Himalaya

himalaya

CLI to manage emails.

Detected by himalaya | macOS, Linux, Windows |github.com

Sync it himalaya.toml

Sync rules

What travels, what stays, what never leaves

Synced2 paths, copied whole to your other machines

[configHome]/himalaya/config.tomlpattern

~/.config/himalaya/config.toml

Never synced1 credential path, never uploaded in any form

~/.himalayarc

Otty extracts these into your secret store instead of syncing the files. Every generated manager config below leaves them out too.

Secret fieldsInside a file that otherwise syncs

[configHome]/himalaya/config.tomltoml fields at

accounts.*.imap.sasl.plain.password.rawaccounts.*.imap.sasl.login.password.rawaccounts.*.imap.sasl.oauthbearer.token.rawaccounts.*.imap.sasl.xoauth2.token.rawaccounts.*.imap.sasl.scram-sha-256.password.rawaccounts.*.smtp.sasl.plain.password.rawaccounts.*.smtp.sasl.login.password.rawaccounts.*.smtp.sasl.oauthbearer.token.rawaccounts.*.smtp.sasl.xoauth2.token.rawaccounts.*.smtp.sasl.scram-sha-256.password.rawaccounts.*.jmap.auth.header.rawaccounts.*.jmap.auth.bearer.token.rawaccounts.*.jmap.auth.basic.password.rawaccounts.*.gmail.auth.token.rawaccounts.*.msgraph.auth.token.raw

The rest of the file syncs. Only these values are lifted out and kept in your secret store.

Secret fieldsInside a file that otherwise syncs

~/.config/himalaya/config.tomltoml fields at

The rest of the file syncs. Only these values are lifted out and kept in your secret store.

Excluded

Nothing. Himalaya writes no caches or state in your home directory.

Himalaya in your home directory Every rule on this page, by file

Lifted into your secret store; the rest of the file syncs.

· ~/.himalayarc Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/himalaya. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps the credential file out.