use https to pull dotfiles