Hacker News Reader

Comment by cipehr | Hacker News Reader

I feel similarly. For me it’s less about my unique customizations and more about this paranoia of there being something remotely sensitive in my ssh configs or something… the idea of hostnames, ips, domains, etc “leaking” worries me.

I use chezmoi to manage my dotfiles, if anyone has any advice on how to handle these worries I am all ears. I would love to share mine, even to just be able to point coworkers at my config.

View on HN

I get around that by sourcing a separate file in my config that I don't make public. Those are my company-specific settings.

chezmoi includes secret scanning from https://gitleaks.io/ by default to catch when you accidentally add a file with a secret in it. To be even more confident, you should add gitleaks as a git hook to your repo however.

How do you automatically set up the hooks, e.g. when you clone the repo on a new computer?

Also, is there a way to automatically edit a chezmoi managed file in the chezmoi directory? I accidentally type stuff like "nvim .bashrc" way too often and then forget I never added the changes to chezmoi. It would be neat if there was a vim plugin or something that just opened the chezmoi file instead if it's managed.

Please can you open an issue or discussion for these questions on https://github.com/twpayne/chezmoi - this way more people will both be able to help and more people will see the answer.

I will do that. I apologize for raising it here in the first place and thank you for creating and maintaining a great piece of software!

In chezmoi you can use gpg encryption: https://www.chezmoi.io/user-guide/encryption/

Reply on news.ycombinator.com