this relies on chezmoi
if you're looking for my old dotfiles, see here
sh -c "$(curl -fsLS get.chezmoi.io/lb)" -- init --apply ar1a
my neovim config resides at ar1a/nvim-cfg, but chezmoi will pull it for you
secrets rely on op
being available on the path, make sure you setup
1password cli and
either the GUI or, if headless, use service
accounts
alongside ~/.config/chezmoi/chezmoi.toml
containing:
[onepassword]
mode = "service"
to add a new secret do something like
# one of
$ eval $(op signin)
$ export OP_SERVICE_ACCOUNT_TOKEN=token
# may be necessary
$ op document create $file --tags chezmoi --title $file
$ chezmoi add --template $file
and edit template accordingly (probably with {{ onepasswordRead "op://app-prod/db/password" }}
)