[theshrike79]

Also encryption with `age`.

My ssh config has actual domain names of servers I don't want to publish to the whole internet so that file is encrypted on my public github dotfiles repo.

Chezmoi automatically decrypts it on `chezmoi update` and I don't need to think about it much unless I'm editing it.

[kstrauser]

Oh, that's slick. I haven't needed to do that yet and I keep my stuff in a private repo, but see the benefits to it.

[theshrike79]

I feel that "building in public" works - even for my dotfiles. And it forces me to properly consider what data is public and what isn't from the start.