For anyone interested, I solved this problem for my own needs using what I think is a unique approach, available here: https://github.com/rustyio/git-gpg https

For anyone interested, I solved this problem for my own needs using what I think is a unique approach, available here: https://github.com/rustyio/git-gpg https://github.com/rustyio/git-gpg As the name suggests, it uses gpg to encrypt and decrypt the data. Unlike git-encrypt and git-crypt, it doesn't use smudge/clean filters. Instead, it uses a special command (`git-gpg push $remote`) to push changes to a local unencrypted mirror of the remote repository. It then encrypts any newly created git objects, and finally rsyncs the new objects to the remote repository. So the remote is just a directory of zipped, gpg-encrypted files. It has worked well for me over the past two years, but I don't expect that it solves every edge case. Feedback welcomed through issues and pull requests.