rage

chezmoi supports encrypting files with rage.

To use rage, set age.command to rage in your configuration file, for example:

~/.config/chezmoi/chezmoi.toml

encryption = "age"
[age]
    command = "rage"

Then, configure chezmoi as you would for age.