Disable "Text > Open man Page in Terminal" -- annoying
# * Disable "Text > Search man page Index in Terminal" -- annoying
### App Shortcuts
# * Maill.app: The default keyboard shortcut for archive an email, ctrl+cmd+a, conflicts with Todoist. Add another one.
#	Reference: https://www.lifewire.com/archive-keyboard-shortcut-os-x-mail-1172749
#   - Application: Maill.app
#   - Menu Title: Archive
#   - Keyboard shortcut: opt+a
# * Put mac to sleep, to use same keyboard shortcut as Jettison when it's not installed
#   Ref: https://apple.stackexchange.com/a/28168
#   - Application: All Applications
#   - Menu Title: Sleep
#   - Keyboard Shortcut: ctrl+opt+cmd+s
# Reason: keyboard shorcut clash on SHIFT+OPT with Amethyst's cycle layout.
## Input Sources
# * Add US, Swedish & German. NOTE should have been automatically added after adding these languages in Language & Region (AppleLanguages)
# * Check "Show Input menu in menu bar".
# }

# Mouse {
# * Uncheck "Scroll Direction: Natural. NOPE use scroll-reverser app instead, to have natural scroll with trackpad and normal scroll with external mouse.
#defaults write NSGlobalDomain com.apple.swipescrolldirection -bool false
# For setting a new speed, easiest is to set the value in System Settings, then read desired value $(defaults read -g com.apple.mouse...)
# * Tracking Speed:
#defaults write -g com.apple.mouse.scaling 0.875  # 1st vertical mouse, 1/2
defaults write -g com.apple.mouse.scaling 0.6875  # 2nd vertical mouse, 1/2 -1 notch
# * Scrolling speed: 3/4
defaults write -g com.apple.scrollwheel.scaling 0.75
# * Double-click speed: 3/4
defaults write -g com.apple.mouse.doubleClickThreshold 0.8

# }

# Trackpad {
## Point & Click
# * Check "Tap to click"
defaults -currentHost write -globalDomain com.apple.mouse.tapBehavior -int 1
## More Gestures
# * Check App Expose
defaults write com.apple.dock showAppExposeGestureEnabled -bool true
# }

# Touch ID {
# * Add a few fingers
# }

# Sound {
# * Uncheck "Play sound on startup"
# }

# Printers & Scanners {
# Automatically quit printer app once the print jobs complete.
defaults write com.apple.print.PrintingPrefs "Quit When Finished" -bool true
# }

# Internet Accounts {
# * Add Google account to get: Calendar, Contacts, mail etc.
# }

# Software Update {
# * Check "Automatically keep my Mac up to date".
# }

# Bluetooth {
# }

# Users & Groups {
# * Drag`n'drop a picture on to my profile.
# }

# Date & Time {
# }

# Accessibility {
## Zoom
# * Check "Use keyboard shortcuts to zoom".
# * Select Zoom style: Picture-in-picture
# ** Advanced > Controls tab > Uncheck "Hold Ctrl+Opt to temporarily toggle zoom" as this interferece with shortcut to toggle input language, and leave mouse cursor hidden after toggling input source.
# }

# Sharing {
# * Set "Computer Name". Unfortunately different from system hostname (below).
# * Set computers hostname.
# Semi-idempotent; assume setting hostname is only desired to do 1 time, and that a default hostname is *.local something.
if  hostname | grep -q .local; then
new_hostname=
while [ -z "$new_hostname" ]; do
	echo -n "Enter new computer hostname: "
	read new_hostname
done;
sudo scutil --set HostName $new_hostname
fi


# * If want SMB file sharing:
#  - Check File Sharing
#  - add ~/pub folder
#  - Click Options and enable current user
# }

# Passwords {
## Password Optons
# * Disable "AutoFill passwords" to stop getting strong password suggestions in Safari, conflicting with password manager. Ref:https://discussions.apple.com/thread/252704886
# }
# }

# Archive Util.app {
# * Uncheck "Reveal expanded items in Finder"
# }

# App Store {
# * Uncheck "In-App Ratings & Reviews"
# }

# Calendar.app {
# * Sidebar: check "Siri Suggestions" calendar
## General:
# * Default calendar: my default Google calendar
## Accounts
# * Disable iCloud account
### Google
# * Refresh Calendars: every 5 minutes
## Alerts (for Google)
# * Events: None
# * All Day Events: None
# * Birthdays: None
## Advanced
# * Check "Turn on time zone support"
# * Check "Show events in year view"
# * Check "Show week numbers"
# }

# Finder {
## View
# ** Show Path Bar
defaults write com.apple.finder ShowPathbar -bool true
# ** Show Status Bar
defaults write com.apple.finder ShowStatusBar -bool true
### Show View Options
# * First make sure to be in Column view before entering this menu
# * Check "Always open in Column view" > Use as default
# Four-letter codes for the view modes: `icnv`, `Nlsv`, `clmv`, `glyv`
defaults write com.apple.finder FXPreferredViewStyle -string "clmv"
# * Also open this dialog while being in ~/, then check "Show Library Folder". Reference: https://appletoolbox.com/unhide-access-mac-library-folder/:
chflags nohidden ~/Library
## Preferences
### General
# *** Show on desktop: connected servers, disks
defaults write com.apple.finder ShowExternalHardDrivesOnDesktop -bool true
defaults write com.apple.finder ShowMountedServersOnDesktop -bool true
defaults write com.apple.finder ShowRemovableMediaOnDesktop -bool true
# *** New Finder window shows: ~/
#defaults write com.apple.finder NewWindowTargetPath -string "file:///$HOME/"  # Does not work!
### Tags
# * Show all
### Sidebar
# *** Hide: Airdrop, Documents, Downloads, Movies, Music, Pictures, Recent Tags
# View > Customize Control Strip > Add "New Folder" shortcut
### Advanced
# * Check: Show all file extensions in Finder
defaults write NSGlobalDomain AppleShowAllExtensions -bool true
# * Uncheck: Show warning before changing an extension.
defaults write com.apple.finder FXEnableExtensionChangeWarning -bool false
# * Keep folders on top: In windows when sorting by name
defaults write com.apple.finder _FXSortFoldersFirst -bool true



## Misc
# * Sidebar Favourites, add to make it
# - ~/
# - ~/.dropbox-data/Dropbox/
# - ~/Desktop/
# - ~/Documents
# - ~/Downloads
# - ~/media/
# - ~/media/images/screenshots/
# - ~/media/music/production/
# - ~/src/github.com/
# - ~/src/github.com/erikw/erikw.me-jekyll/
# - ~/tmp/
# - ~/.config/finder/---------/
# - /Applications
# - /private/tmp
# - /Volumes/ext0/daw/ableton/projects
# - /Volumes/ext0/daw/plugins/
# - /Volumes/ext0/music/samples/


# Show hidden files in Finder.
#defaults write com.apple.finder AppleShowAllFiles YES

# Save to disk (not to iCloud) by default
#defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false

# Enable snap-to-grid for icons on the desktop and in other icon views
/usr/libexec/PlistBuddy -c "Set :DesktopViewSettings:IconViewSettings:arrangeBy grid" ~/Library/Preferences/com.apple.finder.plist
/usr/libexec/PlistBuddy -c "Set :FK_StandardViewSettings:IconViewSettings:arrangeBy grid" ~/Library/Preferences/com.apple.finder.plist
/usr/libexec/PlistBuddy -c "Set :StandardViewSettings:IconViewSettings:arrangeBy grid" ~/Library/Preferences/com.apple.finder.plist

# Hide default un-hidable folders in home directory from Finder.
# Reset with $ chflags nohidden <dir>
#chflags hidden ~/Documents
#chflags hidden ~/Downloads
#chflags hidden ~/Movies
#chflags hidden ~/Music
#chflags hidden ~/Pictures
#chflags hidden ~/Public
# }

# Menu Bar {
# * On the notification/widget dropdown (click on clock), keep the following widgets
#  - Calendar: Month
#  - Calendar: Up next (M)
#  - Weather: Forecast (L)
# }

# Mail.app {
# * Drag my Gmail account to the top in the mailboxes left side list and collapse all other.
# * In the top toolbar: move archive|trash|span button cluster all the way to the left for easier access to most commonly used button.
# * In the New Mail window toolbar, click Aa to activate formatting options.
## Settings
### General
# * Uncheck "Follow Up Suggestions"
### Accounts
# * Disable iCloud
### Viewing
# * Check "mark all messages as read when opening a conversation"
### Composing
# * Message format: plain text. NOPE use Rich Text, it's not the 90s anymore....
### Signatures
# * Add new signature "Standard".
### Privacy
# * Turn off everything
# }

# Music.app {
## Playback
# Enable "Sound Enhancer" when using desktop speaker.
## Files
# * Add music folder.
# * Check "Keep music Media folder organized"
# * Check "Copy files to Music Media folder when adding to library"
## Advanced
# * Check "Automatically update artwork"
# }

# Photos.app {
## General
# * CHECK "Copy items to the photos library"
# * Check Sharing: "Include location information"
## iCloud
# * Select "Download Originals to this Mac"
# }

# Terminal.app {
#Profiles
## Shell
# * When the shell exists: close if the shell exited cleanly
# }

# Safari.app {
# Preferences
## General
# * Homepage: favorites://
#   * Set to Start Page. Ref: https://forums.macrumors.com/threads/make-safaris-startpage-your-homepage.2289398/
# * Remove history items: manually
# * Uncheck "Open safe files after downloading"
## Privacy
# * Uncheck "Allow privacy-preserving measurement of ad effectiveness"
## Advanced
# * Check "Smart search field: show full website address"
# * Default encoding: UTF-8
# * Check "Show developer menu in menu bar"

# Customized Toolbar:

# Other settings
# * Prevent spell auto-correct: Edit > Spelling & Grammar > uncheck "Correct Spelling Automatically."

# NOPE actually let's skip this, can't close last tab to start screen / home page.
# * Prevent closing window on last tab. Ref: https://talk.macpowerusers.com/t/stop-safari-from-closing-window-when-closing-last-tab/21160
# * System Settings > Keyboard > Keyboard Shortcuts > App Shortcuts > + Application: Safari.app, Menu Title: Close Tab, Shortcut: cmd+w
# Or programatically. Ref: https://apple.stackexchange.com/a/260916
#defaults write com.apple.Safari NSUserKeyEquivalents -dict-add 'Close Tab' '<string>@w</string></dict>'
#defaults write com.apple.universalaccess com.apple.custommenu.apps -array-add '<string>com.apple.Safari</string>'


# See current settings with:  $ defaults read com.apple.Safari
# Prevent closing window when only pinned tabs left. Ref: https://apple.stackexchange.com/a/260916
defaults write com.apple.Safari NSUserKeyEquivalents -dict-add 'Close Tab' '<string>@w</string></dict>'
defaults write com.apple.universalaccess com.apple.custommenu.apps -array-add '<string>com.apple.Safari</string>'
# Show the full URL in the address bar
defaults write com.apple.Safari ShowFullURLInSmartSearchField -bool true
# Safari opens with last session
defaults write com.apple.Safari AlwaysRestoreSessionAtLaunch -bool true
# Enable the Develop menu and the Web Inspector in Safari
defaults write com.apple.Safari IncludeDevelopMenu -bool true
# Update extensions automatically
defaults write com.apple.Safari InstallExtensionUpdatesAutomatically -bool true
# Show favorites bar in Safari by default:
defaults write com.apple.Safari ShowFavoritesBar -bool true
# Home page
defaults write com.apple.Safari HomePage -bool true

killall Safari
# }

# Misc {
# Change screenshot destination from Desktop to something sane.
mkdir -p $HOME/media/images/screenshots
defaults write com.apple.screencapture location $HOME/media/images/screenshots

# Disable the thumbnail preview that delays saving the screenshot to disk.
# Reference: https://apple.stackexchange.com/questions/340170/turn-off-macos-mojave-screenshot-preview-thumbnails-with-defaults-write-command
defaults write com.apple.screencapture show-thumbnail -bool FALSE


# iTerm2 shell integration
# Reference: https://www.iterm2.com/documentation-shell-integration.html
#curl -L https://iterm2.com/misc/install_shell_integration.sh | bash

# Media shortcuts for external keyboard: follow instructions in ~/bin/macos_media_control/info.txt

# Move any window with ctrl+cmd+click+drag, like typical Linux WMs.
# Ref: https://mmazzarolo.com/blog/2022-04-16-drag-window-by-clicking-anywhere-on-macos/
defaults write -g NSWindowShouldDragOnGesture -bool true

# Ignore external disks that are for other systems e.g. encrypted Time Machine disk.
# Ref: https://discussions.apple.com/docs/DOC-7942
# Ref: https://akrabat.com/prevent-an-external-drive-from-auto-mounting-on-macos/
# * $ UUID=$(diskutil info /dev/disk5s1 | grep "Volume UUID" | awk '{print $3}')
# * $ sudo vifs  # Edits /etc/fstab
# * Enter:
#   UUID=$UUID none apfs rw,noauto
# * Restart computer to test.


# Prepare user's crontab header.
set +o errexit
read -r -d '' tab_new <<'EOF'
# Environment
#SHELL=/bin/sh
# ~/ works, but not $HOME strangely enough.
PATH=~/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/usr/local/sbin:/sbin:/usr/sbin:/usr/bin:/bin
# Reference: crontab(5).
# Helper: https://crontab.guru/
# Order of crontab fields
# minute hour mday month wday	command


#30	 19	 *	 *	 *	if_fail_do_notification restic_backup.sh
#@monthly			   if_fail_do_notification restic_check.sh
EOF
set -o errexit
tab_old=$(crontab -l)
if ! crontab -l | grep -q "# Environment"; then
	if [ -n "$tab_old" ]; then
		tab_new=$(printf "%s\n%s\n" "$tab_old" "$tab_new")
	fi
	echo "$tab_new" | crontab -
fi

# }

killall Dock Finder
echo "Please logout or restart for all settings to take effect."