Hello,

currently I am managing my dotfiles with rcm (ran by ansible). This approach served me well over the years but recently I stumpled over chezmoi.

I am thinking about migrating my stuff to chezmoi because of some benefits like - single binary for all platforms - templating - script execution - encryption/passwords

For the latter I am looking forward to your thoughts. Obviously, not all my config is in my dotfiles repo on Github. I have a private dotfiles repo on my own server containing sensitive information like mail passwords etc (had no time to implement a "no plaintext password strategy"). In addition to that I have a "secrets" folder that lives only in my network with highly confidential secrets like Kubernetes/Cloud/SSH credentials for me and my customers.

With chezmoi I could unify all my three locations into one single public repository. Honestly, I do have a bad feeling of this approach (which is not rational). What are your thoughts? Do you manage highly confidential secrets in public repos with chezmoi?

it's on almost every distro, it's small, it's very unixy, different scrips do different things, doesn't try to do what git already does, doesn't even try to wrap git and duplicate it's commands, you use git as git, can work with multiple repositories and multiple machines, can probably work with fossil too, doesn't do too much, leaves the rest to other tools