otty / dotfiles

All tools/curl

curl

A command line tool and library for transferring data with URL syntax.

Detected by curl | macOS, Linux, Windows |curl.se

Sync it curl.toml

Sync rules

What travels, what stays, what never leaves

Synced5 paths, copied whole to your other machines

~/.curlrc

~/_curlrc

~/.config/curlrc

%APPDATA%/.curlrc

%APPDATA%/_curlrc

Never synced1 credential path, never uploaded in any form

~/.netrc

Otty extracts these into your secret store instead of syncing the files. Every generated manager config below leaves them out too.

Stays on this machineInside a file that otherwise syncs

~/.curlrclines starting with cacert, capath

…

user-agent = "curl/8.7.1"

# Homebrew's CA bundle on this Mac.

cacert = /opt/homebrew/etc/ca-certificates/cert.pemmachine-local

capath = /opt/homebrew/etc/openssl@3/certsmachine-local

Otty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.

Stays on this machineInside a file that otherwise syncs

~/_curlrclines starting with cacert, capath

…

location

connect-timeout = 10

cacert = C:/Users/octocat/scoop/apps/curl/current/bin/curl-ca-bundle.crtmachine-local

capath = C:/Users/octocat/scoop/apps/curl/current/bin/certsmachine-local

Otty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.

Stays on this machineInside a file that otherwise syncs

~/.config/curlrclines starting with cacert, capath

…

location

retry = 3

cacert = /etc/ssl/certs/ca-certificates.crtmachine-local

capath = /etc/ssl/certsmachine-local

Otty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.

Stays on this machineInside a file that otherwise syncs

%APPDATA%/.curlrclines starting with cacert, capath

…

show-error

location

cacert = C:/Users/octocat/AppData/Roaming/curl/curl-ca-bundle.crtmachine-local

capath = C:/Users/octocat/AppData/Roaming/curl/certsmachine-local

Otty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.

Stays on this machineInside a file that otherwise syncs

%APPDATA%/_curlrclines starting with cacert, capath

…

show-error

location

cacert = C:/ProgramData/curl/curl-ca-bundle.crtmachine-local

capath = C:/ProgramData/curl/certsmachine-local

Otty splits these out before upload and puts each machine’s own back on the way down — no templates to write. The lines above come from this tool’s test fixture in the catalog.

Excluded

Nothing. curl writes no caches or state in your home directory.

curl in your home directory Every rule on this page, by file

…

user-agent = "curl/8.7.1"

# Homebrew's CA bundle on this Mac.

cacert = /opt/homebrew/etc/ca-certificates/cert.pemmachine-local

capath = /opt/homebrew/etc/openssl@3/certsmachine-local

Each machine keeps its own copy of these.

…

location

connect-timeout = 10

cacert = C:/Users/octocat/scoop/apps/curl/current/bin/curl-ca-bundle.crtmachine-local

capath = C:/Users/octocat/scoop/apps/curl/current/bin/certsmachine-local

Each machine keeps its own copy of these.

…

location

retry = 3

cacert = /etc/ssl/certs/ca-certificates.crtmachine-local

capath = /etc/ssl/certsmachine-local

Each machine keeps its own copy of these.

· ~/.netrc Never synced

…

show-error

location

cacert = C:/Users/octocat/AppData/Roaming/curl/curl-ca-bundle.crtmachine-local

capath = C:/Users/octocat/AppData/Roaming/curl/certsmachine-local

Each machine keeps its own copy of these.

…

show-error

location

cacert = C:/ProgramData/curl/curl-ca-bundle.crtmachine-local

capath = C:/ProgramData/curl/certsmachine-local

Each machine keeps its own copy of these.

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/curl.tomlThe file this page is generated from

id = "curl"

name = "curl"

homepage = "https://curl.se"

description = "A command line tool and library for transferring data with URL syntax."

icon = "SimpleIcons:curl"

detect = ["curl"]

# curl(1) under --config: with no -K on the command line curl looks for a

# default config file, trying "$CURL_HOME/.curlrc", then

# "$XDG_CONFIG_HOME/curlrc" (added in 7.73.0), then "$HOME/.curlrc". On

# Windows it also checks "%USERPROFILE%\.curlrc" and "%APPDATA%\.curlrc", and

# in every directory it accepts both the ".curlrc" and the "_curlrc"

# spelling, preferring the former. The %USERPROFILE% pair is spelled "~/"

# here — the two are the same directory and the same fixture file, so listing

# both would leave a rule that can never name every spelling it has to.

# $CURL_HOME is not listed either: it names a directory the consumer cannot

# resolve.

paths = [

"~/.curlrc",

"~/_curlrc",

"~/.config/curlrc",

"%APPDATA%/.curlrc",

"%APPDATA%/_curlrc",

]

exclude = []

# curl(1) under --netrc: "Make curl scan the .netrc file in the user's home

# directory for login name and password". The whole file is login names and

# passwords.

secret = ["~/.netrc"]

# Parsed once at startup by a process that then exits; rewriting it mid

# transfer cannot disturb anything.

side_effect = false

# cacert and capath name a CA bundle installed on this machine — /etc/ssl on

# one distro, a Homebrew prefix on the next, a drive letter on Windows. That

# is the platform deciding, not the machine: every box of the same kind

# installs the bundle in the same place, so the line travels to one of those

# and nowhere else. Every spelling is listed: a rule naming only the

# first is a rule that does not run for a user whose file is one of the

# others, and curl reads whichever it finds.

[[machine_lines]]

file = [

"~/.curlrc",

"~/_curlrc",

"~/.config/curlrc",

"%APPDATA%/.curlrc",

"%APPDATA%/_curlrc",

]

match = { prefix = ["cacert", "capath"] }

scope = "platform"

# No secret_paths on the curlrc itself. A `user = "name:password"` line is

# possible, but the match syntax is a prefix and "user" also opens

# "user-agent", which is a preference every machine should keep. Marking the

# credential would mean marking the user agent too, so the consumer's own

# content scan is the right layer for it.

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/curl. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps the credential file out. None of them splits cacert and capath for you — that part is Otty’s own sync, or a template you write by hand.