2 ms·

I use direnv with a global gitignore, 1Password and chezmoi. There’s also secrets pulled down from vault.