diff --git a/.gitignore b/.gitignore
index aa4cfeb..3151ce4 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@
 *.pem
 GITEA_API.md
 .backup/
+Brewfile.lock.json
diff --git a/Brewfile b/Brewfile
new file mode 100644
index 0000000..966da7e
--- /dev/null
+++ b/Brewfile
@@ -0,0 +1,22 @@
+# Applied by scripts/setup.sh via `brew bundle`. Ableton Live is NOT here — licensed download.
+brew "bash"
+brew "coreutils"
+brew "findutils"
+brew "gnu-sed"
+brew "grep"
+brew "gawk"
+brew "gnu-tar"
+brew "iproute2mac"   # gives `ip a`
+brew "rsync"         # macOS ships openrsync; backup.sh needs real rsync
+brew "git"
+brew "tmux"
+brew "htop"
+brew "ripgrep"
+brew "fd"
+brew "jq"
+brew "wget"
+brew "tree"
+cask "kitty"
+cask "rectangle"
+cask "tailscale-app"
+cask "font-jetbrains-mono"
diff --git a/config/bashrc b/config/bashrc
new file mode 100644
index 0000000..34f61e3
--- /dev/null
+++ b/config/bashrc
@@ -0,0 +1,14 @@
+# ~/mac/config/bashrc — sourced by ~/.bash_profile (marker block written by setup.sh)
+eval "$(/opt/homebrew/bin/brew shellenv)"
+for d in coreutils findutils gnu-sed grep gawk gnu-tar; do
+  PATH="/opt/homebrew/opt/$d/libexec/gnubin:$PATH"
+done
+export PATH
+export EDITOR=vim
+export CLICOLOR=1
+alias ls='ls --color=auto'
+alias ll='ls -lah'
+alias grep='grep --color=auto'
+alias opus='claude --dangerously-skip-permissions'
+HISTSIZE=50000; HISTFILESIZE=100000; shopt -s histappend
+PS1='\[\e[1;33m\]\u@\h\[\e[0m\]:\[\e[1;34m\]\w\[\e[0m\]\$ '
diff --git a/config/kitty.conf b/config/kitty.conf
new file mode 100644
index 0000000..31cb488
--- /dev/null
+++ b/config/kitty.conf
@@ -0,0 +1,81 @@
+# Sethian Terminal Theme - optimized for web/mobile via Xpra
+
+# Large font for mobile readability
+font_family      JetBrains Mono
+font_size        16.0
+bold_font        auto
+italic_font      auto
+
+# Sethian colors
+foreground       #e0e0e0
+background       #0a0a0a
+background_opacity 1.0
+
+cursor           #D35400
+cursor_shape     beam
+
+selection_foreground #0a0a0a
+selection_background #D35400
+
+# Tab bar - bottom, minimal, touch-friendly
+tab_bar_edge     bottom
+tab_bar_style    powerline
+tab_bar_min_tabs 1
+active_tab_foreground   #0a0a0a
+active_tab_background   #D35400
+inactive_tab_foreground #999999
+inactive_tab_background #1a1a1a
+tab_title_max_length    20
+
+# Window layout - no wasted space
+window_padding_width 2
+hide_window_decorations yes
+placement_strategy top-left
+
+# Scrollback
+scrollback_lines 10000
+
+# Bell
+enable_audio_bell no
+visual_bell_duration 0.1
+visual_bell_color #D35400
+
+# URL handling
+url_color #D35400
+url_style curly
+
+# Normal colors
+color0  #1a1a1a
+color1  #cc3333
+color2  #4e9a06
+color3  #D35400
+color4  #3465a4
+color5  #75507b
+color6  #06989a
+color7  #d3d7cf
+
+# Bright colors
+color8  #555753
+color9  #ef2929
+color10 #8ae234
+color11 #fce94f
+color12 #729fcf
+color13 #ad7fa8
+color14 #34e2e2
+color15 #eeeeec
+
+# Keyboard shortcuts for tab management
+map ctrl+shift+t new_tab
+map ctrl+shift+w close_tab
+map ctrl+shift+right next_tab
+map ctrl+shift+left previous_tab
+
+# Performance
+repaint_delay 16
+input_delay 2
+sync_to_monitor no
+
+# --- macOS ---
+macos_option_as_alt yes
+hide_window_decorations titlebar-only
+macos_quit_when_last_window_closed yes
diff --git a/config/ssh_homelab b/config/ssh_homelab
new file mode 100644
index 0000000..30abfad
--- /dev/null
+++ b/config/ssh_homelab
@@ -0,0 +1,23 @@
+# Included from ~/.ssh/config. Key ~/.ssh/id_ed25519 is generated by setup.sh;
+# only pve173 is authorized so far (rrsync-restricted, for backup.sh).
+Host pve173
+    HostName 192.168.0.173
+    User root
+Host pve112
+    HostName 192.168.0.112
+    User root
+Host pve197
+    HostName 192.168.0.197
+    User root
+Host pve241
+    HostName 192.168.0.241
+    User root
+Host steel141
+    HostName 192.168.0.141
+    User seth
+Host bedroom
+    HostName 192.168.0.235
+    User seth
+Host *
+    IdentityFile ~/.ssh/id_ed25519
+    ServerAliveInterval 30