rage

chezmoi supports encrypting files with rage.

To use rage, set age.command to rage in your configuration file, for example:

TOMLYAMLJSON

~/.config/chezmoi/chezmoi.toml

encryption = "age"
[age]
    command = "rage"

~/.config/chezmoi/chezmoi.yaml

encryption: age
age:
  command: rage

~/.config/chezmoi/chezmoi.json

{
    "encryption": "age",
    "age": {
        "command": "rage"
    }
}

Note

Make sure encryption is added to the top level section at the beginning of the config, before any other sections.

Then, configure chezmoi as you would for age.