# Admin & Account Setup

One-time or occasional account/host setup tasks — not day-to-day
operation shortcuts, which live in the
[main cheat sheet](cheatsheet.md).

## Personal directories & sync

| Command | Description |
|---|---|
| `create_personal_dir` | Create/verify a personal working directory under `/sf/bernina/config/personal/<username>` |
| `setup-network-drives` | Mount `~/network_drives` (PSI home, group shares) now; asks for `kinit` if there is no Kerberos ticket. Run it first, in a terminal, when the network home is missing (gopass "not initialized", new empty Firefox shared profile, dangling `~/.ssh` links). PSI-provided, linked here from `/usr/local/bin` |
| `create-links-in-home` | Force-apply PSI's Partially Shared Home symlinks now (normally applied automatically at login) |
| `migrate_to_network_drive` | Move a local dotfile onto PSI's Partially Shared Home and register it for sync across hosts |
| `sync_personal_config` | Seed `.ipython`/`.condarc` onto PSI's Partially Shared Home for cross-host sync |

If `~/network_drives/home` is a plain directory instead of a link, something wrote there before the mount finished; `setup-network-drives` can't fix that by itself. Close what uses it, then
`mv ~/network_drives/home ~/network_drives/home.broken && setup-network-drives`.

## gopass secrets

| Command | Description |
|---|---|
| `gopass_bernina_setup` | One-shot onboarding for a human PSI account joining the gopass store |
| `gopass_bernina_service_setup` | One-shot setup: give a service account (e.g. `gac-bernina`) access to the gopass store |

## Launcher editor

| Command | Description |
|---|---|
| `launcher-editor` | Edit the Bernina launcher in your own copy (`~/launcher_config`), preview it (F5) and publish it live; `--live` views the deployed one read-only. On `gac-*` accounts it first asks for your user name and runs as you (`become`, password in a terminal) |

- The app is a checkout of `github.com/swissfel/launcher_editor` in
  `/sf/bernina/applications/launcher_editor`, run without installing
  (bpy312 Python). Update it with
  `git -C /sf/bernina/applications/launcher_editor pull`.
- It edits the gitea repository `autodeploy_config/sf_bernina_launcher`;
  Publish pushes to it, and gitea's autodeploy copies it to
  `/sf/bernina/config/launcher`. Publishing needs a gitea account, your
  SSH key in gitea and Write access on that repository. How to get them
  (same for every area's `autodeploy_config/sf_<area>_launcher`):
  [PSI: gitea and autodeploy](https://github.com/swissfel/launcher_editor#psi-gitea-and-autodeploy)
  in the editor's README.
- On the consoles `~/.ssh/id_ed25519` links into `~/network_drives`: if
  `ssh -T git@gitea.psi.ch` says `Permission denied (publickey)`, run
  `setup-network-drives` first.

This is a hand-picked subset of the full script index (the "Scripts in
this directory" section of the main sheet still lists every one of
these too, alongside everything else) — pulled out here specifically
because they're setup/onboarding tasks a supporter reaches for
occasionally, not something to hunt for in the full operational
reference.